fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000000140)="ed41000000040000ddf4655fdef46576148523dddb1820795fdef4655f000000000000040002000000050000000d00"/73, 0x49, 0x1500}, {&(0x7f0000010f00)="2000000060ed753160ed753100000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/192, 0xc0, 0x1e00}, {&(0x7f0000011100)="ed4100003c000000def4655fdef4655fdef4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000322728ea0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000def4655fdef4655fdef4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feb0eba70000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000def4655fdef4655fdef4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3838303732353333342f66696c65302f66696c653000000000000000000000000000000000000000000000e06e12cc0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="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", 0x1a0, 0x21fd}, {&(0x7f0000011600)="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", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}, {&(0x7f0000000640)="0000000000040000000000000000000000000800ba1b7b000000000000000000f624bed7a76e67df38feb084e4bf3b77cff84d6c7ce8a7e12d4a24eaef72ab8c3630cd69f298daeb40e8e34494a85534bec073a1d4bf1c701f3c71ce7293c697ee38244f6c6143b239c73fc35f8e19b2e635612e14f020d6b4f7dc2e811c7cc8a32df6dab39bf8e747f0114fc40e4a1ca25072c326bae33b17c2d51323af6f18f587d3cd88145c81dcd8213f544ddf944a946b7981153f1399928b5d259274333f2e48cac87e687f7e737c68f2baba3f9882dd01d60328234705fbea596b76b655436ceada5f8009d3968f0aeffc615904b77dd30c9b34b037722f1b5f14e6fae7036bf6126ca1cacb883bd29e61e8490000010000000000dd0101f956719ea262a97c0e2db5768fa62e5d45ca04262b85f266f87fd9cb07fa2e65f48b687c36cf2108bab51a199b8cc2bd2a8c4fdfa8862f0643a97b4ec4f02983000000000002824485b1856692ea66b6e1b887db61d37179d56e400b642f8470f6ddb3a25f338314b799cd51af0f88a42e0a6efd352076a1f78ecca81eafab44ccba79cdc05c5c16811e061e3600ed6eb0f183c932c00e80f9960d2a9ca7f3b18f61c1e6519e72aa3ce2f065306ad851d1256c8fc0df6c2d3f8773f1e769c39f787d510d2e05735b1053ea331e75b68d208370971fcf69e3b6b818aac3fc5697e4a137f04afb37ed0f0a0ec84253028682fc0e1d3ae3b6a923a5bdc7364a764092761d188c834c1b8db8e42c", 0x227, 0x4}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x4400}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x4800}, {&(0x7f0000011d00)="0000000000040000000000000000000000000000000000000000000000008000", 0x20, 0x4c00}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x5000}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x5400}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x5800}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000012300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6400}], 0x0, &(0x7f0000012800))
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80102, 0x0)
name_to_handle_at(r0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000600), 0x0)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x80000, 0x3)

[ 1389.775046][ T4130] loop0: detected capacity change from 0 to 512
[ 1390.157704][ T4130] EXT4-fs (loop0): Unrecognized mount option "mJ´·KïFðãÆU
6" or missing value
[ 1390.187359][ T4134] loop1: detected capacity change from 0 to 512
[ 1390.355153][ T4134] EXT4-fs error (device loop1): __ext4_iget:4849: inode #2: block 1280: comm syz-executor.1: invalid block
[ 1390.413966][ T4134] EXT4-fs (loop1): get root inode failed
[ 1390.415406][ T4134] EXT4-fs (loop1): mount failed
[ 1391.808051][ T4130] loop0: detected capacity change from 0 to 512
00:23:11 executing program 0:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0x32, 0x4, &(0x7f0000000680)})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2e, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000001000008000000d2420000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323937363736343400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000def361b116dd4bb681391964ccf077da010040000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003700000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010f00)="20000000100de17a100de17a00000000d0f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f00"/160, 0xa0, 0x1600}, {&(0x7f0000011100)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000400000000200000004000000420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f00"/160, 0xa0, 0x1700}, {&(0x7f0000011200)="c041000000300000d0f4655fd0f4655fd0f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1e00}, {&(0x7f0000011300)="20000000000000000000000000000000d0f4655f00"/32, 0x20, 0x1e80}, {&(0x7f0000011400)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000003f81d1a200000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x1f00}, {&(0x7f0000011500)="ed8100001a040000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000600000000000000000000000000000000000000000000000000000000000000000000000000000009caef32e00000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011600)="ffa1000026000000d2f4655fd2f4655fd2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332393736373634342f66696c65302f66696c6530000000000000000000000000000000000000000000000ae0cdf100000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011700)="ed8100000a000000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af301000400000000000000000000000100000070000000000000000000000000000000000000000000000000000000000000000000000000000000a3d3ad5b00000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000000002ea06015400000000000600000000000000786174747231000006014c0000000000060000000000000078617474723200000000000000000000000000000000000000000000000000000000000078617474723200007861747472310000ed81000028230000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800010000000af3010004000000000000000000000009000000800000000000000000000000000000000000000000000000000000000000000000000000000000002d4ab06e00000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011900)="ed81000064000000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000008880d39500000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2400}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011b00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xc000}, {&(0x7f0000012800)="0200"/32, 0x20, 0xc400}, {&(0x7f0000012900)="0300"/32, 0x20, 0xc800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0xcc00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0xd000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000e925f2be0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0xd400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x10000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x10400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x10800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x10c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x11000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000e925f2be0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0x11400}, {&(0x7f0000013300)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000013400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000013900)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x24000}], 0x0, &(0x7f0000013b00))

00:23:12 executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={<r3=>0x0, 0x8001}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r3, 0x2}, 0x8)
read(r0, &(0x7f0000000080)=""/254, 0xfe)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x800, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000440)={{r1}, 0x0, 0x8, @unused=[0x2, 0x1, 0xfffffffffffffffd, 0x56], @name="70889d7f7fa68b7c19dffe49904a46529021681c1681a781415104fd39ef7e8f227e03622a27cbc8ff3009ef3f7cc355f039c94b77d2ad5643dbeeac0bcf0bbf455fb0d8c88c2788276acacc1ac761dfbd20ba96fbbd51bd9fec01a78fba85fe28bb185bd052c4938f48d15c9ae5871d957fae3a52a0ba7702f53cbc09e098b1092aff274bb5b3eeaf54f9dbf1846a2809de097fbcb92c2f86b31c6d2aa643b1f2ee78031cd0f715dc823b0b9d8b8b359025c612188c54d8ec3f5dce6b9b6b0392e2adb24936a51b370ca5b30c30a5eb962d575f18fbf920f0642410f8b5429f9d054a92d0a314c6238507065a40f1619b80a6c0568adf43b64ec51c649bb232cf8f2c40ea5e3d58573f628214ae7b04e8a7bcb499b0ffbce33b7913613e47b25311995de250111729807b2593c4d855f870308d7cafed51e228da8d9c0d9a90bcc4a825ff63a5e75ee2069d3a0cbb71ddda6e3aa33baacc74bb300e3febf756ee366e8e31ea7bdca9e820cdbd80c1d29577ec5811584f2705bc817b7ce091410de186efbc23977c65935ef6c38bcfeee46371add0e702f1b12d7daffb38d67400dc6f1653f7c0473bf877b425212750db044c20f2aeb41d1868bfd3223cb3df4c2b2b7231322dd28b10ffde8a849e106cc5d18943af41e9663caa99e6f0989fe05036cb999a2aaae51670fdd70c390240eca37b22e0397c7ebd583b95a1e71166ed5f6b76ed661874bb532f1c1d6cad71a74e190a311813f2c8aff708cdf074c5a09de9811c7b3441feec82a5da67cb08f81b1fdff82a6ba5d2d1a339413dbbb217e704017ba99af1630947b13563266ec5edda8e944d3b2254d83b6f29232cf97b59ede12eb8c3ab7204c158853d88775653850fd86cbd2dade559bd3b10e35198da167fdd214e580eabc1f74036827ad72dfdc16979db57533f6ac5cf4b154e953b3939f770295b7bf998765d179394ba726bd4a5b45f343da0076fab1f500cf4601c72b7424366e9c55ab9a959495ffb657d12ecaa30c8c8cd08be2235a73a6cec1c3ef69df03e60189b1e5019a17ee9d0f284c5cab05d02839ba31bbd2bf1b8f0c04c19f515ffb9c8f5c621d778362dff78f7cac55358d289beca8721fe8f1e59974fb04c5020987cbb28aeb886a11dffb6e57b3d6b98650fe438e77a05d0528bebc3f4bf4ef0acd82ce42aa2d93c58d73e8ee0bf5fe9b77f6de2636732b59a05d838cceca47b84d7eceaeb2d0cd3b52ff29ee0ea9bfe258665ffa038919910b435d520f0963da9d2781e95900953822556c56c2e0477329b48cf92d0f24623fd2c616751d8be5df17a76804029efbccfde75e4c4e4e58c8a38836db306ca0349a4564f815d47540a5d87307eb4c8f94c7175c1df4700e765413b4aea672be5ea22a1aa680fc327be90948e111a0aab19bc0441e74e1dbb0f13d3f5c5197dee0023e9440d06a9d5b7a8bccb6c982f3ed8e26f00370d7ebe8dea317a0124a3619f31aa249c516457b1134368978dc460a79c479099b38dcb3263abc14e99d7d8e898500f2523810963e7f171eabaf274cdadcbfc713d0c49e76ececb3b09c69bc34e2cf5f9331a3ce69c8a4e10d9d904b3100951e0df6d2a7ce0b9da5ff3ac709fb00f19142c9aeba82b40676b4089b530932d008c95680f4c0bba5c5043203b8627d26e07206780794d7d32b83fb734fe8bc1aea2732c969961a399ac39a448aab00c2da86f57ea4ee3bec1f62a5c1e88587dc20caf0b2caec7989713cf4da20fcb4f96103756aba95d8271cd643f58e2ac8c1a85c0630391835fdfa35fb046e553b4746b43ca16548570eb8859d4f05ad4c99ea4414449dc2654db1b798c8f5a4a9ab2439df7441946948bc3601f09dfb21e5454651931606f357910d2fab07ce693e581d713a56650b3c562cc83a7ca6d5e1bc0832504a40702ae9cdc72e23519c7c11170f7d53fae8fa5437136c613bb18f2485106a4fab124ab4da0f7339c03c055a20077e9e6a48e72610110ac27852b4c85ad92a9cfe013ba6c3c9315a1f488ec4e7c42403c31365c358c9cf87a140891cef0d7e6ed5cb1e4656ed9bd0c3758ad531ef70482834cd0a680efd33b4890f7c8a795dd504d83f6528f3b10535d796e584a58dea5cc5d29a1675172f8d5387d9b8769f2f378f0536313883c854313ddf3441d557d07049f08921c7f245a37785950d0554fd7f324f1535d1d95b0234bfbeb954ea76456d28fe372d801d00c79f943855d8554917ff3ee45092c805c8664188cd8c2f4fe47931b7e136c80277b349e9322b83a4579dee0bb83cbb4b26c216a59ddad60d26e47cc1a4ac5a51afece902f84c0712991c9e7d3d6f7bee0b543ada9b7b73e19bc3911009fd0e49359082fcca94c9165dc0b39d9f9457794517007b7f590c051fe755eb161c26cf0f92a5bc62aae0afc7265fc286046a60902c5e92dbd8378abc2bd3f738dcd1688388cc04973e43c5eacc453f18f834b62a52363923d0990b4ef37dc446ca4815e0503c05aa5ea5f28ad6cc2a3d89acb44409e0208e34071aba8921b4786c846f2b65020dab7b620a1b1d9acdbc6303187e0e7b03a1e380e98e94f4e71e576127230fa071844163ffc6aa2dc8581a451671cb150ef2eba08c55ee4324728b5b89be246c81b1d5b22d4a1a64461636721f592bfffb5e7a82926ced3b3d11558955256ad65b43503013cede7d35c75955f575d9cc6d448ca54fcedf1e9f0b3881513351a5dde0a27edb7298e33c27d8664c914311cd533fa0057c8a98ee1a366a49355d4960b5bfc936feedae740e67b892d026a223005d83eb040e39cc23c1b5f995253cb8d276ea724f962b5730f908d6b2b3904aa2f1873aec0add4ff1814af98e852b50d621d1c4b212bcaf1e5602d6ead82460196d620bc5e3a08ba1deca25c133075e8f540f15511176bd954bd20f445d448245d3a02f14731c87f170fc02850877d8e8b6cbc04eb798a5fc543f080cb7b52e5bd1173689dd1f34f7e57dccf02a41a42e3a7aa5b29716c6fcc6cc9958e26641d982560c1dc34c2c485be9f994ee38f5404bf9b4e182230d166c57be04e4243b45b9a5ad3cbd059ac5e45a1d951a122245a9c5cd3f0dc37f21d34e59c784da735a1ff25344b440c472ffeaedffeb3c43e8d6e3f7935a86412ad581910b4bf2d73b9bcce02b6baf432058c9588fc9299a6f07601cf7927b773bafafb14dcfffd82456688635d0b635544f324e7745b05adf7c17d50b9fa86cd4590a90008ef09ab9e236e1bc07fdd2bb452512798084870b0a1d292225a626801c3f6a421fd5d336b6eecb413508af9a76a465980061dbb099999aeb59a2258036372664cb319ba971b20ab3cc8bdf70447a1f6848cd6f8cf1d3a21d55f74ccea499c1c6d04acfe82545253ed45b9f237135e7fe6af011bd3b9c6119b891089f4b6467f81fe1eae8d1258859d679415477937acda555a87ca9a96c475a856db51afacbd8aa19150de6261bab722235fa8d5cfc7e34068c591c3d4c7db8fa570af50f3409ffd68ace6b7940e4de979796a42aa70be1a736377bbf8bcea8a166ac765e3f325c367e2714473eec162186bfcd00d302f3ade08a9321db2f291cde0dba8bd3918903038a7f71845f948db2a34e923fed49efb65a831925df5a8c0c4a73d805391ba384e48ee511376bf1d9f84605c48f8ed8a85a21392e516c8c49a8934d6719284b04dd37c48595c899a3b6cb3fb5ab902c07bd7b46742d707b9a35731b54e78ca8d6dcef0da985bde1a92b88ca6af4de3eda13e74aa646b591e0db05807a3532ed35f56d6aa0e4364092799b5df9606fe8da91a491743fe27c6595838fa03282d3a18993e03349669f8d5332d7eaf61a4e475f889bd8b2b2492f0cb716b5eee485e01eaf185b0fb9e532b2f4ee941242f526c6b8106ad307dbae03fe622f9b201cecffdd18fc48d433675af693e349547e7c17ecd1863cbf855359fe16c857dd6707f08cf6768f7ffd9fdde8988bbecddcfbea6e7714eee5e5b88834ef9d8be0212b42276334817eadbc6503cc67de62b6128c54abeca3a2e32d7997f753947f66fd0ec2b76eff1791e088dad1c4bcc9832a70e51cc0253e257dfcb15b30449c3ad5e9e46d028c1b4336df6a8584e57c13a3d0ea182fcf3be471b56af31c7adab1659102a28beb5f552c578f6b188aa71eadcf9ef855fa966bc0c8a0b1b2c4920b825c53bf5530bbb1ecaa1fa2e7e8ffe260a35d35fd9940b35e21fd04aebb30da366ca4addabd0e517ca042af0520ef06332bab00320390b2748e275ce6a4042dde07fc406a314c49302597793fd4e0d89996a9495056de31f87245c27c8d52798c624e088d086ee58fd0b6fa950c6e69c0243dc9642f89d70884dd2ca27b9558ab5763bf5be3768d8c6cb2dbeb7f2316589701b331dd32e54a32b3330ec404e0dd36d38397f2d52992fa7a7b0a47426ff190209dd6981bf5af9b04be735dcfcd0da9f2797c64a2f0d8cc9ef1488a34429558f30a3c5d18278daab76fcea098f10832c5fb4f9bb105dcb7cb3f72ab53731b96ca2103f867990dbfa4e68440d5abebd594149e1e943a128c08666d52e0a9b90da2c7ecc5ac55f76fc5648a7491d6cf4fa106cbbb7ae9dee6fc57f97cea0afe1db75af4904eef3c7220bce4480e24fba0964bf46844233c1fdc10bd568cdecf82a960805cbdb1eeb3a537abc2b892522d86ec92b6e66b853b5a20b886dba9c9050e26bb4f418df246f76ce989825e786f4c88d92e04bc89fd73613ef560cc2f6377ce8263cf14817aded2770b9c101635affdfc06109a3040c6967c533280f8ca0869c047783883810142c2e7be5a508e86a71d4685bbc39833906d313abbb77c110758624a6b890dac3c7d28ab5f94bccc379bbafac48c81672f4e2166ab8d5cdea2aef27eee7f74bf1ed3f2124081de4e39101b8a4811e89169a34dc3f02cd0f25439dc441236d3e738aaf98dc683ad6aa5540808d33551f55a4a069845b7a967d0c5f7affcaf39ea18d2d43e5f9bf0c0333643e56b46bbdd49378b66abe49aa8ec468ad414fbecc19ed55f521f2b1341fea13c1eaa6bfe568d209bb51935bf538475d37a449d823008ebf96102166db2e8d3b990be3e34e60c8dc88fc57a237f7e9c79d0893aa14a5a1543234ec41ba3e1ffdebcff3a28e40eb757d425a6bf8f0044da48191c76033323deccbef346d285623f2d08193a8ba64f31517e7e8e47fac6971d8e3090b4e60c0299d6131b2b7cfadeefc6c83be987bb904f03f696600e14ce9044f73fb465e3530233d260e076a5842c11d8f9efc966165213e0b26c24c13c0139e3269704b7631ac19a1f4a6eb8ecdd1cdec5c52fc2df4c132f86b7a6f26c2f867dfcc1b3fae2f790787d94b76c870d8cb46a695cc4264749f66611c42b9ddcf32aeba2518a0d37528188af46faeab4e690f4433ee1c6091b1cddeb2eb44d92060a2162e101b2727468e6b61f3ff0cd493b89da3975d5f46f1fcdc8a77912a8dd305ef1ca449bed8b66007f63e6d0ad1c9916c207b0a221e2d16d8c243ead80aba2ef608fc16ffa36533d9c11c73b35dd4476a6cbc9ff8895c3f16d9dc4b3bd2f4f00a7652fd18fc9edbb171118cb53a77bb401f3db7cceb9399ad9bdd0b9f37141971e509347a05539a6946c043568d085cdd630c925d40b0deacab0be1dbcafa2ea3cb2a11460b29"})

[ 1396.248579][ T4149] loop0: detected capacity change from 0 to 1024
[ 1397.306337][ T4149] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
00:23:17 executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x0, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001fe879085e04ce04ba59c00203020902"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="0030dffb0000df08493f795411b4f5e36adf417d116736e74042d8fc6932bd43b56dbbfe2a1c69d1fc365b5425bd1a18f5ea3288cdc54d26a4fefe3dd589336a5c477b8cb38c290982c1d2d3c38ff70bdd6c23c425b9841c048cddcf8ceb6b482411517a5fa3e1dfb9fe77d897fce8968d663a58aad525fc094c4990cf49737c74099d93be5ba42b1b5f4112cf1c7bf2cb67dd3203f534126083922edc71afc10413f381b155750a8907e03e5d545773f9c31e3cc4af3bbd026a0b54c8fb1e43e727bcff1f522eda4adfe4f70af797f1606c8c26fe47f908b98c0a1b158b5570e14a5b796236ca72cfae2ebe72682eadfa9926f0a709bddf51e0bbcf95a8b93268411a767ec19090"], &(0x7f0000000140)={0x0, 0x3, 0x8, @string={0x8, 0x3, "bdab1c001be9"}}, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x80, 0x1, {0x22, 0x5c5}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0x17, 0x83, "f907249bfe456bac1790a5e8eef0d0366c7c6fe9830510e64a29b5c86c5a3ec9b9989b4fa54d1d08fdde5b00eabac30d4beadf5c462ef727ff6787ab7c34f8003a38411c907b18c3ab05f7777acd6610bf47d626d346defabbe15dea3c359d5abd4ec1f252e39881d1c09efab229571a891021660eff666e16d1990ab2f98fe957bd16"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x1, 0x66, "1e8deb78d94a2e970be08edd2918d61b51ef18526131968036ac0d3e3576543ad7ff568b4a646ec804f7487fef0af1c51075e725019cfe8faff895e922f5636572f1cc09bc414ab28b71df06bc7696c91266671ba877a1ae2a49d385188ad7b2d750549951df"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x3}})
r1 = syz_usb_connect(0x0, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001fe879085e04ce04ba59c00203020902"], 0x0)
syz_usb_disconnect(r1)
syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f0000000080)={0x0, 0x21, 0x84, {0x84, 0x9, "afa772a1dc3f6cd75bb8936371182fa067cfcf32c145b41983a4c189628e4c1a4afdce86302c15f74dc396fffffbc631d8aeabf6d26f11ba9ef275f19c7c0a3fb22f6010fa8dd5ebed6b3e291f0f1a7a546a7073ae16ef13c0e0353ae57e7b492c42e2e4a05edc8931047faed1fb0a11db84e92d41f015bdc000a702764ae4136c80"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000600)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x1, "dc5fe7c6"}, @local=@item_4={0x3, 0x2, 0x0, "aacfdfb2"}, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x6d2}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000006c0)={0x20, 0x3, 0x19, "0e6bc4a6aa1d90308c248333cbf50fc011773ae89529925898"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x1, 0x1, '7'}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x1}})

00:23:18 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x4)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010ac054f02400001020301090224000101000000090400000003010000092100000001220000090581030000000000f5e5735566bce45d05685a157eab9f489e0ef8669163708ff55599790af1b99197b196a3e1e19d1c8fef9b0abd0caba37432d34fcc3de7a266abaa6479b8983af0aed652fd1eed884360248fb9d402b483de72118311602c8b376f7f4299f1cc732b237eb7b22b4fc0fdee"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, 0x0}]})

[ 1401.067351][ T3354] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1401.495419][ T3354] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1401.497967][ T3354] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[ 1401.499677][ T3354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1401.621199][ T3354] usb 2-1: config 0 descriptor??
[ 1401.850513][ T3354] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1402.178875][ T4156] udc-core: couldn't find an available UDC or it's busy
[ 1402.180429][ T4156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1402.656279][ T4156] udc-core: couldn't find an available UDC or it's busy
[ 1402.658538][ T4156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1403.005807][ T3367] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1403.338168][ T3146] usb 2-1: USB disconnect, device number 12
[ 1403.394914][ T3367] usb 1-1: Using ep0 maxpacket: 16
[ 1403.566856][ T3367] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1404.163042][ T3367] usb 1-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.40
[ 1404.164688][ T3367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1404.166006][ T3367] usb 1-1: Product: syz
[ 1404.167226][ T3367] usb 1-1: SerialNumber: syz
[ 1404.587852][ T3367] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1404.929725][ T3504] usb 1-1: USB disconnect, device number 4
[ 1405.245938][ T3870] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1405.655694][ T3870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1405.657851][ T3870] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[ 1405.659305][ T3870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.918218][ T3870] usb 2-1: config 0 descriptor??
[ 1406.117971][ T3870] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1406.296161][ T4156] udc-core: couldn't find an available UDC or it's busy
[ 1406.297531][ T4156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1406.582879][ T4180] udc-core: couldn't find an available UDC or it's busy
[ 1406.584150][ T4180] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1406.666385][ T3870] usb 2-1: USB disconnect, device number 13
[ 1407.294088][ T3146] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1407.574929][ T3146] usb 1-1: Using ep0 maxpacket: 16
[ 1407.717585][ T3146] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1408.306697][ T3146] usb 1-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.40
[ 1408.308761][ T3146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.310433][ T3146] usb 1-1: Product: syz
[ 1408.347736][ T3146] usb 1-1: SerialNumber: syz
[ 1408.801175][ T3146] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1408.950250][ T3146] usb 1-1: USB disconnect, device number 5
00:23:27 executing program 1:
fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xee01, 0xee01, 0x400)
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000240)={@multicast2, @empty, @dev}, &(0x7f00000002c0)=0xc)
getpeername(r1, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000180)={0x1, {{0xa, 0x4e22, 0xfff, @private2, 0x3}}}, 0x88)

00:23:30 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10)
fallocate(r0, 0x0, 0x0, 0x8800000)
ftruncate(r0, 0x3)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))

00:23:33 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000101020000000000000000000000008cbe3a77716a91228505bdab18001700000000000000000000000000000000000000000066545e5b8426bdc1caca47987dbf8e904e34dacb1333d9b4688fdee79e6fc10fdc8ed44310d4d44982581454706b8c9d840967a3107311540537bb10ccbf6ad23157b11355acb851cebbb7e6e8ed348db579c25eeaebdaec211e99e0ac2eb063510a627407c2c47a0fcc7cfbcbf38d1e1f3481826880e13067a513c5d1803e6a7ab49bf700537768b73b50c84b188eb601f336bf733da31f2fc1c3d6b451465dd4cee0cd73048039078ce5c3aacd3b7ff7b745"], 0x2c}}, 0x0)

[ 1416.298659][ T4201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1416.498247][ T4201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
00:23:36 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x14)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="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", @ANYRESOCT=r1], 0x2424}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x4090)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000fc000000000093290a74e2b6ff6ba198481b0000000000000a140000001100010000"], 0x28}}, 0x0)

00:23:37 executing program 1:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10200, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000000)={0x0, 0x11})

00:23:40 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$binfmt_elf32(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", [[], [], [], [], [], [], []]}, 0x88d)
ioctl$int_in(r2, 0x541b, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0'}, 0xb)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f00000011c0)=""/231)
syz_open_dev$rtc(&(0x7f0000001100)='/dev/rtc#\x00', 0x100000000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000001180)=@md5={0x1, "e106e689faeb5c7abde19308f4e55780"}, 0x11, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140))
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_complete(r5)

00:23:41 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x501000, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000280))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x1}, 0x1)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x195000, 0x0)
close_range(r1, r3, 0x2)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c)

00:23:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16fae1, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xf}}, 0x5192d6333e7fdb29)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
write(r0, &(0x7f0000000000)='p', 0x1)

00:23:47 executing program 0:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000)
r1 = shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="70000000f2f20000e5ee811dd6831de288786a66f24515f884bb6f096fe2be2afd8816fe92c190ceec25d52c78dc6dab1bf95161b17148dd60cebf04f0f42c75266556c9d7367cba25b0c5808d6b7d2d9546d77b6a3f99f498ddfcc7b4a1dd98e2d3472841986060d606ccee806cebb8"], 0x200040)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x16, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e36313130373331373200"/192, 0xc0, 0x400}, {&(0x7f0000000140)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c010000000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000540)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000000a500000039000000000000005b0776a48d9db9b4672032fd9a90ce3f9fe1709bfa91be479cb64ba5ea2af7bd7682c90e788175c0b3bf07beecf940fd1720eee9146f510fa7942db27d31ae11491e760af63dc1bde2566bc0ef427ba270fe", 0x93, 0x544}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000000440)="0200000003000000040000003000000000000f008ec4bf6d50ebd35836306d6bd6ea8ce0522a60179a321b8e3805766aa69ab5dc07d3da6e6e06232e09c15577b78132f7834c06a7091af61ca726e1d6ccad95c63ba3f37e21bde8c4333f8a3fb442da08796e924ac0647f7695e680c6872818231edafe5f69634c74132e2fdfdd1ce6cdefc03cd37f3f70b48d190e812bb9de21bbd73545989c409eb92ab585782d3371de1eab99244b6bcdc28c6aaaf07aa4ff0de08e40dff3ef988eb67ff966", 0xc1, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004000800000000000000050000000800"/64, 0x40, 0x4200}, {&(0x7f0000012700)="200000001cc2eb501cc2eb5000000000d4f4655f00"/32, 0x20, 0x5280}, {&(0x7f0000012800)="c041000000300000d4f4655fd4f4655fd4f4655f0000000000000200180000000000000000000000090000000a0000000b00"/64, 0x40, 0x5400}, {&(0x7f0000012900)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x5}, {&(0x7f0000012a00)="ed4100003c000000d5f4655fd5f4655fd5f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b698e28d000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x5600}, {&(0x7f0000012b00)="ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001000800000000000000010000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a20e8d2000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xa0, 0x5800}, {&(0x7f0000012c00)="ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3631313037333137322f66696c65302f66696c65300000000000000000000000000000000000000000000015d4476a000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000", 0xa0, 0x5a00}, {&(0x7f0000012d00)="ed8100000a000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008851284000000000000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x5c00}, {&(0x7f0000000600)="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", 0x11d, 0x5de0}, {&(0x7f0000012f00)="ed81000064000000d5f4655fd5f4655fd55f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a4d616c6c657273797a6b616c1705df1d000000004000000000000000000000000000000000000000200000001cc2eb501cc2eb501cc2eb50d5f4655f1cc2eb500000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xbe, 0x6000}, {&(0x7f0000013000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x61c0}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000013200)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x9000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0xa000}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0xb000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xbffc}], 0xa00401, &(0x7f0000013a00))

[ 1431.219727][ T4221] loop0: detected capacity change from 0 to 512
[ 1431.880332][ T4221] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38493!=27501)
00:23:50 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000002f40)='tmpfs\x00', &(0x7f0000002f80)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x800000000004, 0x0)
mount(&(0x7f0000000080)=@filename='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='aio\x00', 0x20000, &(0x7f0000000140)='tmpfs\x00')
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000180))
mknodat$null(r0, &(0x7f0000000040)='./file1\x00', 0x8, 0x103)

[ 1432.690661][ T4221] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
00:23:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000240)=""/85, 0x55}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/176, 0xb0}, {&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/241, 0xf1}, {&(0x7f0000001540)=""/103, 0x67}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002640)=""/114, 0x72}, 0x12102)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)=ANY=[@ANYBLOB="8100ffee", @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf25010000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c014}, 0x20000000)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
bind$netlink(r1, &(0x7f0000002800)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES32], 0x36c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000004)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000140))

00:23:55 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383839333038373500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001d72581da2224158b58973c82eb77a3b010000000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="0000000000040000000000ffff00"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="0000000000000013000000", 0xb, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000000040)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd7f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x20}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f00000007c0)="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", 0x23c, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d7f4655fd7f4655fd7f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000000600)="8081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af3030004000000000000000000000001000000120000000100000001000000180000000200000004000000140000000000000000000000000000000000000000000000000000000000428de95ff4bd351e3f93c7c8b02400000000000000000000000000008081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a0000000000000000000000fcb48396661361e5a3a4aa1816a0ae17f6deeea353a39f3f9dc217e13730e34bf5970a60b4484d687bee355513abe5", 0x11d, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d7f4655fd7f4655fd7f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="fdb2a4ec9a3c88bc4e7407f7193c6e9e28e29d233188393be77f5cba6981f613598ea7cddf51ecd1ccd3ebaf7762374ce22fc54c9de19ffae460742dcef146da07"])
symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00')
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

[ 1439.394610][ T4236] loop1: detected capacity change from 0 to 204
[ 1439.514239][ T4236] EXT4-fs (loop1): Unrecognized mount option "ý²¤ìš<ˆ¼Nt÷<nž(â�#1ˆ9;ç\ºi�öYŽ§ÍßQìÑÌÓë¯wb7Lâ/ÅL�áŸúä`t-ÎñFÚ" or missing value
00:23:58 executing program 0:
r0 = fanotify_init(0x2, 0x400)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x4, 0x5, 0x1})

[ 1440.380525][ T4236] loop1: detected capacity change from 0 to 204
[ 1440.555849][ T4236] EXT4-fs (loop1): Unrecognized mount option "ý²¤ìš<ˆ¼Nt÷<nž(â�#1ˆ9;ç\ºi�öYŽ§ÍßQìÑÌÓë¯wb7Lâ/ÅL�áŸúä`t-ÎñFÚ" or missing value
00:24:00 executing program 1:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x401, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xec, 0x1, 0x1, "7d44208b9b4961c38d1ffb5ae7e041bb", "b208cef98c00a94cefcc5f695a4cbbc1ba0291658e4d1104547c841b545eb35a2e69cc457bfa44e12876645c80126e33bfd195840226f1055db183f382fd0d9b94af300da8a614b87943632a306f0a82081f689017c672efbcf7301ed66e7ec292bf98d49968a966acdf4e8a0c4619d2d1e9b5b76db507d4b7d792ac22c1689c5a9c3a54bebf0dd5f9d0e50e7dc06f059db3de5aee2b400cf60d66c460db1061226493750c70f1bae4ae2244131f34a9f963b61971dbe1f754bb929adafe32ff3eee325ec0930f65ddc9b93b644a08e8b4e18e1365fac5"}, 0xec, 0x2)
ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0)
read$dsp(r0, &(0x7f0000000140)=""/130, 0x82)

00:24:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200080d4, &(0x7f0000001400)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x22}, 0x7}}, 0x0, 0x0, 0x2c, 0x0, "2645eb5dceb2e9e430043281ee62811ce9127abdf9cf41901bf300238ac0c4009099de2bb0cde7ec855380d009c443c4b45745ff04a61fece9c5788e56963848afbfb44f68b877a67bbea67e12f09f6f"}, 0xd8)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:24:05 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1636e1, 0x0)
fallocate(r1, 0x0, 0x0, 0x10001)
write$binfmt_script(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a83ce1526deb8e6718a071a181b589a8f06ac2de18ed0418164a6f59c112d1a1b2881376573f6fd0fc4f5d0e3f2b774d1e6ab8a4a1452ff8e47bb91d08f83969082619f9fb5ee2b2e041d9c7f426c955da450c078a1d59cd2b12f602f98ef285f536c4c9f24847739103512dcab4ee5b07aa3de3d0e749bbae5083abadca3ee4c83bb70e810b99402dea4e2e1431f6d9256d17c357f0b24ba4db5a4a013ac35e883b9ff751387538450402bf43ee49a27256730350614055e2fc9944bb41a970f97a7f52152e079576fb7786aa34a1ab7f4a190329ff7fbe006025cbf0fef6823c53841c9e4eec7484c84edbecca749c26f0c3d07c42b26079523a1b015ea823a60d2cec848c4b8d7b21aa18d1b3e54ecbcad7b1764d43639aab4f7359e51e07d03a5f7e3e71a3b47d4ef114811d2affe60811ded89f8ad368cd750606c636796d7cff9727d8b747027295c9d7ef322bdbfa99d5c99e49ba587eef8a5fba224be4c1f6cd44e9d17ec42015d592c327092652d0a0a79fbb08e3f5bf98cd17ae9f924e44bf0d79c658052467a56dc9ffcd458b65ca67b772f7adbe219bf7c0bcfa345b6c6366c55f0ab30f6ba3f3633e4ddb800b95d7ed729aacfe36f47c04c1bad71e5ef4ada78342f9ecafbaf2341c087ea51717bc3c2b739202411ce9d97ad2f61cec443f5d842710c542e326ca30b337866c85b3c31028fd930e65ee5dae9e56a30515e0b117f6692a82e5ebf16de42cf393480559525aa0653026d3f193368ef72628129645abeacacc04b78e911836882262bc45b45deeace3c734b8d811ce5667c04cce4a63e47cca24b164ba946e08cd858eafb8b9022bbfa03096c04a68cd5cf7c15805526ada10714fd95322b6a7900faa5901e7c92389e6f86464e98149c937d01760a7583103eec43464cd0a5af2f5f43d72aad3be31609da72307f35f8551194a7a6339877615b2b126973f4062e680b0928a2da9025532f5e93374a04a0dee2f61039e0e2c01b96a6fc96515022fdbf76321a38d985d853118d43435a39813457c495dd030555ee0a2a0400de04434e1a928f26b1f542dfa18b8eec77dcdbe290b552d00525254280020f4c9a6657721070af3027f4e379572676eac45b8660ceec95617ebea5b859d0280a7fa40279254560c0086cd03ae00dd6bca94b0a198ca39263d88d081b944ff028226e4030f2ec3b62e97db83698850a19ae54201ca3d33daac34915425d59c15307ed33514cb9ffdba4d7a566dd1235d0625ce715e0d7f36ba480af423645ae1a318a1c75aead974cd470aa4faadd239f9e22adebb74752d6988195fdfd2ff028d355eff5304c2d22901c5cfe4fd0b69360db7d0523f56ba338ea51869ff1f965540f19d993845094d96e9295809f217b9d40fa9924f78560b23061784fe6e6f9a000b5f963d29f77f7c28261bdae70bac71471993ec5c286e1f02b76c37f438ea6d45ab20b3a85363f4ce5715e2e73f43be541d0a7400e7a2bd6172539df10c75c3f1e4818070db9734d5b3d668831f7cec39adabb9651b5ee3ad8734514863d8505883c1c1c7dc24a3773e3057ab92079807952af587ee490483dce15db54444d2ea9b5424dd991ad31882f75c64834b6891697ab0a65ac9bef508f77617ab8f68d21425abfc2c1a818cb3dc3522a15963656001cecf464ef1f87f5f9f1bdaf78f70ca87648690dd09c8a0101a3bbc5f8506a704a57facf2aa519f2317a3b30935b800e239f88a341a87098d4380696f8d21090e4080860d3c6b2d8e15044d0abfd83d1c4d1336876bc0ad3a8cf1bde4fb1955c9f976a16d952ee94cb31a276e92f207ac2e09f53ab341f8a09fbca482e85b750c3451a67f65be38c6ef57fc31739a4b702c179e700032929b27d226b01dd73760dade411bfc93b66676a890ffc1212b46d4bbc02ab31197afed401fd1960e718f16eec83e76f7af3e514c65487d1f38ac25f88a5d974c294f58bc6189fd48f77a2d7af584f53e9e2ff9ed0c8d9b8023bdc0ccb6e186b2a309d4e1d240301a7ade6ec229b4fb1335f8db37b4d84d66649ec574edee1a7561f7a030b6b049814af7cb4f22d57e6dee85bc3f7c3b22ba1b72a4a329ea7d00bf705674b9d8d7b7061e5160b2c23f1eaa6de835238201448be3d7b54dcd17d155cb505f0e3f358e83b1916a7cbe90bba070398f8ef333ea7c6a9ccbafb3336513d6581c50251673443702d84d83dfdbabf7c02601f57485e4ad513daf4d688f1632b8f701c0412d3c9ae88212c17617b790f9977c36cb6d6d749ad25dbd4412bf914d72550246dab507a30d19ef3d6a7ddfa4262a8d27313f25377a52ccfcde0d9215908023ac8a19acbd0dab47cf099fc7305532258be1da87eb09123a6ab904f6b31959e8b7393bed22ec1baa8f1df7045238ba22a8c3dc3ca64af6cd2c29438d947d4f5cefd2916a26b3bdf271e766bfacf47599aad4e56fd55469f5ee01554afa3f7ad4dc9c34cc28ff6ce8ef75f8358801f422baebeca20a8d8b445ee2eadf90898e86e771564aa32df44fc58730e4e73b568daff015f8383247868740dbcaabf5ef0b1585ed27558e3f8d1c680ae958ff7829858f167d84252dd73adba8961d2b370601c1988e4989ae2f098e8213524492b78c6740213766fb4c3ff2ec2d6f62bb64e0e8044e76d3119847dd21361b1d8c48b912d89c4d7386edf9b87b3594fcea11d203cde80a45c44b8dab8a61a4c79967155ffcc352b5563c151ece211f8baf54092b09d2801098f316cebc26bde444620a50311a42f32b6e796db4cb67a4da09b5cc6c188eb752a111554e9b26bf7c0e8e62e2a24f12eacae96f247c315f37f6cd0664f05a0598dfe0f3ab928fcd176a42344d35ca5b642432765794ebb6174561cbfd4c002bcf911c0eb5277ed1259dfb900eeaf7d1476b07c5f475c687fa183101ce156d83c504243b4ad442dea043e3ed4ce335b6fee25f4b76a55731249bab96d3a2516bea7ba452ad0e617d8a353537502c4fdaf42addaa4a32939bd421bac041cc8bc422ab0f63580003b77f0b9a076b587589bb6f2c27a8dd2deb338e3e2da8cd49aea1262b624791685df3fbe223210a72e2c7d70cf3c34202ae6f059dd0bd6a47ed87b3f959318dc25d0df4564ff5ceea232db2d2543939f6521a7eef2191704f8a6d7e3b764bc25d8d455a3d524685c54bc50df8e05ede526714ae240a54bd2a3a1bfcf554183972e46891ef744fa0dd7cf1a48a60019296d205d18cfaf8197260966ae15e9fab228033569241ae8ea626ef8d938df62be72bd59b27a664f44add35a150e5c749c0c0c764fd0d9e02d1868331fd03a14309cad09466aed9399530347a26be3e6174e7cab312831829fd0499decb79d9ddf348a8d0c2d5376614780d4bb164eb25fd4f81b335b4ab30fe660df0f51435d03b8db28491772eb0d6a506c7c7270101dc9604c91d54ab3ce27785ebf1d3f854bcaf53f5bd7aa16a842101d1659f1715869565eb6cedf1f4c13329c7a6e57690e07dc1eeec5a9e6ca20bcb6590038a5447729ac391b7cddee3d6685736b6abe0bf479f176e0b4a40cb898742a9834203a5fbde3a0e20cda7628066310bc37537b5123871bcf956cfc1766018733696bf86db340021ce154b1c9ddf0fc8a62a075ffc99e9130e5a3d3608d7f0d2d2192ceb533a540e0a48b40735982f008551f8a8f8c7846b61fdf8087a66642598a62110112522d8a3d49385095466f08e431a278c3d2c7f0fdf2855bca5a5ed709158bf18d69460c1b03f475be30501a5dab1ade757b2b4f3ca18c4b37a222c4fe878aedbd1a671ee6a5467c59766134dcc68330131b06fe1070c98dcf32a3eaed259c246e4893d1da6e135884bef7bbfc1aaa15ab720abbeba8db8f3ee292afee57a585f796be647a303f66d6ae78d38e0b83f7b00d8e13a75177d84fc83c97e48143ea333713a8f05cd33936094366cc544b204f17c0acb9b0594fa445f8a3d413784b3069ec1a2c830f2ef39426cbc708d01915a2331b33e64c58a1c0a86146887849556c74b69841f78fb16d0d131b07b83f0015e5e52c772ee23229d7318cec4ed018aa708bb02db64fa1ef0d4273b3d0315e2b21dc0cd47042b6445c5903965aa5ae2df6e2d9e855f354a3923d3ac787484a40e3ad5c60b0c8cfd43ead8ff9b72755c54c052f6abaf47f56735dd82e2438f7048454b180f94ac4fce1441bf41500db44443781af40122abbea4187cd5927b17a75e7483bb6942d3fd4466d5beea330dfcd556ffa8f3b6e4d34d60df21081ae41ae3150889b90d25321e9e3abd5e44441e3d8c67678ef370ee67b1c304b392a8f0fbebf999ee4564c6235d825bea17e06e5a0cb05c48ceb1fb3500de31a556a1e2f9501f6a3cce54c945f710b80fac54ebeb0f92223b2de142b1220527df13acb4d285aa5fa8f04db05423455667623a0f8f2c0a3a0344543e60e84083d7258347a05f7ac451d50292377ad6b21847261470231be9d4d33b3cfbef978962344405ddc85ad49e27361d1b3cf087dbaed8a2188389dd3094ac0dd94cd1989449f9c7b6be4b0f1605bc1b0fdc0ea30378a248ec19ee9d08f903304c676bd6dd8d2a3354229060b0b6c8993f35613bee790f88791ea3cb074c47d5a32f2873a641e5c2e0af6fb46c6de9011335e98e0ce9b155f94d69705f4063388feaf67dbe8ff4a40f34890034722dbf9d4a0b954b981bd60e92cd3f223a34d075f4f833b6a1389c2d149a695026f7ecea2a8b26812eb2883aac5405c7a7b5e20226bf40230085361650171fa727b1aab0f93633db0294e743d842ede30994742d2977f76b68de44cb1a319f2447a3ee7ba22fd536edc444ea68807db38b177f5ea7f7e853626a67c7be87d163e0edb15164771c1eb90b8f6f61e7c3dfa508175ecba88487dd0d3704e00667f063321f269811beaa1ee10272c999b009350690424b0901c8f62ac019b960e2b87d3ec8c075cd0631c05c9850f2a7efa5fafffc6cdbbdd5c092774a5e3f19a048048032be92caaaf8f2a6a625e74b0f0c51d51eeea6183d0d7d21f6a1015d0e1c9f0e878a3f2c568b62d4481c1a289a32e020c1c80a1fae00533f7a4a825e3671f63789474bb3e266c49e1de31cbd8e20350a354dc95b93317549959d33361d02fce9c4704ce40d84772ec2c28dc796132816195c83fdf9d6740390c33d72312347cfc7d1bf85521f5bc738417b768a5dd642e8ff59d3d53be8c0bd9509d2cd3c08446d666f500794a84e456759d0c30f45339ed3568c463fcb7dde1519b180c41d556c3a94221ff6b1ec9c630f1a09bc54a19307771bf8e42d669151fd9deb851bd73e0b290d1148ef0aaaf3259345c5e3aa3ab857ff2f4a75d63a50abc73616dc180b296d638984a9449fcdd80c4a44f412598f802b5ee4f2ba5d6470f65114c86ce4eaed592ba5bfc61e108fae55f71fcf5aeee61609d3b5a6286abc8ad9510b7950072945fe171fdbb888fe5d6582c9cbdaa86fcf6a345c978ebd52d119fc19462d6b3747587cf2db42e306a3855d763569af76ca928d891b2df75b8e0c0830d7a35368294991f25a0223906c946b582845bcc9e33bf347e7f44cebe4c6a145c32d138a7064f3fe70fb69f91faa74e1ea569415af831829ee64a58e7987eac0efe498199a5758c4a2b1b66807948a58918285a28b9d78c4f6a7a6a49e4e5160431d45275c52d6a86240f9e26b4166ac8b25d603015083b356c2598b06f736a8bf72d8fc166fe10675fb7b307c8c4788e428c440f62f01cfd66cb2a856f307f96eddd48924b3994427df540234156abc20291715030058992130ad61fc182ec06f0ad5103c3d8268bb45022df20aaeff46ac3cd0f46523010ef16b618b9917445ac5c52b5f8736f6730c65839fca1c1bcf2c3facf08ee2318973fd6b4b9c064bc40deb6c19a71c18aa04298f7f210308a30337740d9b0da893cbd60561fa7b34be32f57925a6542d3fc620b63e1ee90256d5a748ef4598fc64d2cc13e6d3292c7fe84607648820149fc39a6dd4acb0255f9b7c17c15b68bb74df17ca79fb19dc32fdc5583fa6aa8d44159a55884da5023023543f35bea63f75e13a0f1774c4ff4c51032a05b04f46e9aae404607051d309801a971aedb57e19ba05dbafef41fc5795fa8e9e1731b6722c76d893a0006a734523a149ffece6dbba6c51525a2f12b31554c9d7bcb1f6f13ddb1f12245095c4767b4b5926e24cd4a05e6b07879fe068d343642b403f338d2cb57ad9dd8b52a3407786108f52dc2653eb2c62e72486fd458f9d9451e4eb1cd45333345b5c5203dfb7102c3388b2acf115beda43531edf8707d31eca4a9d9"], 0x1000)

00:24:06 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200080d4, &(0x7f0000001400)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x22}, 0x7}}, 0x0, 0x0, 0x2c, 0x0, "2645eb5dceb2e9e430043281ee62811ce9127abdf9cf41901bf300238ac0c4009099de2bb0cde7ec855380d009c443c4b45745ff04a61fece9c5788e56963848afbfb44f68b877a67bbea67e12f09f6f"}, 0xd8)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:24:09 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x6dbf1dbfbd7c98f4, &(0x7f00000007c0)=0x12ec, 0x4)
r3 = accept(r1, &(0x7f0000000000)=@pptp, &(0x7f0000000080)=0x80)
getsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r4 = dup(r0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="73797a746e6c915382e0d3d530000000", @ANYRES32=<r5=>0x0, @ANYBLOB="0000000000000000000001014500ff74000000000000907800000000ac1414aa"]})
pipe2(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r9=>r5, 0x29, 0x6, 0x4, 0x5, 0x8, @local, @mcast1, 0x8000, 0x80, 0x8, 0x8}})
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$inet(r10, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x0, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ecc3", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @broadcast}}}], 0x20}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8030000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="a401028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400fcffffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff00000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=r5, @ANYBLOB="ac01028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240d01006c625f686173685f7374617400000000050003000b0000000800040008000000080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030004000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800ca00ff000000"], 0x3b8}, 0x1, 0x0, 0x0, 0x40}, 0x40048c0)

00:24:10 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/ubi_ctrl\x00', 0x803, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000001600)={'mangle\x00', 0x37, "6b0aae583bad2b0426329734d11165605493ef684c193d6442fa0d27c84d32c292f4194d98cf1df7789d961c3f33ae7787a43743766550"}, &(0x7f0000001680)=0x5b)
sendmmsg$inet6(r0, &(0x7f0000003980)=[{{&(0x7f00000020c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x0)

00:24:20 executing program 0:
r0 = syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x9000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xffffffffffff8001}}], [{@hash='hash'}, {@uid_lt={'uid<', 0xee01}}]}})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x6, {0x3e, 0x9, 0xfffffffffffff381, 0x0, 0x3ff}})
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES32, @ANYBLOB="000228bd7000ffdbdf2501000000080001007063690011000200303030303a1b303a31302e2fffeb0000080001007063690011000200303030303a30303a31302e3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000083)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000011d00)="0c0000200cda399600e8ffff00", 0xd, 0x3ff}], 0x0, &(0x7f0000000540)={[], [{@euid_lt={'euid<', 0xee00}}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot', 0x3d, '-)\x16*+)('}}, {@audit='audit'}, {@dont_measure='dont_measure'}]})

[ 1463.610242][ T4267] fuse: Bad value for 'fd'
[ 1463.949708][ T4267] loop0: detected capacity change from 0 to 8
[ 1464.376206][ T4267] EXT4-fs (loop0): Unrecognized mount option "euid<00000000000000060928" or missing value
00:24:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

[ 1465.181190][ T4267] fuse: Bad value for 'fd'
00:24:27 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x208000)
sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x5, 0x0, @mcast1, 0x1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000080)="fb6f83e8754de125e284ebae79b963eb3e17e1b06cb83972c52fa3b77b49b0473370d729db392d9434ab36630f9d582a976bd225b2c7297026ff707fb09a1315ef28338bda399ffd8b8425cc9944931910ec246e78e8a97d6cd174adbf61c20ce885149f361782e87b43c17b7d00b928ea8a6b67be0bb4a673c41c31d23a65b895f4a38a814e3c20116a552fdd2fa27aa5e98904fcefb15bf27446f86f4b2ebba5e06271246ac9277a56c49e3b7ac581af8de40cfc78e904cd2a9865713908870b627e1cc1c89c93dddbc1ea05f009921558708474a2", 0xd6}, {&(0x7f0000000180)="28e083157143c35057a4930212ff183c77062b0e5ee79d0dc45308d97986a023c0bc48183d8c8df92b8376b699c538b0b048123d68e223eff284f84a08c508eb6eb102d9e06612e25a250d9d6521a1a09ee147083242a343be9fcef6ef2fdbb8afe455b3d547230b25de9454bb07e41e0e8f02", 0x73}, {&(0x7f0000000200)="505e74666a085619482efd1a66be64036a0a39639e974a2b41e0340f9f2cc9fa44bad5c8816458bfa8d655a5a2078d07c0b118e70fac716cc560bdddd9907b41cac09ffcb45245030eb261cba608710a0d82296d6454696d6cf983e9438d999ef3e2539a951d8f7f4016e2cdcc29e615c1490a4a0bf8f59f2305dca2afdfd42872976e7b9802b7e130267691cc0cd5381adcb69e6d77ed65d2d2b81b30bae41196a4738bd3819c85506a595402fd75da9f18a52c7be42a995ef592a7cefebe61492c5937180f71805a829c23ea6a6fabb935d4b6", 0xd4}, {&(0x7f0000000300)="b26feefaebd9ba8a7bbb9af570db2a5e7a95d5370e639a80a9586bfd0f6197396f0cb7def309d01d412672e2d20010a118cc2a4b0448242aaad0bfe15cdcb7ea7cfbcd19ab932022504182ebe9d056d0bcf07183eb8be9dd112eb492fea4ba91edf3530db8b43f5fb89f2c843d9ad6d6e192c5d13c8e73a49130f3f32ad6eef2428f93d72d64ea9b8a1bfaa697e54dfee7d93e6d30a9a54fa68679f6f3d1ac9f78fb83d75e4acde20e004bb4720816ad9c12e7220d75e9458cbe673bf9fde73ed8f29a7ca56ffbae4fde0466ba9b5d2949584719b08a7ce9", 0xd8}, {&(0x7f0000000400)="07e5b03e4bc4ffa72ef7907cc2f7892cfdb128f4ce2e67888ef7190806456dabab75f8e1ab045d35448629db7302c111a5582b8bd05e2697ce7d014bfe4ecb123e8873ee2977b70ddc631dc2811eb61dbf05e9da1dd993cc73260b475caa3b51f5598899d6d9c87d725d42b1074d99c244d9a7e57cf2", 0x76}, {&(0x7f0000000480)="1b85748634329ba7f9863578725d8e53cbf3bd2b8154ec5360f593ea6ca5a238626b8a8783c4c50a189255deba00a054d4a16248f4efa45a5d322c083a708cad3eecc9ed0695545d452e307840c70d4e0d5c739f93615c427757296b474e50297965d8d4a3c01833c31e798273fdcfc5fb9ef12b104d5d63f04b42eb4d8b54", 0x7f}], 0x6, &(0x7f0000000580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dstopts={{0x20, 0x29, 0x37, {0xff, 0x0, [], [@padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dstopts={{0x30, 0x29, 0x37, {0x3c, 0x3, [], [@pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x0, 0x6, 0x0, [@remote]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3e, 0x2, 0x1, 0x7, 0x0, [@empty]}}}], 0xe8}, 0x2000c090)

00:24:29 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000040)="0000000000000000000000008174406d72404b538720b2bc7333620000000000da", 0x21, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}, {0x0, 0x0, 0xffffffff}], 0x0, &(0x7f0000013800))
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {r2, r3/1000+60000}}, 0x0)

[ 1473.376505][ T4284] loop0: detected capacity change from 0 to 264192
[ 1474.088743][ T4284] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
00:24:33 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

00:24:35 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

00:24:41 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

00:24:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x2, 0x0, 0x0, 0x0, 0xa4}, {0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, 0x8, 0x6e6bb0}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}}, 0xe8)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x0, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ecc3", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @broadcast}}}], 0x20}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, [], 0x1}, 0x45, r2})

00:24:49 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@empty, <r1=>0x0}, &(0x7f0000000100)=0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001300)={@dev, r1}, 0x14)

00:24:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

00:24:52 executing program 0:
r0 = syz_io_uring_setup(0x781f, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x80010, r0, 0x10000000)
syz_io_uring_setup(0x3de6, &(0x7f0000001a80)={0x0, 0x9114, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001b00), &(0x7f0000001b40))

00:24:56 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:24:58 executing program 0:
r0 = syz_io_uring_setup(0x781f, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x80010, r0, 0x10000000)
syz_io_uring_setup(0x3de6, &(0x7f0000001a80)={0x0, 0x9114, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001b00), &(0x7f0000001b40))

00:25:01 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:25:03 executing program 0:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000000))
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109023b000101000000090400000002060000052406000005240000000d240f010000000000000000000905820200f7ffffff080503022000000000"], 0x0)

[ 1509.085192][ T3146] usb 1-1: new full-speed USB device number 6 using dummy_hcd
00:25:07 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 1509.608735][ T3146] usb 1-1: config 1 descriptor has 1 excess byte, ignoring
[ 1509.611086][ T3146] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1509.745775][ T3146] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1509.747585][ T3146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1509.749063][ T3146] usb 1-1: SerialNumber: syz
[ 1510.109365][ T4330] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 1510.467992][ T3146] cdc_ether: probe of 1-1:1.0 failed with error -22
[ 1510.890079][ T3870] usb 1-1: USB disconnect, device number 6
[ 1512.994622][ T3146] usb 1-1: new full-speed USB device number 7 using dummy_hcd
00:25:13 executing program 0:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp1\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x42000, 0x0)
read$dsp(r1, &(0x7f0000000100)=""/150, 0x96)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
read$dsp(r2, &(0x7f0000000000)=""/116, 0x74)
read$dsp(r0, &(0x7f0000000080)=""/31, 0x1f)

00:25:14 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

00:25:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10102, 0x0, {0x3}}, 0x101)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:25:22 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

00:25:25 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00')
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0)
io_uring_enter(r0, 0x8e6, 0x95dc, 0x0, &(0x7f0000000000)={[0xff]}, 0x8)
close(0xffffffffffffffff)

00:25:28 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="2000000040000000030000003200000032000000000000000200000002000000008000000080030020000000e1f4655fe1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6a6ff6a12c726e616c5f70617461d125685baf3013000000"])

00:25:29 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

[ 1531.914413][ T4370] loop0: detected capacity change from 0 to 4
[ 1532.078483][ T4370] EXT4-fs (loop0): Unrecognized mount option "joö¡" or missing value
[ 1532.400760][ T4370] loop0: detected capacity change from 0 to 4
[ 1532.458204][ T4370] EXT4-fs (loop0): Unrecognized mount option "joö¡" or missing value
00:25:33 executing program 0:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup3(r1, r0, 0x0)
ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0xfff]}, 0x8)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000100)=0x10)

00:25:36 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

00:25:38 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="80", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x20}, {&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x26}, 0x2}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000100)="daab8e432d7ed36bcaa36e897e7f968ae09e87708dc206086dc495a8bf28e55bfcad3e60989a6fbb777e41806f0f4b163dc60bc3cc97d4434d298587ba03b3d2a0697d0d2e1f422bed184398d0aadc15b55369f485106a3c8eda825b2ab8cc51f2e25a9daa91a5ea936aa00f62db31232956e336a9c68e6698aa9512294db83a8094cdadf250af7d3c2c68bcbb7de61cb621ca74f558ed191615e81cc51aa65401d2120cb9df0bbe400c71cb3c6ae101dda5720bb095c0161be1f402012f85f492497cf91f6a8ac10f205927ba0db4e8f5010efd996c9256b72dc2abbe1aa7c91001e542b32019afaa9619e1e9", 0xed}, {&(0x7f0000000200)="7aa113cdd6409cb29607a6d71e9962deb9151a27b1a858d7291ebd5b35ed76810849429003a1b85f5c0f29f720c259271fa8c3463b4af1f9129da1a5fb8b5b1b5b6df6135f24240f01ddf81646a38ee55bf8a4c0b686f00c61606c65642bf227658b72b3e942181d7db55779f8de1a1e5022fb92b719c5405e25cc5c17b495d11076b4dc58feabdb0b33c5d7dd691e99859046035ed36eb6f0e7af990953168b76a8c1cf2a58b53e1c7c2633787f570873b59b8015675ca8d5ec1aafd9bad0a7aa937274dedf7009d892a09c03a53d61e00617da015182b41300fb8f24e8ea735d81a4b2eaab5e", 0xe7}, {&(0x7f0000000340)="c64e8a3c5f157fd554043ecf8fa11afe53787e7c2f72ed7370b09ebbdd9b2c185503c85ad4188c810bc7ed9149b66d09d30b5cc006f23a981af704", 0x3b}, {&(0x7f0000000380)="ccc479bce7c562023a3d79ba32e93cc6ab29596a6671c0bf8e61f9303a6c6cd0dc386c53e783e6184c629c4ded22be99313343724827a1204685b39e65bb6ebeebfd0d56d84c18cdd3f4ce9f31bdaee3c1eb3fd6f88f69fbbcd8938855bd213205f3cd8c84fd10927e4ed74d77c7ba23594cb334e7297f5c609054129a3217bbdf756f6a9cbc25b7f4f3b6efee6c83a2576015f6de55950c5cdcaa20907fa3ea8357474567a60bc38905301c0584c9037479a2037835c967b8c33cc0a190b81b5ea81224dddc236b082b2e970299289b97f5f881cc715915374949495c2c", 0xde}, {&(0x7f0000000480)="021b189224d1304500802a90aa791da79de4916eaa5cb2bdfe8cbc5caea86598610cd53ae2b5983cb79139618fd463fe26eb34ca9bad5803483a1227c43ff3f36ed517840d3bd0c173a3ad50541b1666f61a5697c86b60ba5f2f738d8ad454a0d80b610baa065a3661ad6447bd9298dca95942434ecd21171584d241e91c0af2eae3609951b688a37f1eced347b634d0a698c818e0186b00756136729cd7bc005263fad8750edb5505510b988b3f791c4cdbd4958ee48a", 0xb7}, {&(0x7f0000000540)="9f3207890157afd90ed5f873e52f586f613956c0020f50b35ffafd771b3a3ee2891ab15fd4373a517f6c96cf4ef8fec79b940f47a8020e411c78f4689913cafa59efb8d84518be2871002479cccbd2ca5eb0b8d4be92d1b1f4d263cc7bc3b7745e0a00b452b04839e736ab0b3cb8d5d98e0edf62bc6593f130bd2556121ae1697be5c0fa609fc47576702ab02c2e574d79e2b7655af147e65394b4802944312441692def482f", 0xa6}, {&(0x7f0000000600)="b06be0f7e2c5261d05d641415e74e36822129d41f25058b1779a9b5f5d55664008a650085e90d0b6bb7dafc8344b5449d1591144e99db0593a3f17936d3dfa804cfef864ce9dc24f58303508ef43c5ac227996556008a4b6c7074a2a7629a3b320ae5cb77e1107d85de0ea4aec9786d29d3ff330bec2e0c51e5b89c5f5dcdc385c0b8ff66a128b5a51d4d4b921eb6e38a8ecf230df4c1161ceabcb271e7178ded99dab5d8ccabae9c6735a30a52db507c69531d6a975f25bde54a35816d917199bde275681f4d47ae3d30428cc524cb21d0013c400f5967a1ec6fac06478b8ce0de190", 0xe3}], 0x7, &(0x7f0000000780)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x10, 0x202, 0x7fff, 0xd8, 0x5, 0x1, 0x400}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, [], 0x1}}, @init={0x18, 0x84, 0x0, {0xb5, 0x5, 0x3, 0x7}}], 0x68, 0x4000}], 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000880)={0x0, 0x85, "d6e0fba5d15628d3cdb60d6deb745aa026d4d06ce702eecf73cd03e348c27aebdc35d0f71f2353c797afdd91b40cd58f596b8ea5f4187576906ccc48fef62890d40c85e546aeb7c748353058aaed0d25e774f9460e6dbd28eec4336aedf05074b2df7f3b8aff3a7b602e19d62cb19e56b2a8ca38121613f96294647def2b42a83c621ed2b8"}, &(0x7f0000000940)=0x8d)

00:25:42 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x10b000, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000d6f4655fd6f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@data_journal='data=journal'}]})

00:25:42 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)

[ 1547.276450][ T4395] loop0: detected capacity change from 0 to 4
[ 1547.470561][ T4395] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1547.494095][ T4395] EXT4-fs (loop0): fragment/cluster size (32768) != block size (2048)
[ 1548.036537][ T4396] loop0: detected capacity change from 0 to 4
[ 1548.419650][ T4396] EXT4-fs (loop0): fragment/cluster size (32768) != block size (2048)
00:25:50 executing program 0:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000b80)=<r0=>0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r2 = getuid()
r3 = getgid()
r4 = syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3])
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r6 = getuid()
r7 = getgid()
r8 = syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r7])
r9 = socket$l2tp6(0xa, 0x2, 0x73)
r10 = getpid()
ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000180)=r10)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000bc0))
geteuid()
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r12 = getuid()
r13 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r12, @ANYBLOB=',group_id=', @ANYRESDEC=r13])
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000d40)="fd8f622d69a16c949a0743a1eac5bb61006f7a3bac9e5ffabffa5b8ce22dab9e1185afe05562ea1d5cf78dd8366f04dcceb32e9d9e853a836a43fd2aaf4178e91b15261a6ee34ac463c7e3f469c61e0ebfe48610b9fd7c3b11758d53f72d039dba9fc5724220278a1ac9793598b1345f36cbf32469fd96660ff2f311da452e2e1ba12f2b318018d13207c0450d2750d9e71fb237389c1117ad67bcc975a700cb0cc7cddb9b61496552d8c9f36a3a230fdff5873a644c8f8403951da609637420becec4fffcca27d1577ba43b1c2e57", 0xcf}, {&(0x7f00000003c0)="d6558d8d6f47846dce6dd2076ee42268db7f1ef9a10586cfdd9737407fac9cb5a505d1a1ca06289c10049a639c5219073ab9c8024f2cd21883265d49cd0a4a1c555ceece1a2563a7e8d300280e33cd157dd5ce0236a63ca7c49a7359a54c48", 0x5f}, {&(0x7f00000001c0)="fdb26e4a96d45d719e603460", 0xc}, {&(0x7f00000002c0)="7935849887eaf8501bc8a6b0f96ce6c362f4124e93e3ae9f8ece614ba8c8003085ab3f46066ced2a8da748c5a695359a3515792a8b6471d6a307503e7e60e4224aa3f3852af858aa52c49d433f7ef5ceb401117cbea288309413c335bec55c79525e0c6c7efeaf558b3c43aae413ce41b9b7d0314185762c918a1a17b5c3eccb1794d0db35791c0a94367530bd1eb4f755d408500d18", 0x96}], 0x4, &(0x7f0000000540), 0x0, 0x400c044}, {&(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)="183eaf", 0x3}, {&(0x7f0000000640)="c71a424449e3f52b2022e51b05d23120115e34d382c459bd74ae55251d62772961b19bf203d1491e813feda3095a", 0x2e}, {&(0x7f0000000680)="7b9daa30dbfdecc1707d73193e1a1cff57c7455bcc7615a4930bfe9199f23d75ae89ce142d0460a6e89b264f895389c24b18423bdd230a390601c7790dba52e7d72c4415ef9700968782f1490d120b2c0d328e82c0cfdd76ef6ef58259943c875e55a4103d984bd6df85857d995b31d2f4a34b6d3350da477ef38c024db940e06483d84183d9df5b4b0afeabc542bf7a4e81b71034142b36ea27", 0x9a}, {&(0x7f0000000740)="d964a44b5f4de028d5edda8215d84b4093d42c47d0314ea5974e18341c12bba19d5c63479f9fef54b17c64cbb5597974921c74394c5f88b74847fe6f9836e4b96edb4f85e9064446ad1dfd779d8956210189f43bbe0b291052c805f91c2493f06ae60d841a767122cbeb24080fca3a409b25d9373042b0027dc7f3e90d8e78b3a2b76f185e02ff24cfc54277ac8f24eee3bf47bfcadf2b02fb1e860a9083fa4fb262bc906096180adf59b176aec562ed67609e2f8e7d5113a1064a2d5be063e76e466cbcc8c908b745686561e8be114bff4536f44418070450e6dfb98e25144bfba6da9b", 0xe4}, {&(0x7f0000000840)="187296e1b46b1e19a9957ee6769a1d0e56fd036abfbde0a1b215803eda33a301b32799552e42d1bff2821ca322412e02e23a51ab7c0b466d5f04c992f1a34983acb204cc17e3729ef8e448407716e058a624e3bde941e2ea048eaad1382517771d88237d788ba3cb1b2f9e996e39e05b194ffe2b157dd0f5da74613973522b066511d97e5bec471af087a5bedf98d3c6a32144c8b48e192333a6f57bb185843e687ce9ca0c28bd98dfe269d1b15da8e5f44fefe72792b162560ef51e7c934da485c070cddb2faee67279131458826468", 0xd0}, {&(0x7f0000000940)="999e19b720081a01db3cdabe594f006377c8a1751f7d046d9e330223957ecceafc715f7958038875f3c0c358450c65f6cf7ae0ddae68d4bef1f2de30b0f423ac9de27ce52bd4fc7c5613bbb00da657938aedb106eeb4bd418e7068b563d1919e89", 0x61}, {&(0x7f0000000040)="0640b99838b42c9f3cdd5e134b7b755d08c5aa4d7fe4fd5c2c9cb3526c5a0d6f349003b2713e3a8af748dcc89dd11ea38c2337f1e062c5c3c15e540061e5840a6d33f2f32546bf11f077bf233c56f843d67ab26dbdf53384b678a54eabcd0fbf13f9396400f47cbd972236ce2a14935369d0acf0683ab72f2a5c5e93715708eef10ba01c1aefac08842c32171b878c1823b3bc9bb8a16722305b9f87b816653e402d310920ea592202c3a4853948c1c9426bbeb80983f4", 0xb7}], 0x7, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, r2, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r11, r9, r8, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}], 0xd8}], 0x2, 0x80)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040040", 0x1d, 0x2400}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001", 0x1b, 0x2800}], 0x0, &(0x7f0000013e00))

00:25:51 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)

[ 1555.878691][ T4414] loop0: detected capacity change from 0 to 2048
[ 1556.641386][ T4414] EXT4-fs warning (device loop0): ext4_enable_quotas:6442: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix.
[ 1557.455357][ T4414] EXT4-fs (loop0): mount failed
00:25:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)

00:25:59 executing program 0:
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00')
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000280)={0x5817518d, [0x1, 0x856, 0x5a], [{0xfffffffe, 0xf36c, 0x1}, {0x8, 0xff, 0x1, 0x1, 0x0, 0x1}, {0x10001, 0x7, 0x1, 0x0, 0x1}, {0x1, 0x91e, 0x1}, {0x1000, 0x4, 0x1, 0x1, 0x1}, {0x3f, 0x20, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x9, 0xfffffff7, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x1ff, 0x0, 0x1, 0x0, 0x1}, {0x1f, 0x1, 0x0, 0x1}, {0x6, 0xf6, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x4, 0x1, 0x0, 0x1}], 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc4, 0x101800)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
sendfile(r1, r2, &(0x7f0000000040)=0x1358, 0x6)

00:26:04 executing program 0:
syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f29b00", 0x0, "ee1e41"}}}}}}, 0x0)
syz_emit_ethernet(0xa4, &(0x7f0000000000)={@broadcast, @dev={[], 0x3b}, @void, {@x25={0x805, {0x1, 0x2, 0xfb, "33108610fb833b79bf570f9be2217e68b14ea0cee518f16fdd3ccbd11f5ed77f1940336424cdd4d0f10840fb783927e9f852de067874cc3c75d14ff14871bebafb819aa33ae7e8c2916477d870d33a7a689c7018ccf86da5a9dadef43be1c8c7b118f6ccb101cdfcf661f807f673b18e06603a92f56ee4ef1b69d7440700eae6412555ff71f7cfc9cb2ad0ad12862b4d45820a"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x3b7, 0x403, 0x5bc, 0xa09]})

00:26:06 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)

00:26:07 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x10)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/181, &(0x7f0000000140)=0xb5)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:26:11 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x10)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/181, &(0x7f0000000140)=0xb5)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:26:13 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:26:15 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x10)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/181, &(0x7f0000000140)=0xb5)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)

00:26:19 executing program 0:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008", 0x43, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[])
openat(r0, &(0x7f0000000040)='./mnt\x00', 0x40000, 0x10)

00:26:20 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1584.951041][ T4450] loop0: detected capacity change from 0 to 140
[ 1585.667278][ T4450] EXT4-fs error (device loop0): ext4_ext_check_inode:459: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[ 1585.714686][ T4450] EXT4-fs (loop0): get root inode failed
[ 1585.716152][ T4450] EXT4-fs (loop0): mount failed
[ 1587.340974][ T4456] loop0: detected capacity change from 0 to 140
[ 1587.935915][ T4456] EXT4-fs: failed to create workqueue
[ 1587.936996][ T4456] EXT4-fs (loop0): mount failed
00:26:29 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2)
mount$bind(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='pipefs\x00', 0x2008001, 0x0)

00:26:33 executing program 1:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

00:26:36 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201020000402505a1a440000000010109023f000101000000090400000002060000052406000005240000000d240f01000000000000000000042413000905820200000000000905030200000000000000"], 0x0)

[ 1600.304711][ T3504] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1600.494500][ T3504] usb 1-1: device descriptor read/64, error 18
[ 1600.815079][ T3504] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1601.034741][ T3504] usb 1-1: device descriptor read/64, error 18
[ 1601.159264][ T3504] usb usb1-port1: attempt power cycle
00:26:40 executing program 1:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

[ 1602.015346][ T3504] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1602.114808][ T3504] usb 1-1: Invalid ep0 maxpacket: 5
[ 1602.315447][ T3504] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1602.406719][ T3504] usb 1-1: Invalid ep0 maxpacket: 5
[ 1602.411398][ T3504] usb usb1-port1: unable to enumerate USB device
00:26:46 executing program 1:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

00:26:49 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x587080, 0x0)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x6, 0xfffffffffffffffe})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r4 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0xc0482, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="001a200000f1030000", @ANYRES32=0x0, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
shutdown(r4, 0x0)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000040)={r2, r3, 0x5})

00:26:57 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:26:58 executing program 0:
r0 = getpgid(0xffffffffffffffff)
r1 = perf_event_open(0xfffffffffffffffd, r0, 0x6, 0xffffffffffffffff, 0x3)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/70, 0x46}], 0x1)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=<r4=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, <r5=>0x0}, &(0x7f0000000380)=0xc)
r6 = getgid()
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="da2b5eea1fb4c02ba7ae2ae85c7c87ac8018483a933b2b3b345562eecabec4677e3dbf2ad4b70f25487980531903f2b5bb0811974fd00f8791b36d395badb7793dc97d20cd87e36d8a395a1642fd54b6de21a3be61c1af7c7294fd31", 0x5c}, {&(0x7f0000000100)="02afd725a3c37e4385c5d9be43fbc70ee1a2771e215e90e57da3cb875b2cec4ef3ee2ccc4b83eeac65185f1a4fc45c158be412", 0x33}, {&(0x7f0000000140)="cf88f83f708d710675e2381471deb90aedcb7ff459fce166c179361743c55847de0c0a51f9d58f0969f76e3a7c1a73efa06154000c5f95a4fae58101b51ef852c285a4adcfe2c1a7eac2a97d779c5f01e657d2e5cd5c9e7a0eef7433ddac7b677f01efb454072eb1c7dbaccaabf6f504c3fb3d02ae4f77b90f415bb7f2cff67f44e57a1bc08144a51a57d59fa36218b7cf2e6c8bb3f907aa1dfe6fe402", 0x9d}, {&(0x7f0000000200)="8853998293be954bf47fb4f183d7486e8dd9509b7849051dc2ba61b92beeb9916cb95a5c388b6072043bee8e645519acb41c016a673c0bfea3fbb6c6bd5595d67ea3267006bab506e8f1d900187695655d1464955971f3e92aaaa26f5565c36bc4e10bdae9cdf0d6403075df58e1be839e6ac1c1a5b5f61adbabb24bcdb6e8d041d91ca123a51eda521c414d3247f8d1d661f844daae27af191bbdd16820617cc392012828d2d0c554454a2c6a6444", 0xaf}], 0x4, &(0x7f0000002400)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r0, r7, 0xee01}}}], 0xb8, 0x8040080}, 0x1)

00:27:03 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x6, 0x10, 0xf9, [{{0x9, 0x4, 0x0, 0xe5, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "8e5b"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x800, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x1, 0x2b}, @mbim={0xc, 0x24, 0x1b, 0x22, 0x401, 0x5, 0x8, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7b}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x401, 0x5, 0xfe, 0x5, 0x3f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x81, 0xc0}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x28, 0x9}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4b, 0x3, 0x2, 0x10, 0x4}, 0xa9, &(0x7f0000000280)={0x5, 0xf, 0xa9, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0x5, 0x80, 0x200, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x36, 0x5, 0x20, 0x8}, @generic={0x84, 0x10, 0x2, "80b22abeeb4caebdcfeb8545a6d6195d4998425e261532ec4e38a565c4d0c09940b3fc6f6af2fea01fc47d8351aefddaa74a7b722462dcf5d259d45399e036c6cc921470b4adbefe7f191cad1e44c9a51a84ecb592f20e66003bc354dbe92d299f0644bcb2c5d73a176e78a6cdcbc94d002925d4e9f2b3f1f3001008bba83ee960"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x6, 0xcb9e}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3820}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41a}}, {0xd4, &(0x7f00000003c0)=@string={0xd4, 0x3, "eae4976cbd41af3399182dcf72e16cd284e8939b2ec12d24f9b50e2d32d8890688c065ea5b2bd7441a969df5fb9ef11e680c87ad46c3c23f8720c3ab67b9375433d80ae568f8517ea119e6402019d0a491c8f88968a0006ef04c4c7c7140efb1e2a5988cbf80bbde483d6756ee730c5f1b304fe2e3b0489482fdeadfc309b09777c5a059778f1191e18f5bbc836d6684b2832e96cdaeecd66b2af35f9e2c29ec82bb2d0d75f442cf2cf703c547a2005b8626471ca70062e80652ec6eeaa7760d67da270168354f06b2557fffd0fde938fe3a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x7, &(0x7f0000000500)=@string={0x7, 0x3, "4379c485d1"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x4c0a}}]})

00:27:04 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1627.225497][ T4458] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1627.434230][ T4458] usb 1-1: device descriptor read/64, error 18
[ 1627.755097][ T4458] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1628.004759][ T4458] usb 1-1: device descriptor read/64, error 18
[ 1628.129972][ T4458] usb usb1-port1: attempt power cycle
[ 1628.895462][ T4458] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1628.987987][ T4458] usb 1-1: Invalid ep0 maxpacket: 219
[ 1629.244774][ T4458] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1629.369690][ T4458] usb 1-1: Invalid ep0 maxpacket: 219
[ 1629.391027][ T4458] usb usb1-port1: unable to enumerate USB device
00:27:10 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:27:15 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0)
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040))
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x9)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
write$sysctl(r2, &(0x7f0000000080)='6\x00', 0x2)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x4)

00:27:17 executing program 1:
r0 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:27:24 executing program 1:
r0 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:27:29 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0)
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040))
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x9)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
write$sysctl(r2, &(0x7f0000000080)='6\x00', 0x2)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x4)

00:27:31 executing program 1:
r0 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:27:36 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/38, 0x20})
read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0x0, 0x3dadf00277194bc}}, 0x50)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x21, 0x40, 0x800, 0xfffd, 0x200, 0x6, 0x800}}, 0x50)

00:27:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:27:41 executing program 0:
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb605, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x24}}]}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xb3, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x2, 0x1, 0x20, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "9a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x1000, 0x2, 0x1c}, {0x6, 0x24, 0x1a, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0xc0, 0x9, 0x1, 0x80}, @dmm={0x7, 0x24, 0x14, 0x0, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x57, 0xfff, 0x81, 0x92, 0x9, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0x8, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x8, 0x3f}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x150, 0x4, 0xb8, 0x84, 0xff, 0x3}, 0x10, &(0x7f0000000900)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7f, 0x1, 0x9}]}, 0x2, [{0x2d, &(0x7f0000000940)=@string={0x2d, 0x3, "c1164a7a97a62702169fd44acc6e6b413301c78f2b03f617f064790768e0674a165d9d2e6e4ca8cae92292"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x2800}}]})
syz_usb_ep_write(0xffffffffffffffff, 0x2, 0xf7, &(0x7f00000006c0)="27c88afbbbfad868be6e2b54f323afb7c052c21da506c0e819ce56ef5b4a3f11e1c34797fb80609515b9692597cf466a11953a40b5327d8d2d7e93c54442873e77b90c525e8c41f0e94528fc06c583d486ee46d1fcb1efe199d660c68fa4fac01e499118fef03e9f04f24dee2cf4f3486c75366e7341fa6e23531b77f5630caa8b94d0c735e54210b11e021b0ab91545ec7527272a9c00e13c70ac3bead1b9a4097a878814e2259e4fc8d26babc8ec23301a81a6629e1d5cd0fd89a67c667f7e437d957cbd13c662f46479d1f93c6f78791f2857f253c6ec39dde5877d9c471219b7bd59cdf33e6fe9be8a79ffb66186968236d764fe23")
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc091, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x70, 0x20, [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x3, 0x1, 0x2, 0xe3, {0x9, 0x21, 0x81, 0x8a, 0x1, {0x22, 0x93e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc9, 0x6, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7f, 0x6, 0x9, 0xea0b888b1cc6702, 0x5}, 0xf, &(0x7f00000000c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x81, 0x59, 0xffff}]}, 0x1, [{0xe2, &(0x7f0000000100)=@string={0xe2, 0x3, "dd2575ae4e5b4ddaafc44a4820af861b48cfd8aae5d85d92c509b39228e8766b63b62e0294f4dd69334c5b322d04875394302c4a1b33c9d619909955bbcdf5430279b0f58833fe4a609f7f9a1c9e10f291d2fe91a38e5e5a097c82374fdd4617f47b9a2be7676438f8cb6a83b94a70c2cbb1397a0bf47211ea964db670f61c9d92a6ed3ae0af6a681d84e3420d4e53f4d19a07557662ba2ed1975af8243d9ad3faaf0213572dd6982d38a6b04470c0419f87893ed7f22119e0382b608d89a1edbbcaf9a77a260bb4ba42d047e77d3b5f4da47121e4d3c83b2853613dd6bcd321"}}]})

[ 1665.188077][ T3870] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1665.455558][ T3870] usb 1-1: Using ep0 maxpacket: 8
[ 1665.597076][ T3870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1665.600141][ T3870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1665.655792][ T3870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 36, changing to 9
[ 1665.658088][ T3870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1665.661221][ T3870] usb 1-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00
[ 1665.698234][ T3870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1665.881387][ T3870] usb 1-1: config 0 descriptor??
[ 1666.211522][ T3870] usbhid 1-1:0.0: can't add hid device: -22
[ 1666.237716][ T3870] usbhid: probe of 1-1:0.0 failed with error -22
[ 1666.637685][ T4533] udc-core: couldn't find an available UDC or it's busy
[ 1666.638928][ T4533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1666.759228][ T4533] udc-core: couldn't find an available UDC or it's busy
[ 1666.760738][ T4533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1666.834699][ T1935] usb 1-1: USB disconnect, device number 16
00:27:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1668.913831][ T3146] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1669.226975][ T3146] usb 1-1: Using ep0 maxpacket: 8
[ 1669.405963][ T3146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1669.408085][ T3146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1669.409958][ T3146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 36, changing to 9
[ 1669.425527][ T3146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1669.428546][ T3146] usb 1-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00
[ 1669.430336][ T3146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1669.597796][ T3146] usb 1-1: config 0 descriptor??
[ 1669.930921][ T3146] usbhid 1-1:0.0: can't add hid device: -22
[ 1669.974369][ T3146] usbhid: probe of 1-1:0.0 failed with error -22
[ 1670.130503][ T4533] udc-core: couldn't find an available UDC or it's busy
[ 1670.175317][ T4533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1670.654700][ T3509] usb 1-1: USB disconnect, device number 17
00:27:51 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8880, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffff8c07f197}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000)
r2 = accept4(r0, 0x0, &(0x7f00000001c0), 0x0)
r3 = dup3(r0, r2, 0x80000)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x20200, 0x0)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x4, 0x4, 0x1b, 0x15, "fc1923c820c6d31b3f00ff082ce15b5afa30158c1719d7de9ea4a3a04d1d21b3f652d116fcd23026261459422334a6026a7756de34357b038fc30db1067435fe", "8cc9fc1b426974af25aa0d05de804869b68ac42453cd0b2797574fef7fe7f565", [0xff]})
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000002180)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f0000001d00)={0x40c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x56}}}}, [@NL80211_ATTR_TESTDATA={0xac, 0x45, "b1a10ca9b5ac7dccd884520bb63ba697395f1f6af1a4ca2d7b8bbbfc52063d5d629b9378072f2b05a21a3b879ea16da40dafda4d0a9ba3cca74ba246c4ed3e0ae1d5f2587780ef4c75864ea20b0a314f2fdce3609969546c6ed4178e4ef77302a4a1bbfa9a2b106109839036c8db6acd86133ec29bfa281e285d731c95189b8679432253717b4d71ae0707947ebd8d97c6f54dbbde15cf8b3addaa2ff0ac7b8ee06d7e1a5aec0c43"}, @NL80211_ATTR_TESTDATA={0x19, 0x45, "e9cdd14e372c84d83166a9c1bc4d4911481a484243"}, @NL80211_ATTR_TESTDATA={0xdc, 0x45, "50ff94f6d7d23cdcda08559b2c4b76dc6732d1a33606b85c2fd42e98381f44e6e9915cfb194ef8ec5ec7047c881b29ae367b7e2d763f5f0154656740fd8010d8e1640b9f873a6c18e7b0ac052e12ff6132582a18d0013fc021861812c27aaff4b3871794eede090924867a02b525b52102fed243dc9e87c7d6d0a02026daa3ccaf7784a21ee86f1f6ded0c2f551e93f016d36bc4bf00832046d9b590bf9069c6b0f74c345162ea5983d5f0759dbad36fba89046bc738d53713dc3addde639dce4e0780227499e3f030cde778c4495998455e5783fea582fd"}, @NL80211_ATTR_TESTDATA={0x66, 0x45, "bfcffff0794f9113468d07e61ea0eaae9ce76eb875f58cf776f50f39d8a90adc75505a867be2cf27bbdce0af57a5b32d4f3887834c2463d29338afc3644b2f7ba365ebc03489b1991de3cc830ddc072e5ef2d4c82d296a8ecb04a223e0e4a73d5ee2"}, @NL80211_ATTR_TESTDATA={0x2f, 0x45, "21655faf4bf47744bab88ed1923b546afda35513024fdb576e0a2a8c7662c56a62f6881aa0a38d92e13948"}, @NL80211_ATTR_TESTDATA={0xf2, 0x45, "24922b885607fe4726a5c71c63cb841f5a350fb332a57b94afc02bb55094c699102c16a2b9ac22f618432189a76a5639e340b0ca5a5aed0cf481ad495272aec586ecfbdd20a0a25cedaa4127a6d86b46841160e7d680aa0ae97195cb6e607e7ab9e38844676710bfdfe6e86a61b54dd45fe04bc8d3bf47d093e78d3e71c394b8e74801804ab14bb71f78a48150605a7d8a33d1d4d3d22904d2c4771b937e55a1fefe3420d2f224db57401c0209b1fb9988856ba1791abbb5810f1ab0e00540798a62e7def9e94bee30fc9beb421238601a3bcea7b8150de7209f5672fff4fd7464a9b862d55c411c0bb823c86a0e"}, @NL80211_ATTR_TESTDATA={0xb2, 0x45, "2e9b5134d63cfc2fad687ec791cab6b3d9c2d178cacba544f6cba0f94cec97a8117230ac7da224f593a32a8673c09d4fb1b3b5537613cbca3d8b00de81c1d91cd0ccac8329706d3a5aa9aa165a6a58c38cd40ae2bf7b994138317cb7ea0c67fe934656c45fec7d85034560321d54b2810db12476ba61f538ea56cf9ee8a7efb79a85fb00d5b352ac2a61396e1a3996dc8864290d808b34c28fd4aded3bbd39771e0485ba72a87d0f488935929166"}]}, 0x40c}, 0x1, 0x0, 0x0, 0x24000801}, 0x24004008)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000021c0)={'veth0_to_hsr\x00'})
r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000002200)='/proc/self/attr/exec\x00', 0x2, 0x0)
fcntl$setownex(r6, 0xf, &(0x7f0000002240)={0x3})
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000002280)={{<r7=>0x0, 0x800, 0x5f2f, 0x65ee, 0x10001, 0x7f, 0x8, 0x1, 0xfff, 0x58ab, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x4}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, r7, "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", "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"})
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000004280))
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000042c0)=0x15, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000004300))
write$binfmt_elf64(r0, &(0x7f0000004340)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x57, 0x3f, 0xcb, 0x3, 0x6, 0x3, 0x14f, 0x40, 0x2bf, 0x5, 0x6, 0x38, 0x2, 0x82, 0xfffd, 0x20}, [{0x4, 0xffff, 0xfffffffffffffffc, 0x82, 0x9, 0xa000, 0x9c41, 0x9}, {0x2, 0x7fffffff, 0x2, 0xe6, 0xff, 0xfff, 0x6, 0x4}], "5a1334bd534b1ecd0a92f4ce140a463abd385d2f9a8bdb7d42eb0caee546117f4a", [[], [], []]}, 0x3d1)

00:27:55 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:27:57 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='user.incfs.metadata\x00', 0x0, 0x0, 0x2)
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x42400, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x100}}, {@max_read={'max_read', 0x3d, 0x81}}], [{@dont_measure='dont_measure'}]}})
llistxattr(&(0x7f0000003100)='./file0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x0)

00:28:02 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1236e1, 0x0)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xb0, 0x120, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0xffffffffffffffff, [0x0, 0x7, 0x3, 0x5, 0x0, 0x1], 0x5, 0x6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x2, 0x100, 0x0, 0x0, "dadda20df83d7b75ecba4ad6e2892259a07d9c5cbcee53052ba6bf41b6b08cc45fb760d589fbb1452d44d060e16f407084637092296ccd37fd638e0e3f18216e"}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00', 0x0, 0xc, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
ioctl$TIOCNOTTY(r4, 0x5422)
clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
utimensat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={{}, {r5, r6/1000+10000}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100))
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="9b", 0x1}], 0x1, 0x0, 0x0)

00:28:02 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:28:07 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000040)="00004fc00f89194f83", 0x9, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000000280)="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", 0x16b, 0x2200}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3e1bd6c6636c6c5e4a7eabbd66c9aca2efbe65a200010000000000f47d2e43356b11b3c6748082c04690edda42000000000000da7ab400"/66])

[ 1691.363986][ T4575] loop0: detected capacity change from 0 to 512
[ 1691.804423][ T4575] EXT4-fs (loop0): Unrecognized mount option ">ÖÆcll^J~«½fɬ¢ï¾e¢" or missing value
00:28:10 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1692.288607][ T4575] loop0: detected capacity change from 0 to 512
[ 1692.399605][ T4575] EXT4-fs (loop0): Unrecognized mount option ">ÖÆcll^J~«½fɬ¢ï¾e¢" or missing value
00:28:12 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x8202, 0x0)
sendfile(r0, r0, 0x0, 0x5)

00:28:16 executing program 0:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000003aa2ac8103a046169889a50d8894c561010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000012800)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f00000000c0)={[{@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}]})
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@sha1={0x1, "3d364efbf6b30a6121b115269b6d2f894f27b3f1"}, 0x15, 0x1)
mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000080)={0x100004, 0x1000f7, 0x380000, {r2}}, 0x20)
ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000001c0))

00:28:17 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1700.321013][ T4589] loop0: detected capacity change from 0 to 2048
[ 1700.536176][ T4589] EXT4-fs (loop0): Ignoring removed oldalloc option
[ 1700.998559][ T4589] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,grpjquota=,,errors=continue. Quota mode: none.
00:28:22 executing program 0:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r0=>0x0)
migrate_pages(r0, 0xfffffffffffffffa, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x3)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f0000000000000001000000000000000b0000000001", 0x59, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000000580)="ed4100f8ff030000ddf4655fdee5655fdef4655f000000000000040002", 0x1d, 0x1500}], 0x0, &(0x7f0000012800))
gettid()

[ 1708.848644][ T4602] loop0: detected capacity change from 0 to 512
[ 1709.888669][ T4602] EXT4-fs error (device loop0): ext4_fill_super:4943: inode #2: comm syz-executor.0: iget: root inode unallocated
[ 1710.042702][ T4602] EXT4-fs (loop0): get root inode failed
[ 1710.069778][ T4602] EXT4-fs (loop0): mount failed
00:28:28 executing program 1:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

[ 1710.977459][ T4602] loop0: detected capacity change from 0 to 512
[ 1711.567559][ T4602] EXT4-fs error (device loop0): ext4_fill_super:4943: inode #2: comm syz-executor.0: iget: root inode unallocated
[ 1711.605392][ T4602] EXT4-fs (loop0): get root inode failed
[ 1711.606916][ T4602] EXT4-fs (loop0): mount failed
00:28:34 executing program 0:
prctl$PR_SET_TSC(0x1a, 0x4)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)
prctl$PR_SET_TSC(0x1a, 0x0)

00:28:38 executing program 1:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

00:28:41 executing program 0:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r0)
r1 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x10, 0x0, 0x719a}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = add_key(&(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000004c0)="1716822392423713f110de529515b26ff4ed9f6d0a7a29452030dda5176aee0c7020369687aa6c94b2a575e92a213ad50aaf87883511bc4127670314c413d4d70188c8105fe294ce8759fe45cfb508d66cdb7a9e86c04464a20efa883ebb4d5a0e1a48d6ea3f97916ff64ec51c62e329e0791e7e10341083456146a9e473579a972ff8", 0x83, 0xfffffffffffffff8)
keyctl$search(0xa, r0, &(0x7f0000000100)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, r2)
close(r1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x24100, 0x0)
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="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", 0xfa}], 0x1, 0x6)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x6, 0x1, 0x3, 0x1, 0x11, "1e5d0c4ebc2e9611e9e4fa7841ef27811823a1"})
close(r3)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80080, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x2)

00:28:46 executing program 1:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f0000000480)=""/73, 0x49}], 0x6)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

00:28:49 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/125, 0x7d}], 0x1)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000b8c5c4d1b3cf4b38ab2e2967fb770ff3010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d4f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x200}}]})

[ 1733.001173][ T4636] loop0: detected capacity change from 0 to 2048
[ 1733.710828][ T4636] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000200,,errors=continue. Quota mode: none.
00:28:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:28:54 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0x8080)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000400)={0xb23e, 0xfffffffb, 0xfffffff9, 0x1ff, [], [], [], 0x30, 0x81, 0x3, 0x2, "66e4dffbf58cef11fdfe2045fbc42058"})
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80)='802.15.4 MAC\x00', 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000540)={0x1, 0x3, 0x1})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4e}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xdf}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x85)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00', 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x1, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x48041)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1740020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

[ 1739.395023][   T11] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1739.623526][   T11] usb 1-1: device descriptor read/64, error 18
[ 1739.944701][   T11] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1740.245431][   T11] usb 1-1: device descriptor read/64, error 18
[ 1740.378010][   T11] usb usb1-port1: attempt power cycle
[ 1741.185400][   T11] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1741.383214][   T11] usb 1-1: device descriptor read/8, error -61
[ 1741.688615][   T11] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1741.955352][   T11] usb 1-1: device descriptor read/8, error -61
[ 1742.084326][   T11] usb usb1-port1: unable to enumerate USB device
00:29:02 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:29:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:29:15 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x521, 0x141)
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x2, &(0x7f00000002c0)="219916f5", 0x8, 0x0, 0x0, {0x0, r5}}, 0xddc6)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
getpeername$inet6(r6, &(0x7f00000001c0), &(0x7f0000000280)=0x1c)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000140)={0x3})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}], 0x0, &(0x7f00000000c0))

[ 1758.627548][ T4662] loop0: detected capacity change from 0 to 1024
00:29:17 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f0000000440)=""/7, 0x7}], 0x5)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1759.079703][ T4662] EXT4-fs error (device loop0): ext4_fill_super:4943: inode #2: comm syz-executor.0: iget: root inode unallocated
[ 1759.095789][ T4662] EXT4-fs (loop0): get root inode failed
[ 1759.096932][ T4662] EXT4-fs (loop0): mount failed
[ 1760.261405][ T4662] loop0: detected capacity change from 0 to 1024
[ 1760.655672][ T4662] EXT4-fs error (device loop0): ext4_fill_super:4943: inode #2: comm syz-executor.0: iget: root inode unallocated
[ 1760.659957][ T4662] EXT4-fs (loop0): get root inode failed
[ 1760.661240][ T4662] EXT4-fs (loop0): mount failed
00:29:22 executing program 0:
syz_usb_connect$cdc_ecm(0x7, 0x58, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x20, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0xa, 0x24, 0x6, 0x0, 0x0, "abb5d4fea1"}, {0x5, 0x24, 0x0, 0xd159}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x90ff, 0x1, 0xe6}, [@country_functional={0x6, 0x24, 0x7, 0x27, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x10, 0x34}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x55, 0x7}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0x3, 0x2, 0xdd, 0x40, 0x8}, 0xf1, &(0x7f0000000680)={0x5, 0xf, 0xf1, 0x6, [@ptm_cap={0x3}, @generic={0x3, 0x10, 0x1}, @generic={0x92, 0x10, 0xa, "6686740a3f193712517f8a07e9e5e725a27c7c634843c78d3cc9bc5c74e2e650f531a1bf37e3e56dce3303eda7cac54b9ffe490593c0fba1ba4cad76a3562a111ced5a33f735974bffb8a31240723d3d84bdb07002c5bc43c3c97d3139f40249b5ae13aeab277b94de5c07556adceee66a2f64befaacb4c847326e7b1350ba9fb82f1db36a94928b672e77515b5d3f"}, @generic={0x42, 0x10, 0x4, "9823f76b2c5c443677f68e1048501b6d29c1f3d98dc87763becf095e58c354fc2a51fe2527f4a3906b8ba4b1a51f4a3865144c363ae14d4132780c03906bf1"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0xc, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x81, 0x4, 0x6, 0xb4}]}, 0x5, [{0x39, &(0x7f0000000780)=@string={0x39, 0x3, "f1d3233afd10ab1132d39e77ce8fa1fa99f6cb8580a9efa148b5dbf30b43201a8ef1f399cc145d0ea82f0a6c2d02bfb4ab9138fe388d7f"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x414}}, {0xd3, &(0x7f0000000800)=@string={0xd3, 0x3, "9089e531d4c21dc13180d61a7c8147a2aaea39b7052a37fb1e32861bd23866edd54e6e3dc32262618ee19d60d119593b5296bcd98b6d010eb98686c6e52b3b5b3b80ce2682d66291395ffdfacb5b7345437cc408039e1ac47e4d976f8b4d1e402ba40032bfce284148d4a7df25fcc68cdc09a0177d93f3a9272cfa62d7cb90e5bd81f78dca6690f8190981559a2f7474b4ad5b3f36eaf90df0e4371d7b3602d03a40b571fa3084335a802ae72494293e24c0e3064208feb58d927249fc39124563a8017338cd25f3a41d05642cd1f15d2c"}}, {0xd7, &(0x7f0000000900)=@string={0xd7, 0x3, "05209c2c3b7e32b51c96048be714614aefacec6b22c0ecd9d3f6e1bf60b751c29c2a4a37b327c35bd8aebc24e66eecda4b0d50fe7123b1518f32cbb52c62ad380b6089bfbda0d7d8f52988fadf6b59c4621be08b00b91fbfdf30b321ee6c87c8b5235c2f9ce90e47bcaf6564b2aa34be6537a605863f69f76cad9879048bd7f3d9284e7d22c778fd9468478c32731bb24a413f122cf377e0b8fb2e110e2f967ec8d5f5111bd94ea11017477cc1cf3531fd883cb29428da2827ed2419b792018f5eb866b12d79c0c68bb9aa2ba4e9507e3a147b1aa6"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1401}}]})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="92c1cb0af262cf2bcd57888faabee0d49e7dcadcdc3871056031f07bedb6e06e7617b8bfdad3964dae4b181ac55b0909bf1c31ff362a8b1538a54d71580387bcae3951", 0x43}, {&(0x7f0000000200)="f44518c0b01edd507d9b26609719e6a0271b7b628e2f7cce3d60fd51883ad62dbe5394dd3178863a98d0de3b29423e0d697496f0d8862c69e429d42d7eade79a094e0cd25aa1aad6ec0b2148a99c0c5ada44d21c5f0ed35e521d54c36031192a95ac81801f7299d39f65b8f8914a7a0420fb4b4b57d759", 0x77}, {&(0x7f0000000280)="789c0e32e053505b19c24a5c47413b29ad32dd121a3616d7395d48cf2db8fb18d0c7291a80420746dcef9748554b99cea1716bedfb3114d5f659a9681d21e41954abc71ace497959b8e6c9327c0ed75e000d9f42058d8b77d922b58fb8c61de136880c09adfa2f137d58c1b07d1787bc674f2abd9300f765d0eb57db2d63e2d9795c7a29733ad028b8a2", 0x8a}, {&(0x7f0000000340)="63553c518d044f475fadeab820d56967931bc5713cc420c7343f70614b03859bf3c5f5b90df1b45fc1ac3cc90e55217f501f6672b0befc3a15d48bd4881243d6765d80b0e5a3bc1875dffffa326ebbbf99fac3287cf8cb6b2ce12d7ef2aba0c1590c856315ebbc6b6ad1d6ec215fb9523cfc0dc4689343ae335d602de524c6d6f0028b391b89d6ece8627d2082a29c1eff66ab32c28b10973b843d92f0cf35e2cb43c786b9a614af54b7521f71c1", 0xae}, {&(0x7f0000000400)="82856b798fdb03947f01e418739d9c05ea0b55d53993e732774ac5ac35edf70097977d32972b16c539927bfabbcc8493e40cd586e4a55dc9cf0357f9aebc48f35c50136cafaa1fe165f8b0234a8c33894047024335b6336fac2c99f1f0845317a7e8fe1d98f6b1168a7a4140b07f274768ba433c19a058393a9fa152c7f13c7b623b0d71cccc88f60f5b87e1281b", 0x8e}, {&(0x7f00000004c0)="de82a4aff526c52a0d3021fa6a465d320bba01c924340dbaf8c0aa514c0c3c342123c095df6c92485d8f0c22286efeb90ad7eb50c2e929bd66b41d99e6f3ea0cda49edaad25017a8f350056c502fbb19d7b9b7c97170f5376e50", 0x5a}], 0x6, 0x800, 0x4)
set_mempolicy(0x3, &(0x7f0000000140)=0x9, 0x401)
syz_io_uring_setup(0x77f1, &(0x7f0000000040)={0x0, 0x5f94}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

00:29:24 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f00000002c0)=""/247, 0xf7}], 0x4)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:29:28 executing program 0:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
connect(r0, &(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80)

00:29:31 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/114, 0x72}], 0x3)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:29:32 executing program 0:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000010c0)={<r2=>0x0, 0x2f, "c47b9a97e5a3378fc54ea7f5af370ce9dfdc76a05075172f1b1154ed0f948ba963b1827b803258e2727213e751adf7"}, &(0x7f0000001100)=0x37)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001140)=@assoc_value={r2, 0x5e94db97}, &(0x7f0000001180)=0x8)
r3 = memfd_create(&(0x7f0000000080)='!\x00', 0x1)
ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000000c0)={{}, 0x0, 0x12, @unused=[0x10000, 0x0, 0x401, 0x7], @subvolid=0x77aa9c96})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4}, {0x16}]})

[ 1776.918148][   T39] audit: type=1326 audit(1775.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4693 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x39d30 code=0x0
[ 1778.507452][   T39] audit: type=1326 audit(1776.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4693 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x39d30 code=0x0
00:29:39 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:29:39 executing program 0:
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='\x00', &(0x7f00000000c0)={0x200003, 0x41, 0x4}, 0x18)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L+', 0xffffffffffffffe1}, 0x16, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fbd01001a000000000000000000000000780000020000000000"], &(0x7f0000000180)=""/237, 0x1a, 0xed, 0x1}, 0x20)

00:29:45 executing program 0:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000190c0)=""/65, &(0x7f0000000080)=0x41)
read(r0, &(0x7f00000000c0)=""/102400, 0x19000)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000))
close(r0)
r1 = syz_io_uring_complete(0x0)
write$P9_RREMOVE(r1, 0x0, 0x0)

00:29:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x2)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:29:53 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f00000105e0)="0000000000000000000000000000000000000000000000000c0000de5551aadd00000000f40300"/64, 0x40, 0x17e0}, {&(0x7f0000010620)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1be0}, {&(0x7f0000010660)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1fe0}, {&(0x7f00000106a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x23e0}, {&(0x7f00000106e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x27e0}, {&(0x7f0000010720)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2be0}, {&(0x7f0000010760)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2fe0}, {&(0x7f00000107a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x33e0}, {&(0x7f00000107e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x37e0}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3be0}, {&(0x7f0000010860)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3fe0}, {&(0x7f00000108a0)="0000000000000000000000000000000000000000000000000c0000de2b607f29", 0x20, 0x43e0}, {&(0x7f00000108c0)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0x4c00}, {&(0x7f0000010cc0)="00000000000000009f09c75f9f09c75f9f09c75f00"/32, 0x20, 0x8c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f0000", 0xa0, 0x8c60}, {&(0x7f0000010d80)="00000000000000000000000000000000000000000000000000000000acff0000", 0x20, 0x8d60}, {&(0x7f0000010da0)="000000000000000000000000000000000000000000000000000000000ee30000", 0x20, 0x8de0}, {&(0x7f0000010dc0)="00000000000000000000000000000000000000000000000000000000ce1e0000", 0x20, 0x8e60}, {&(0x7f0000010de0)="000000000000000000000000000000000000000000000000000000007f6e000080810000003004049f09c75f9f09c75f9f09c75f000000000000010002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000005620000", 0xa0, 0x8ee0}, {&(0x7f0000010e80)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;W\x00\x00', 0x20, 0x8fe0}, {&(0x7f0000010ea0)="00000000000000000000000000000000000000000000000000000000fbaa0000", 0x20, 0x9060}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000004ada0000c0410000003000009f09c75f9f09c75f9f09c75f00000000000002001800000000000800000000000af301000400000000000000000000000c0000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070fa0000", 0xa0, 0x90e0}], 0x0, &(0x7f0000010f60))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt', 0x0, 0x0)
r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
ftruncate(r1, 0x9)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@id={0x2, 0x0, @a}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'})
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x1c0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x0, [], @a='i\xb2\xf6\xed\xee\xe7 \xcc\xe0Wy7\xeb\x8agQ'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='mnt/encrypted_dir/file\x00', 0x42, 0x180)
write(r3, &(0x7f00000005c0)='foo', 0x3)

00:29:55 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1797.200016][ T4720] loop0: detected capacity change from 0 to 144
[ 1797.610074][ T4720] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1802.738936][ T4724] fscrypt (loop0, inode 12): Error allocating 'cts(cbc(aes))' transform: -4
00:30:08 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a090000000000000000", 0x80, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f00"/64, 0x40, 0x4e0}, {&(0x7f00000100c0)="0100000000000000000000000000000000000000040100001200000000000000", 0x20, 0x560}, {&(0x7f00000100e0)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b00000000", 0x60, 0x7e0}, {&(0x7f0000010160)="ffff05000c000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b000000dc030a026c6f73742b666f756e6400"/1088, 0x440, 0xc00}, {&(0x7f00000105a0)="0000000000000000000000000000000000000000000000000c0000de46b807b70b0000000c0001022e00000002000000e80302022e2e00"/64, 0x40, 0x13e0}, {&(0x7f00000105e0)="0000000000000000000000000000000000000000000000000c0000de5551aadd00000000f40300"/64, 0x40, 0x17e0}, {&(0x7f0000010620)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1be0}, {&(0x7f0000010660)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x1fe0}, {&(0x7f00000106a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x23e0}, {&(0x7f00000106e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x27e0}, {&(0x7f0000010720)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2be0}, {&(0x7f0000010760)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x2fe0}, {&(0x7f00000107a0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x33e0}, {&(0x7f00000107e0)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x37e0}, {&(0x7f0000010820)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3be0}, {&(0x7f0000010860)="0000000000000000000000000000000000000000000000000c0000de2b607f2900000000f40300"/64, 0x40, 0x3fe0}, {&(0x7f00000108a0)="0000000000000000000000000000000000000000000000000c0000de2b607f29", 0x20, 0x43e0}, {&(0x7f00000108c0)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0x4c00}, {&(0x7f0000010cc0)="00000000000000009f09c75f9f09c75f9f09c75f00"/32, 0x20, 0x8c00}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c1f0000", 0xa0, 0x8c60}, {&(0x7f0000010d80)="00000000000000000000000000000000000000000000000000000000acff0000", 0x20, 0x8d60}, {&(0x7f0000010da0)="000000000000000000000000000000000000000000000000000000000ee30000", 0x20, 0x8de0}, {&(0x7f0000010dc0)="00000000000000000000000000000000000000000000000000000000ce1e0000", 0x20, 0x8e60}, {&(0x7f0000010de0)="000000000000000000000000000000000000000000000000000000007f6e000080810000003004049f09c75f9f09c75f9f09c75f000000000000010002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000005620000", 0xa0, 0x8ee0}, {&(0x7f0000010e80)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;W\x00\x00', 0x20, 0x8fe0}, {&(0x7f0000010ea0)="00000000000000000000000000000000000000000000000000000000fbaa0000", 0x20, 0x9060}, {&(0x7f0000010ec0)="000000000000000000000000000000000000000000000000000000004ada0000c0410000003000009f09c75f9f09c75f9f09c75f00000000000002001800000000000800000000000af301000400000000000000000000000c0000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070fa0000", 0xa0, 0x90e0}], 0x0, &(0x7f0000010f60))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt', 0x0, 0x0)
r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
ftruncate(r1, 0x9)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@id={0x2, 0x0, @a}, 0x40, 0x0, [], @a='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@'})
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x1c0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x0, [], @a='i\xb2\xf6\xed\xee\xe7 \xcc\xe0Wy7\xeb\x8agQ'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='mnt/encrypted_dir/file\x00', 0x42, 0x180)
write(r3, &(0x7f00000005c0)='foo', 0x3)

00:30:12 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1817.867980][ T4745] loop0: detected capacity change from 0 to 144
[ 1818.935541][ T4745] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
00:30:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:30:21 executing program 0:
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x9c8)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x1041, &(0x7f0000000080)=ANY=[@ANYBLOB="66643d4197e1ec18f806e1bacf2059f34df809be4291f4e10f966ccd846c0590d5837d2b00749366f67b58e1d0f2e8d3b7a3af7f366314607ad6f06e24d08dc2cf2490d67d824d377ee4b133260a3caeb9e2019e386ceafcc2afe9178981a288edf93f090d58513c9388ce2d8313c99d036407a1bed7c1d0bceda301a52f6aa84a99ca0a01d4e116b4f9e61be568c3a2fce4d66fb114026fa89df9c9d546beae572925cf5bf5647401d5f68486b1d0b4aa8c6fa4ab7b59610e891f3ea844b26ae87e720bc4cab150863b83a590335f2aa5", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303006003034303031302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="0300"])
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0x8008af26, 0xe9002)
fgetxattr(r1, &(0x7f0000000200)=@random={'btrfs.', '/dev/fuse\x00'}, &(0x7f0000000240)=""/71, 0x47)

00:30:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x36c}}, 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="30000000041410002abd7000fcdbdf25080001000100000008000100020000000800010002000000080001000000000075b9ec1091c2fad8916b246cb5a10379f1bafd72cca568244d8b03c3235483f8a3864917518ae951acf621d85790e943f2e9d4db4d4f11d65ce55e27f17c6d3e548b38d8b14ff23c8752ec0ce1f88235ab1298672a17f5c11acbc152d8d26722a3b624913bec3209d9b38948d679c96828808391e11ca55fec803982dcd964d9ed871f8fac4d5d28ab64d1aeb30bb72e845c9266d3c6a6480acf19537214d66998cd2e70e38be58a78f0af9b47bad91d2d0333cb2d7047322b204592d2bbcf648c4e9a96ab0030183343bf0a256a71fc42b9ba89a1aca7479d199ae476340c63dd091aab79bef8288ee78a3dfc1b4cde889530570755e0df6d17d2821483ab8404a791452c521bd007d63365cc7b5a7efe"], 0x30}, 0x1, 0x0, 0x0, 0x1000}, 0x4010)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', <r3=>0x0, 0x29, 0x3, 0x6, 0x5, 0xd71c0e49ef33306f, @private2, @remote, 0x80, 0x10, 0x4, 0x5}})
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x0, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ecc3", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}], 0x20}, 0x0)
sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000340)="f3688f827d27d96f5779655b7efe1d4123b06b4039bd12e1099aa714aa2999e6ea3e5331a337b8bfe2774002956bf21ff98b622cd9be934e859b4b357497f047e5226b824e0aeb6a", 0x48}, {&(0x7f0000000440)="3f09e95ca6c37696d060e4f06d3d4ecd52f813c7f554757e0e674d62cc52edeab9ae83059cc0ea5a4c8dd4d849a789c424610d386e9fb40861b06d7faddbd76148bc571020b8f54136c6806b2e9c5d0245ddeb23bb57df82e3b354cedc82a19ba05864ccde98fc695d", 0x69}, {&(0x7f00000004c0)="2965542c59dce77d2b58fcf6ea0130a5c2e7526059472bbf34848143d02ea91407a29cd447ef8db64681d3d126530dd70fe7c2f7ef4c737c3021f57b2dec38542184143eaf", 0x45}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f00000003c0)="636ecd02ceb12b", 0x7}, {&(0x7f0000000540)="8589427d90014ac94555601eae5989889c841c16d191143f8c0f9abe1634cd8f2400df60bf8d9686a438d19fc87ead03d6615f625478feb24e0858304ac38c6a8f8a2c0cad62cbd410ff4a2f57598a118e507fc3ca542660d29ed23b3f534b59940c4f89c301232e0bfbf8410f5a9dc3023b7d5dbfb6fdc9474fa6e99b75afda5d96bd27d13a8853f1aeaa690af503886a38c90fda454d5c7499743c3a32e18af2dac12ff68a6ff524670f8823289122c248d676272ae0e83c55921de7f88886bd40a2a52b85051eb1decb29", 0xcc}, {&(0x7f0000000640)="62ef27f4cbfdc28646ed9456cc4a7bb7f906841eb38f52a89dcc2369beda3dc8a2faa57ed25109a3ee0daad07ee7aa41e5360c5b8ee079639fdbfc44cf951f7cf8c1a303ca989c9b1eb4007e47d002de170b6c160bcd30932f9602f046502ff672297d05f8c1484630abd0c2677cc91165cb7be26c67c569ece9a664f6bb381d2de1f594a42cfe28d219a2550c283fa34fa43cb9b8", 0x95}], 0x7, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x4040000)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$inet(r5, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x0, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ecc3", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @broadcast}}}], 0x20}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040050}, 0x40801)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5444a500009a35060000c12c758173a12100"/27, @ANYRES32=r9, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d0000000000080034000202020202020000080035000000000004000501"], 0x74}}, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r8, 0x800, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20084005}, 0x11)

00:30:30 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500), 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:30:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1845.780589][ T4061] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1846.700889][ T4061] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1847.236534][ T4061] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1847.855198][ T4061] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
00:30:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1864.467592][ T4061] device hsr_slave_0 left promiscuous mode
[ 1864.775852][ T4061] device hsr_slave_1 left promiscuous mode
[ 1865.407310][ T4061] device veth1_macvtap left promiscuous mode
[ 1865.503317][ T4061] device veth0_macvtap left promiscuous mode
[ 1865.550968][ T4061] device veth1_vlan left promiscuous mode
[ 1865.592600][ T4061] device veth0_vlan left promiscuous mode
[ 1878.110127][ T4061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1878.386939][ T4061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1880.480495][ T4061] bond0 (unregistering): Released all slaves
[ 1903.034342][ T4802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1903.126700][ T4802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1912.230687][ T4802] device hsr_slave_0 entered promiscuous mode
[ 1912.279200][ T4802] device hsr_slave_1 entered promiscuous mode
[ 1924.164774][ T4802] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1924.684478][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1924.738360][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1931.533066][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1931.591184][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1931.879999][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1931.930685][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1932.237888][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1932.505411][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1933.264464][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1933.287060][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1933.634895][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1933.695635][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1933.879852][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1934.790253][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1934.797726][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1955.185733][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1955.224985][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1961.241003][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1961.300499][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1961.447938][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1961.479537][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1961.618631][ T4802] device veth0_vlan entered promiscuous mode
[ 1962.094540][ T4802] device veth1_vlan entered promiscuous mode
[ 1963.109001][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1963.130229][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1963.401006][ T4802] device veth0_macvtap entered promiscuous mode
[ 1963.691259][ T4802] device veth1_macvtap entered promiscuous mode
[ 1964.493410][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1964.545299][ T3354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1964.798835][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1964.846287][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1976.680255][ T2893] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
00:32:55 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 1976.848648][ T2893] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
[ 1977.000171][ T2893] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
00:32:55 executing program 0:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$binfmt_script(r0, 0x0, 0x7)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1)

[ 1977.167625][ T2893] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'.
00:33:04 executing program 0:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r0)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000400)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='X', 0x1, r1)
keyctl$read(0xb, r2, 0x0, 0x0)
keyctl$clear(0x7, r2)

00:33:05 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:33:10 executing program 0:
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/204)
clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:33:12 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:33:15 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200024400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:33:16 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x400200, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x3d8, 0x40, 0x200, 0x70bd27, 0x25dfdbfe, {0x1d}, [@nested={0x1eb, 0x8d, 0x0, 0x1, [@generic="78bd5b37455ece0e17f035a2dcd769f0deaebedebd26eb2b18d8f10ce615474296a0b5694250b3f148be2a047995693e74d0e9bb3325cbaa9099ff12475adb44af2cd07e0e215ca9b493bfa097bec7bcbae17ad060c5ddcd8df625bee14f1fa336d9526cd414c25827b3b0f63bdf5b21051a382544663f8be90d0120a542fa33383df9a4fda464154b54be622a836712a24713b306ccdf58876028636d22309767d2c7edcd9f53d3d5cbd4a4a457e19b0650c4ab8127af0fa19cb9f2301a857201adc63ee5feb7937702698b9a6091d5a32d7a911d61", @generic="5c9b118ee1b2f0b6bf212315758a20575da9e6014f855052ab0bf182cee0da6efd77724c02738003b37be6067b418ed49a0bf7e769e623b951350ddb5e42efb5b899fc6b59b6f13942d047ec83bd6a17fcc5e1659bac1e0bf99dcea08013d6ea5e728bf36313080e4cfe6ef9a1621bd016a493eba8c8eba3e45fdebc1f69ef2132a327865bd48a68bfbeefb9adcaf4f444b3005e627c697fef574ece6c303ac52c6503de", @generic="9fe8d464d199b62f8528f1622dc41c1eb9ad7247cbfc0926197029d802984adf9293e6007d7d211f40df89329df3a78062832b48429e1d6e2112440927362a1272b660389001cabe817bfb862e29633fde01a632b614f0d0e2eddae33e2d7625ad7a37703ceafef5194c7ae220"]}, @typed={0x8, 0x85, 0x0, 0x0, @fd=r0}, @generic="5d1b610cf1f23f91fa56c528667b91741e613709ba12788cf9aba61cc5e7fd92bb53a0", @generic="195a421e695aea220977b54245ee7839b04def8aa55665797be006ea39c1ef8ce45ce80e373d2e7e41a8", @generic="3c8a2d81df56d57ffeef4bb238279d7c15a4d9e3cde6509916a5a5120a3458999f825d78f8f030df984744893e88a408899c4447c9853b38bc0909cc4a892c806828a5beb9d911c197ca5505c00c6447c65a4bae16659e6b81bd96dd5ab5ef005d05f64422d10880e88258302daadca59fd08cb4cc829ca0c9285c9c7cd7a5a4d71b2a3c24a04f0566a63f186dc02d3d3c1b42865641afe80551971e3e948c21a16bb056", @generic="f03c85da73090102084b5c1b2a49ef528d7e5c5a4612ea9b0060c3856942fa85f125ba3b1ebeeeb07e994ecdb7d5270b3988cfb59dbcb4df68159ef5827603291fb8e03b74b483a6c414cf53a7adc461d6a8c9e57c2f5bedf0b5037e607f68e0f5a123523893dd0bf7037e79e339795341d8b4e085f5096f8affd30ff0df93c7b634c2c3b10ca702f919b25848d66b7b2442ab5053d63df69da9ebb7145d6d1926e084f4acb0a967e8a0d117c6f15c00971d6b54bdc47ffc1df4904f40f3c965fcce", @typed={0x5, 0x16, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x8f, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x6e, 0x0, 0x0, @u64}]}, 0x3d8}}, 0x20000040)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000000040)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040a489", 0x21, 0x4e4}], 0x0, &(0x7f00000004c0)={[{@lazytime='lazytime'}]})

[ 1999.846424][ T5121] loop0: detected capacity change from 0 to 4
[ 2000.368973][ T5121] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[ 2000.770154][ T5121] loop0: detected capacity change from 0 to 4
[ 2000.924867][ T5121] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
00:33:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(0x0, 0x0)

00:33:21 executing program 0:
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="90f8ea2767984d2a6a399309161b9ca6447680b6e29b3847b81d5215519367571dddc41e9cdfe998f55eed689743e603500a2c393f3b823d11b6f745961e10a0c2e9cd5e259978cb3ba754d09e7c89070a2839beed2e09da4bbcf9e2a7430f5bd52d085c1cb5c656", &(0x7f00000003c0)=""/21, &(0x7f00000000c0)="05dde41f7007c0b2734048aa835f2aed6933fdfc22a056cb3a674eedf0725362a6386111d289bc26305ac076b88d36d013fd6ba556555fc69caacb4ea472ce53f71dc6dcff86691e8de562fb12c2cd741c2644627ba17311314a264ba340ca0637aca2666d2ecc872f80be0a9849829dca9818f6a1d26db2919f766f8799459ffa1ebd0f0f1cf3b747de109a8706070c51e8034af60a738a2caf91693ad4b603fca37111e16c8097c5f8060fd86396cbe81f43e53fa8137f180fec5df46d408db707a722446a5eb54da9c6339b08ab1d9928b2390f7dd05e7916c9335762f5ec6a0063b226533899a379cd44f3b1ebc8c5785998a79618", &(0x7f00000001c0)="754c1cbd67118509e1c653c2983b73b40772ae637fcdcc2de81ea83fbc5e6f2720b1c02255ac636d5c1db502dcca80bd0e1301c0c5fa106b9938b99c6f39568b47b12bbc0b97507cdd61477aa797597ab6c25122ecb18c717008b5b467ee139754ecfae5d1be53afeefa973e65241dd94d1f64569913dca328c6a9187e1f5d6c775bb4830097fb38b13ed726c71a633b075e0f59b10c90571f552c7a71b17cc6db2e8f185548001b4d0019f4318957deb34fd6c714727583785899df5c77b1c707b44e2e64a9a8a5040d4a25ef2ac9072e5dfdd5ae84390580f9c1f6f13061a16b71eff9432e83799dff15bc50ca00e2f399f2", 0x50e3, 0xffffffffffffffff, 0x4}, 0x38)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r0 = add_key$fscrypt_provisioning(&(0x7f0000002580)='fscrypt-provisioning\x00', &(0x7f00000025c0)={'syz', 0x0}, &(0x7f0000002600)=ANY=[@ANYBLOB="02000000000000000102030405060708090a5be144be0f101112131415161718191a1b1c1d1e1b202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c053e3f40"], 0x48, 0xfffffffffffffffb)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x3)
request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='fscrypt-provisioning\x00', 0xfffffffffffffffb)
keyctl$revoke(0x3, r0)

00:33:22 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(0x0, 0x0)

00:33:25 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='efivarfs\x00', 0x8010, &(0x7f0000000100)='\\\x00')
getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', '\x00'}, 0x0, 0x0)
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', &(0x7f00000002c0)='\x00', 0x1, 0x3)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00')

00:33:26 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(0x0, 0x0)

00:33:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0)
fcntl$dupfd(r0, 0x0, r0)

00:33:31 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:33:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="9b7f", 0x2}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))

00:33:36 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:33:38 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:33:42 executing program 1 (fault-call:3 fault-nth:0):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:33:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

[ 2025.870198][ T5162] FAULT_INJECTION: forcing a failure.
[ 2025.870198][ T5162] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2025.889676][ T5162] CPU: 0 PID: 5162 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2025.892373][ T5162] Hardware name: riscv-virtio,qemu (DT)
[ 2025.894595][ T5162] Call Trace:
[ 2025.895865][ T5162] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2025.897832][ T5162] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2025.899674][ T5162] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2025.901385][ T5162] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2025.903826][ T5162] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2025.905771][ T5162] [<ffffffe000a37532>] should_fail_usercopy+0x1e/0x26
[ 2025.907640][ T5162] [<ffffffe000974dc2>] _copy_from_user+0x34/0x110
[ 2025.909506][ T5162] [<ffffffe00001d606>] copy_clone_args_from_user+0xfa/0x470
[ 2025.911375][ T5162] [<ffffffe0000249f4>] __do_sys_clone3+0x42/0x1ba
[ 2025.913931][ T5162] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2025.915756][ T5162] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:33:46 executing program 1 (fault-call:3 fault-nth:1):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2030.715826][ T5169] FAULT_INJECTION: forcing a failure.
[ 2030.715826][ T5169] name failslab, interval 1, probability 0, space 0, times 1
[ 2030.718167][ T5169] CPU: 0 PID: 5169 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2030.720873][ T5169] Hardware name: riscv-virtio,qemu (DT)
[ 2030.722270][ T5169] Call Trace:
[ 2030.723440][ T5169] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2030.724846][ T5169] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2030.726253][ T5169] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2030.727589][ T5169] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2030.728891][ T5169] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2030.730329][ T5169] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2030.731720][ T5169] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2030.733165][ T5169] [<ffffffe0003b86ac>] kmem_cache_alloc_node+0x5e/0x404
[ 2030.734679][ T5169] [<ffffffe000021b34>] copy_process+0x133a/0x356a
[ 2030.736540][ T5169] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2030.737946][ T5169] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2030.739443][ T5169] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2030.740876][ T5169] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:33:50 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

00:33:51 executing program 1 (fault-call:3 fault-nth:2):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2035.164553][ T5175] FAULT_INJECTION: forcing a failure.
[ 2035.164553][ T5175] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 2035.167515][ T5175] CPU: 0 PID: 5175 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2035.169244][ T5175] Hardware name: riscv-virtio,qemu (DT)
[ 2035.170343][ T5175] Call Trace:
[ 2035.171561][ T5175] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2035.173825][ T5175] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2035.175166][ T5175] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2035.176568][ T5175] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2035.178712][ T5175] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2035.181175][ T5175] [<ffffffe00036c530>] should_fail_alloc_page+0x54/0x62
[ 2035.183285][ T5175] [<ffffffe00036f654>] __alloc_pages_nodemask+0xf6/0x480
[ 2035.184834][ T5175] [<ffffffe000020c00>] copy_process+0x406/0x356a
[ 2035.186335][ T5175] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2035.187640][ T5175] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2035.189007][ T5175] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2035.190335][ T5175] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:33:54 executing program 1 (fault-call:3 fault-nth:3):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:33:55 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2038.677752][ T5179] FAULT_INJECTION: forcing a failure.
[ 2038.677752][ T5179] name failslab, interval 1, probability 0, space 0, times 0
[ 2038.680028][ T5179] CPU: 1 PID: 5179 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2038.681925][ T5179] Hardware name: riscv-virtio,qemu (DT)
[ 2038.683533][ T5179] Call Trace:
[ 2038.684431][ T5179] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2038.685917][ T5179] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2038.687337][ T5179] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2038.688709][ T5179] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2038.690024][ T5179] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2038.694296][ T5179] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2038.696505][ T5179] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2038.697978][ T5179] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2038.699359][ T5179] [<ffffffe000078f5a>] prepare_creds+0x44/0x504
[ 2038.700767][ T5179] [<ffffffe00007a47a>] copy_creds+0x62/0x47a
[ 2038.702934][ T5179] [<ffffffe00002123a>] copy_process+0xa40/0x356a
[ 2038.705243][ T5179] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2038.706700][ T5179] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2038.708135][ T5179] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2038.709535][ T5179] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:33:58 executing program 1 (fault-call:3 fault-nth:4):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:00 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2042.699533][ T5186] FAULT_INJECTION: forcing a failure.
[ 2042.699533][ T5186] name failslab, interval 1, probability 0, space 0, times 0
[ 2042.704555][ T5186] CPU: 1 PID: 5186 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2042.706267][ T5186] Hardware name: riscv-virtio,qemu (DT)
[ 2042.707248][ T5186] Call Trace:
[ 2042.708060][ T5186] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2042.709463][ T5186] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2042.710803][ T5186] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2042.712719][ T5186] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2042.714568][ T5186] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2042.716037][ T5186] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2042.717370][ T5186] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2042.718737][ T5186] [<ffffffe0003b8086>] __kmalloc+0x6e/0x332
[ 2042.720019][ T5186] [<ffffffe000796076>] kzalloc+0x26/0x32
[ 2042.721337][ T5186] [<ffffffe000799bc0>] security_prepare_creds+0xde/0x106
[ 2042.723638][ T5186] [<ffffffe00007927a>] prepare_creds+0x364/0x504
[ 2042.725562][ T5186] [<ffffffe00007a47a>] copy_creds+0x62/0x47a
[ 2042.726843][ T5186] [<ffffffe00002123a>] copy_process+0xa40/0x356a
[ 2042.728148][ T5186] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2042.729485][ T5186] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2042.730888][ T5186] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2042.732792][ T5186] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:02 executing program 1 (fault-call:3 fault-nth:5):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:04 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2046.605888][ T5193] FAULT_INJECTION: forcing a failure.
[ 2046.605888][ T5193] name failslab, interval 1, probability 0, space 0, times 0
[ 2046.608065][ T5193] CPU: 0 PID: 5193 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2046.609625][ T5193] Hardware name: riscv-virtio,qemu (DT)
[ 2046.610562][ T5193] Call Trace:
[ 2046.611359][ T5193] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2046.613559][ T5193] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2046.614948][ T5193] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2046.616265][ T5193] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2046.617618][ T5193] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2046.619031][ T5193] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2046.620363][ T5193] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2046.623387][ T5193] [<ffffffe0003b79da>] __kmalloc_node+0x70/0x386
[ 2046.625442][ T5193] [<ffffffe0003d6286>] memcg_alloc_page_obj_cgroups+0x42/0xa0
[ 2046.626980][ T5193] [<ffffffe0003b2d28>] memcg_slab_post_alloc_hook+0x88/0x46a
[ 2046.628469][ T5193] [<ffffffe0003b81a8>] __kmalloc+0x190/0x332
[ 2046.629812][ T5193] [<ffffffe000796076>] kzalloc+0x26/0x32
[ 2046.631148][ T5193] [<ffffffe000799bc0>] security_prepare_creds+0xde/0x106
[ 2046.633222][ T5193] [<ffffffe00007927a>] prepare_creds+0x364/0x504
[ 2046.634558][ T5193] [<ffffffe00007a47a>] copy_creds+0x62/0x47a
[ 2046.635841][ T5193] [<ffffffe00002123a>] copy_process+0xa40/0x356a
[ 2046.637289][ T5193] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2046.638623][ T5193] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2046.640013][ T5193] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2046.641405][ T5193] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:08 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:08 executing program 1 (fault-call:3 fault-nth:6):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2052.976886][ T5205] FAULT_INJECTION: forcing a failure.
[ 2052.976886][ T5205] name failslab, interval 1, probability 0, space 0, times 0
[ 2052.979187][ T5205] CPU: 0 PID: 5205 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2052.980822][ T5205] Hardware name: riscv-virtio,qemu (DT)
[ 2052.982086][ T5205] Call Trace:
[ 2052.983297][ T5205] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2052.984835][ T5205] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2052.986496][ T5205] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2052.988517][ T5205] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2052.989968][ T5205] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2052.991975][ T5205] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2052.994026][ T5205] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2052.995516][ T5205] [<ffffffe0003b8086>] __kmalloc+0x6e/0x332
[ 2052.996897][ T5205] [<ffffffe000796076>] kzalloc+0x26/0x32
[ 2052.998344][ T5205] [<ffffffe000799814>] security_task_alloc+0xe4/0x16e
[ 2052.999819][ T5205] [<ffffffe000021846>] copy_process+0x104c/0x356a
[ 2053.001295][ T5205] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2053.004550][ T5205] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2053.006295][ T5205] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2053.007880][ T5205] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:12 executing program 0:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:13 executing program 1 (fault-call:3 fault-nth:7):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2057.385306][ T5210] FAULT_INJECTION: forcing a failure.
[ 2057.385306][ T5210] name failslab, interval 1, probability 0, space 0, times 0
[ 2057.413935][ T5210] CPU: 1 PID: 5210 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2057.415585][ T5210] Hardware name: riscv-virtio,qemu (DT)
[ 2057.417503][ T5210] Call Trace:
[ 2057.418335][ T5210] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2057.419852][ T5210] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2057.421889][ T5210] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2057.423317][ T5210] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2057.424790][ T5210] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2057.426509][ T5210] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2057.427893][ T5210] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2057.429338][ T5210] [<ffffffe0003b8ab0>] kmem_cache_alloc_trace+0x5e/0x2bc
[ 2057.431232][ T5210] [<ffffffe00043a15a>] alloc_fdtable+0x144/0x298
[ 2057.432426][ T5210] [<ffffffe00043caee>] dup_fd+0x492/0x70c
[ 2057.433915][ T5210] [<ffffffe000021d1e>] copy_process+0x1524/0x356a
[ 2057.435813][ T5210] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2057.436961][ T5210] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2057.438674][ T5210] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2057.440272][ T5210] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:17 executing program 0:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:17 executing program 1 (fault-call:3 fault-nth:8):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2062.288967][ T5217] FAULT_INJECTION: forcing a failure.
[ 2062.288967][ T5217] name failslab, interval 1, probability 0, space 0, times 0
[ 2062.291342][ T5217] CPU: 0 PID: 5217 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2062.293807][ T5217] Hardware name: riscv-virtio,qemu (DT)
[ 2062.294844][ T5217] Call Trace:
[ 2062.295623][ T5217] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2062.297057][ T5217] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2062.299008][ T5217] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2062.300291][ T5217] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2062.301617][ T5217] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2062.302997][ T5217] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2062.304340][ T5217] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2062.305869][ T5217] [<ffffffe0003b79da>] __kmalloc_node+0x70/0x386
[ 2062.307831][ T5217] [<ffffffe0002fd378>] kvmalloc_node+0x6a/0xf8
[ 2062.309386][ T5217] [<ffffffe00043a188>] alloc_fdtable+0x172/0x298
[ 2062.310877][ T5217] [<ffffffe00043caee>] dup_fd+0x492/0x70c
[ 2062.312618][ T5217] [<ffffffe000021d1e>] copy_process+0x1524/0x356a
[ 2062.314157][ T5217] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2062.315634][ T5217] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2062.317166][ T5217] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2062.318587][ T5217] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:21 executing program 0:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:22 executing program 1 (fault-call:3 fault-nth:9):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2066.861289][ T5223] FAULT_INJECTION: forcing a failure.
[ 2066.861289][ T5223] name failslab, interval 1, probability 0, space 0, times 0
[ 2066.895828][ T5223] CPU: 0 PID: 5223 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2066.898625][ T5223] Hardware name: riscv-virtio,qemu (DT)
[ 2066.899703][ T5223] Call Trace:
[ 2066.900583][ T5223] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2066.902629][ T5223] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2066.905405][ T5223] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2066.906797][ T5223] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2066.908275][ T5223] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2066.910520][ T5223] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2066.912305][ T5223] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2066.913743][ T5223] [<ffffffe0003b79da>] __kmalloc_node+0x70/0x386
[ 2066.915154][ T5223] [<ffffffe0002fd378>] kvmalloc_node+0x6a/0xf8
[ 2066.916526][ T5223] [<ffffffe00043a188>] alloc_fdtable+0x172/0x298
[ 2066.918139][ T5223] [<ffffffe00043caee>] dup_fd+0x492/0x70c
[ 2066.920035][ T5223] [<ffffffe000021d1e>] copy_process+0x1524/0x356a
[ 2066.921573][ T5223] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2066.923555][ T5223] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2066.924999][ T5223] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2066.926386][ T5223] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:25 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:27 executing program 1 (fault-call:3 fault-nth:10):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2071.260456][ T5229] FAULT_INJECTION: forcing a failure.
[ 2071.260456][ T5229] name failslab, interval 1, probability 0, space 0, times 0
[ 2071.310185][ T5229] CPU: 1 PID: 5229 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2071.312979][ T5229] Hardware name: riscv-virtio,qemu (DT)
[ 2071.315050][ T5229] Call Trace:
[ 2071.316198][ T5229] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2071.318062][ T5229] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2071.319915][ T5229] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2071.321700][ T5229] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2071.323953][ T5229] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2071.325771][ T5229] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2071.327480][ T5229] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2071.329279][ T5229] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2071.331096][ T5229] [<ffffffe000478670>] copy_fs_struct+0x2e/0x14c
[ 2071.333709][ T5229] [<ffffffe0000226fc>] copy_process+0x1f02/0x356a
[ 2071.336259][ T5229] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2071.338154][ T5229] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2071.341928][ T5229] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2071.343681][ T5229] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:29 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:32 executing program 1 (fault-call:3 fault-nth:11):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2076.049276][ T5235] FAULT_INJECTION: forcing a failure.
[ 2076.049276][ T5235] name failslab, interval 1, probability 0, space 0, times 0
[ 2076.075903][ T5235] CPU: 0 PID: 5235 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2076.077736][ T5235] Hardware name: riscv-virtio,qemu (DT)
[ 2076.078754][ T5235] Call Trace:
[ 2076.079610][ T5235] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2076.081100][ T5235] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2076.083326][ T5235] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2076.084909][ T5235] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2076.086296][ T5235] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2076.087709][ T5235] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2076.089229][ T5235] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2076.090643][ T5235] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2076.092964][ T5235] [<ffffffe000021e18>] copy_process+0x161e/0x356a
[ 2076.095409][ T5235] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2076.097981][ T5235] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2076.099786][ T5235] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2076.101589][ T5235] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:34 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:36 executing program 1 (fault-call:3 fault-nth:12):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2080.319551][ T5241] FAULT_INJECTION: forcing a failure.
[ 2080.319551][ T5241] name failslab, interval 1, probability 0, space 0, times 0
[ 2080.335615][ T5241] CPU: 0 PID: 5241 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2080.339301][ T5241] Hardware name: riscv-virtio,qemu (DT)
[ 2080.340251][ T5241] Call Trace:
[ 2080.341075][ T5241] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2080.343053][ T5241] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2080.344534][ T5241] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2080.345986][ T5241] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2080.347380][ T5241] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2080.348805][ T5241] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2080.350162][ T5241] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2080.354057][ T5241] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2080.355539][ T5241] [<ffffffe000021e18>] copy_process+0x161e/0x356a
[ 2080.356882][ T5241] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2080.358438][ T5241] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2080.359807][ T5241] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2080.361145][ T5241] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:39 executing program 0:
r0 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:41 executing program 1 (fault-call:3 fault-nth:13):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:43 executing program 0:
r0 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2085.089287][ T5247] FAULT_INJECTION: forcing a failure.
[ 2085.089287][ T5247] name failslab, interval 1, probability 0, space 0, times 0
[ 2085.091397][ T5247] CPU: 0 PID: 5247 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2085.094205][ T5247] Hardware name: riscv-virtio,qemu (DT)
[ 2085.095891][ T5247] Call Trace:
[ 2085.096739][ T5247] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2085.098200][ T5247] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2085.099568][ T5247] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2085.100908][ T5247] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2085.102969][ T5247] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2085.104968][ T5247] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2085.106339][ T5247] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2085.107734][ T5247] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2085.109183][ T5247] [<ffffffe00001f4b4>] dup_mm+0x4e/0xc4a
[ 2085.110450][ T5247] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2085.112173][ T5247] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2085.114096][ T5247] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2085.115529][ T5247] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2085.116829][ T5247] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:45 executing program 1 (fault-call:3 fault-nth:14):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:48 executing program 0:
r0 = syz_io_uring_setup(0x1, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2090.050139][ T5253] FAULT_INJECTION: forcing a failure.
[ 2090.050139][ T5253] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2090.066008][ T5253] CPU: 1 PID: 5253 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2090.067546][ T5253] Hardware name: riscv-virtio,qemu (DT)
[ 2090.068425][ T5253] Call Trace:
[ 2090.069147][ T5253] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2090.070261][ T5253] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2090.074197][ T5253] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2090.076914][ T5253] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2090.078194][ T5253] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2090.079272][ T5253] [<ffffffe00036c530>] should_fail_alloc_page+0x54/0x62
[ 2090.080387][ T5253] [<ffffffe00036f654>] __alloc_pages_nodemask+0xf6/0x480
[ 2090.082375][ T5253] [<ffffffe0003a273c>] alloc_pages_current+0x114/0x234
[ 2090.084263][ T5253] [<ffffffe000366d58>] __get_free_pages+0xe/0x38
[ 2090.085319][ T5253] [<ffffffe00001e9b2>] mm_init+0x29a/0x418
[ 2090.086340][ T5253] [<ffffffe00001f4ea>] dup_mm+0x84/0xc4a
[ 2090.087331][ T5253] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2090.088586][ T5253] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2090.089875][ T5253] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2090.091230][ T5253] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2090.095166][ T5253] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:50 executing program 1 (fault-call:3 fault-nth:15):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2094.718301][ T5259] FAULT_INJECTION: forcing a failure.
[ 2094.718301][ T5259] name failslab, interval 1, probability 0, space 0, times 0
[ 2094.731091][ T5259] CPU: 1 PID: 5259 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2094.737229][ T5259] Hardware name: riscv-virtio,qemu (DT)
[ 2094.738313][ T5259] Call Trace:
[ 2094.739186][ T5259] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2094.740762][ T5259] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2094.742513][ T5259] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2094.744298][ T5259] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2094.745658][ T5259] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2094.747126][ T5259] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2094.748497][ T5259] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2094.749893][ T5259] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2094.751279][ T5259] [<ffffffe00001f31a>] vm_area_dup+0x36/0x182
[ 2094.753257][ T5259] [<ffffffe00001f76c>] dup_mm+0x306/0xc4a
[ 2094.754648][ T5259] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2094.756123][ T5259] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2094.757984][ T5259] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2094.759563][ T5259] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2094.760893][ T5259] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:34:53 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:55 executing program 1 (fault-call:3 fault-nth:16):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:34:59 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2101.616149][ T5266] FAULT_INJECTION: forcing a failure.
[ 2101.616149][ T5266] name failslab, interval 1, probability 0, space 0, times 0
[ 2101.617778][ T5266] CPU: 0 PID: 5266 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2101.619477][ T5266] Hardware name: riscv-virtio,qemu (DT)
[ 2101.623025][ T5266] Call Trace:
[ 2101.624044][ T5266] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2101.625349][ T5266] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2101.626426][ T5266] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2101.627475][ T5266] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2101.628537][ T5266] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2101.629666][ T5266] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2101.630728][ T5266] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2101.631854][ T5266] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2101.633519][ T5266] [<ffffffe00001f31a>] vm_area_dup+0x36/0x182
[ 2101.635028][ T5266] [<ffffffe00001f76c>] dup_mm+0x306/0xc4a
[ 2101.636109][ T5266] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2101.637241][ T5266] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2101.638297][ T5266] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2101.639374][ T5266] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2101.640425][ T5266] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:01 executing program 1 (fault-call:3 fault-nth:17):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2105.066453][ T5273] FAULT_INJECTION: forcing a failure.
[ 2105.066453][ T5273] name failslab, interval 1, probability 0, space 0, times 0
[ 2105.068558][ T5273] CPU: 0 PID: 5273 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2105.070118][ T5273] Hardware name: riscv-virtio,qemu (DT)
[ 2105.071088][ T5273] Call Trace:
[ 2105.072375][ T5273] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2105.073858][ T5273] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2105.075292][ T5273] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2105.077189][ T5273] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2105.078511][ T5273] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2105.080198][ T5273] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2105.081569][ T5273] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2105.083491][ T5273] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2105.084877][ T5273] [<ffffffe00001f31a>] vm_area_dup+0x36/0x182
[ 2105.086221][ T5273] [<ffffffe00001f76c>] dup_mm+0x306/0xc4a
[ 2105.087708][ T5273] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2105.089068][ T5273] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2105.090391][ T5273] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2105.091965][ T5273] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2105.093377][ T5273] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:04 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:05 executing program 1 (fault-call:3 fault-nth:18):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2109.156491][ T5280] FAULT_INJECTION: forcing a failure.
[ 2109.156491][ T5280] name failslab, interval 1, probability 0, space 0, times 0
[ 2109.200091][ T5280] CPU: 0 PID: 5280 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2109.202790][ T5280] Hardware name: riscv-virtio,qemu (DT)
[ 2109.204580][ T5280] Call Trace:
[ 2109.205595][ T5280] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2109.207106][ T5280] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2109.208608][ T5280] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2109.210132][ T5280] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2109.212264][ T5280] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2109.213863][ T5280] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2109.215371][ T5280] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2109.216966][ T5280] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2109.218582][ T5280] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 2109.220115][ T5280] [<ffffffe000358a36>] anon_vma_fork+0x54/0x268
[ 2109.221688][ T5280] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2109.223088][ T5280] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2109.224615][ T5280] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2109.226832][ T5280] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2109.228439][ T5280] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2109.230465][ T5280] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:08 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:12 executing program 1 (fault-call:3 fault-nth:19):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2115.730106][ T5288] FAULT_INJECTION: forcing a failure.
[ 2115.730106][ T5288] name failslab, interval 1, probability 0, space 0, times 0
[ 2115.754662][ T5288] CPU: 1 PID: 5288 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2115.756019][ T5288] Hardware name: riscv-virtio,qemu (DT)
[ 2115.756982][ T5288] Call Trace:
[ 2115.757714][ T5288] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2115.758897][ T5288] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2115.759954][ T5288] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2115.761071][ T5288] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2115.763089][ T5288] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2115.764291][ T5288] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2115.765343][ T5288] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2115.766413][ T5288] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2115.767800][ T5288] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 2115.769451][ T5288] [<ffffffe000358a36>] anon_vma_fork+0x54/0x268
[ 2115.771496][ T5288] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2115.773453][ T5288] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2115.774569][ T5288] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2115.775588][ T5288] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2115.776793][ T5288] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2115.777957][ T5288] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:16 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:17 executing program 1 (fault-call:3 fault-nth:20):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2120.839349][ T5299] FAULT_INJECTION: forcing a failure.
[ 2120.839349][ T5299] name failslab, interval 1, probability 0, space 0, times 0
[ 2120.879127][ T5299] CPU: 0 PID: 5299 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2120.881151][ T5299] Hardware name: riscv-virtio,qemu (DT)
[ 2120.883008][ T5299] Call Trace:
[ 2120.884341][ T5299] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2120.885910][ T5299] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2120.887410][ T5299] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2120.888825][ T5299] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2120.890571][ T5299] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2120.892908][ T5299] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2120.895343][ T5299] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2120.896829][ T5299] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2120.898474][ T5299] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 2120.900881][ T5299] [<ffffffe000358a36>] anon_vma_fork+0x54/0x268
[ 2120.903303][ T5299] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2120.904701][ T5299] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2120.907311][ T5299] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2120.908827][ T5299] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2120.910366][ T5299] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2120.912010][ T5299] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:21 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:23 executing program 1 (fault-call:3 fault-nth:21):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:25 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2127.427874][ T5308] FAULT_INJECTION: forcing a failure.
[ 2127.427874][ T5308] name failslab, interval 1, probability 0, space 0, times 0
[ 2127.445408][ T5308] CPU: 0 PID: 5308 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2127.447501][ T5308] Hardware name: riscv-virtio,qemu (DT)
[ 2127.449192][ T5308] Call Trace:
[ 2127.450214][ T5308] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2127.452028][ T5308] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2127.453885][ T5308] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2127.455573][ T5308] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2127.457215][ T5308] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2127.458988][ T5308] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2127.460678][ T5308] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2127.462424][ T5308] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2127.464198][ T5308] [<ffffffe000358aec>] anon_vma_fork+0x10a/0x268
[ 2127.466428][ T5308] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2127.468076][ T5308] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2127.469904][ T5308] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2127.471766][ T5308] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2127.473705][ T5308] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2127.476106][ T5308] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:28 executing program 1 (fault-call:3 fault-nth:22):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2131.719676][ T5315] FAULT_INJECTION: forcing a failure.
[ 2131.719676][ T5315] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2131.739621][ T5315] CPU: 0 PID: 5315 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2131.742996][ T5315] Hardware name: riscv-virtio,qemu (DT)
[ 2131.745057][ T5315] Call Trace:
[ 2131.746519][ T5315] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2131.748102][ T5315] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2131.749611][ T5315] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2131.751019][ T5315] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2131.753543][ T5315] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2131.755280][ T5315] [<ffffffe00036c530>] should_fail_alloc_page+0x54/0x62
[ 2131.756880][ T5315] [<ffffffe00036f654>] __alloc_pages_nodemask+0xf6/0x480
[ 2131.758604][ T5315] [<ffffffe0003a273c>] alloc_pages_current+0x114/0x234
[ 2131.761242][ T5315] [<ffffffe000337508>] __pmd_alloc+0x4a/0x332
[ 2131.763443][ T5315] [<ffffffe00033bd06>] copy_page_range+0x1812/0x1d1a
[ 2131.765150][ T5315] [<ffffffe00001fcba>] dup_mm+0x854/0xc4a
[ 2131.766688][ T5315] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2131.768900][ T5315] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2131.770429][ T5315] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2131.772743][ T5315] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2131.775252][ T5315] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:31 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:32 executing program 1 (fault-call:3 fault-nth:23):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2136.404524][ T5322] FAULT_INJECTION: forcing a failure.
[ 2136.404524][ T5322] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2136.408129][ T5322] CPU: 1 PID: 5322 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2136.409741][ T5322] Hardware name: riscv-virtio,qemu (DT)
[ 2136.411094][ T5322] Call Trace:
[ 2136.412394][ T5322] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2136.414062][ T5322] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2136.415930][ T5322] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2136.417395][ T5322] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2136.418798][ T5322] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2136.420321][ T5322] [<ffffffe00036c530>] should_fail_alloc_page+0x54/0x62
[ 2136.422457][ T5322] [<ffffffe00036f654>] __alloc_pages_nodemask+0xf6/0x480
[ 2136.424809][ T5322] [<ffffffe0003a273c>] alloc_pages_current+0x114/0x234
[ 2136.426532][ T5322] [<ffffffe000332a7c>] __pte_alloc+0x32/0x372
[ 2136.428643][ T5322] [<ffffffe00033b686>] copy_page_range+0x1192/0x1d1a
[ 2136.430171][ T5322] [<ffffffe00001fcba>] dup_mm+0x854/0xc4a
[ 2136.432400][ T5322] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2136.434615][ T5322] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2136.436138][ T5322] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2136.438377][ T5322] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2136.439818][ T5322] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:34 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:37 executing program 1 (fault-call:3 fault-nth:24):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2142.118218][ T5329] FAULT_INJECTION: forcing a failure.
[ 2142.118218][ T5329] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2142.135232][ T5329] CPU: 1 PID: 5329 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2142.137378][ T5329] Hardware name: riscv-virtio,qemu (DT)
[ 2142.139367][ T5329] Call Trace:
[ 2142.140509][ T5329] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2142.142294][ T5329] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2142.144459][ T5329] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2142.145921][ T5329] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2142.147330][ T5329] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2142.149104][ T5329] [<ffffffe00036c530>] should_fail_alloc_page+0x54/0x62
[ 2142.151348][ T5329] [<ffffffe00036f654>] __alloc_pages_nodemask+0xf6/0x480
[ 2142.153579][ T5329] [<ffffffe0003a273c>] alloc_pages_current+0x114/0x234
[ 2142.155182][ T5329] [<ffffffe000332a7c>] __pte_alloc+0x32/0x372
[ 2142.156737][ T5329] [<ffffffe00033b686>] copy_page_range+0x1192/0x1d1a
[ 2142.158886][ T5329] [<ffffffe00001fcba>] dup_mm+0x854/0xc4a
[ 2142.160290][ T5329] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2142.162094][ T5329] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2142.164137][ T5329] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2142.166406][ T5329] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2142.167868][ T5329] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:40 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:42 executing program 1 (fault-call:3 fault-nth:25):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2146.011243][ T5335] FAULT_INJECTION: forcing a failure.
[ 2146.011243][ T5335] name failslab, interval 1, probability 0, space 0, times 0
[ 2146.057110][ T5335] CPU: 0 PID: 5335 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2146.058958][ T5335] Hardware name: riscv-virtio,qemu (DT)
[ 2146.061084][ T5335] Call Trace:
[ 2146.062236][ T5335] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2146.063734][ T5335] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2146.066956][ T5335] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2146.068343][ T5335] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2146.069714][ T5335] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2146.071156][ T5335] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2146.073016][ T5335] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2146.074434][ T5335] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2146.075820][ T5335] [<ffffffe00001f31a>] vm_area_dup+0x36/0x182
[ 2146.077297][ T5335] [<ffffffe00001f76c>] dup_mm+0x306/0xc4a
[ 2146.079227][ T5335] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2146.080735][ T5335] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2146.082553][ T5335] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2146.084062][ T5335] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2146.085639][ T5335] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:45 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:46 executing program 1 (fault-call:3 fault-nth:26):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2150.674967][ T5340] cgroup: fork rejected by pids controller in /syz0
[ 2150.746113][ T5342] FAULT_INJECTION: forcing a failure.
[ 2150.746113][ T5342] name failslab, interval 1, probability 0, space 0, times 0
[ 2150.748370][ T5342] CPU: 1 PID: 5342 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2150.750948][ T5342] Hardware name: riscv-virtio,qemu (DT)
[ 2150.752387][ T5342] Call Trace:
[ 2150.753629][ T5342] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2150.755754][ T5342] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2150.757238][ T5342] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2150.757890][ T5342] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2150.760379][ T5342] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2150.762315][ T5342] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2150.763855][ T5342] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2150.765469][ T5342] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2150.767578][ T5342] [<ffffffe000478670>] copy_fs_struct+0x2e/0x14c
[ 2150.769088][ T5342] [<ffffffe0000226fc>] copy_process+0x1f02/0x356a
[ 2150.770510][ T5342] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2150.772202][ T5342] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2150.773737][ T5342] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2150.775227][ T5342] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:50 executing program 1 (fault-call:3 fault-nth:27):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500), 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2154.529992][ T5346] FAULT_INJECTION: forcing a failure.
[ 2154.529992][ T5346] name failslab, interval 1, probability 0, space 0, times 0
[ 2154.544820][ T5346] CPU: 1 PID: 5346 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2154.546512][ T5346] Hardware name: riscv-virtio,qemu (DT)
[ 2154.547472][ T5346] Call Trace:
[ 2154.548270][ T5346] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2154.549614][ T5346] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2154.550893][ T5346] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2154.552694][ T5346] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2154.554121][ T5346] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2154.555472][ T5346] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2154.556784][ T5346] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2154.558143][ T5346] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2154.559492][ T5346] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 2154.561156][ T5346] [<ffffffe000358a36>] anon_vma_fork+0x54/0x268
[ 2154.563093][ T5346] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2154.564490][ T5346] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2154.565856][ T5346] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2154.567184][ T5346] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2154.568523][ T5346] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2154.569831][ T5346] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:35:57 executing program 1 (fault-call:3 fault-nth:28):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:35:59 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500), 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2161.517304][ T5354] FAULT_INJECTION: forcing a failure.
[ 2161.517304][ T5354] name failslab, interval 1, probability 0, space 0, times 0
[ 2161.518849][ T5354] CPU: 0 PID: 5354 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2161.520010][ T5354] Hardware name: riscv-virtio,qemu (DT)
[ 2161.520737][ T5354] Call Trace:
[ 2161.521395][ T5354] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2161.522831][ T5354] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2161.523886][ T5354] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2161.524790][ T5354] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2161.525705][ T5354] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2161.526727][ T5354] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2161.527834][ T5354] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2161.528858][ T5354] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2161.529928][ T5354] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 2161.530996][ T5354] [<ffffffe000358a36>] anon_vma_fork+0x54/0x268
[ 2161.532245][ T5354] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2161.533468][ T5354] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2161.534559][ T5354] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2161.535505][ T5354] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2161.536537][ T5354] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2161.537512][ T5354] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:36:03 executing program 1 (fault-call:3 fault-nth:29):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2167.611409][ T5362] FAULT_INJECTION: forcing a failure.
[ 2167.611409][ T5362] name failslab, interval 1, probability 0, space 0, times 0
[ 2167.625085][ T5362] CPU: 1 PID: 5362 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2167.626848][ T5362] Hardware name: riscv-virtio,qemu (DT)
[ 2167.628459][ T5362] Call Trace:
[ 2167.629352][ T5362] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2167.630850][ T5362] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2167.632916][ T5362] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2167.634447][ T5362] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2167.635823][ T5362] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2167.637304][ T5362] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2167.639212][ T5362] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2167.640741][ T5362] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2167.643025][ T5362] [<ffffffe000358a9c>] anon_vma_fork+0xba/0x268
[ 2167.645152][ T5362] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2167.646499][ T5362] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2167.648031][ T5362] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2167.649870][ T5362] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2167.651409][ T5362] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2167.653664][ T5362] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:36:06 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500), 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:08 executing program 1 (fault-call:3 fault-nth:30):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2172.409104][ T5369] FAULT_INJECTION: forcing a failure.
[ 2172.409104][ T5369] name failslab, interval 1, probability 0, space 0, times 0
[ 2172.425897][ T5369] CPU: 0 PID: 5369 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2172.428912][ T5369] Hardware name: riscv-virtio,qemu (DT)
[ 2172.430771][ T5369] Call Trace:
[ 2172.432238][ T5369] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2172.434732][ T5369] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2172.436350][ T5369] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2172.438245][ T5369] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2172.439646][ T5369] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2172.441187][ T5369] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2172.443404][ T5369] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2172.445055][ T5369] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2172.446741][ T5369] [<ffffffe000358aec>] anon_vma_fork+0x10a/0x268
[ 2172.449012][ T5369] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2172.451232][ T5369] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2172.453605][ T5369] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2172.455078][ T5369] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2172.456601][ T5369] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2172.458080][ T5369] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:36:12 executing program 1 (fault-call:3 fault-nth:31):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:13 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2176.847879][ T5373] FAULT_INJECTION: forcing a failure.
[ 2176.847879][ T5373] name failslab, interval 1, probability 0, space 0, times 0
[ 2176.851098][ T5373] CPU: 0 PID: 5373 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2176.853790][ T5373] Hardware name: riscv-virtio,qemu (DT)
[ 2176.854838][ T5373] Call Trace:
[ 2176.855721][ T5373] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2176.857403][ T5373] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2176.860087][ T5373] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2176.861612][ T5373] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2176.863497][ T5373] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2176.865008][ T5373] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2176.866455][ T5373] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2176.868055][ T5373] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2176.870197][ T5373] [<ffffffe000358aec>] anon_vma_fork+0x10a/0x268
[ 2176.871662][ T5373] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2176.873206][ T5373] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2176.874608][ T5373] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2176.876029][ T5373] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2176.877482][ T5373] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2176.878844][ T5373] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:36:17 executing program 1 (fault-call:3 fault-nth:32):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2181.288382][ T5379] FAULT_INJECTION: forcing a failure.
[ 2181.288382][ T5379] name failslab, interval 1, probability 0, space 0, times 0
[ 2181.290606][ T5379] CPU: 1 PID: 5379 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2181.292636][ T5379] Hardware name: riscv-virtio,qemu (DT)
[ 2181.293622][ T5379] Call Trace:
[ 2181.294438][ T5379] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2181.295620][ T5379] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2181.296830][ T5379] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2181.298113][ T5379] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2181.299403][ T5379] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2181.300849][ T5379] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2181.302567][ T5379] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2181.304199][ T5379] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2181.305868][ T5379] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 2181.308065][ T5379] [<ffffffe000358a36>] anon_vma_fork+0x54/0x268
[ 2181.309577][ T5379] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2181.310775][ T5379] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2181.312021][ T5379] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2181.313221][ T5379] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2181.314823][ T5379] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2181.316037][ T5379] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:36:20 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:23 executing program 1 (fault-call:3 fault-nth:33):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2187.579008][ T5387] FAULT_INJECTION: forcing a failure.
[ 2187.579008][ T5387] name failslab, interval 1, probability 0, space 0, times 0
[ 2187.581245][ T5387] CPU: 0 PID: 5387 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2187.584252][ T5387] Hardware name: riscv-virtio,qemu (DT)
[ 2187.585444][ T5387] Call Trace:
[ 2187.586378][ T5387] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2187.587904][ T5387] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2187.589326][ T5387] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2187.590713][ T5387] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2187.592835][ T5387] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2187.594491][ T5387] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2187.595898][ T5387] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2187.597325][ T5387] [<ffffffe0003b8e04>] kmem_cache_alloc+0x5c/0x3ca
[ 2187.600707][ T5387] [<ffffffe000358758>] anon_vma_clone+0xa4/0x32e
[ 2187.605446][ T5387] [<ffffffe000358a36>] anon_vma_fork+0x54/0x268
[ 2187.607147][ T5387] [<ffffffe00001fc7a>] dup_mm+0x814/0xc4a
[ 2187.608499][ T5387] [<ffffffe000023ad0>] copy_process+0x32d6/0x356a
[ 2187.609967][ T5387] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2187.611390][ T5387] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2187.614349][ T5387] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2187.616049][ T5387] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:36:27 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:28 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:34 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(0x0, 0x0)

00:36:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:38 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(0x0, 0x0)

00:36:42 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(0x0, 0x0)

00:36:47 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(0x0, 0x0)

00:36:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x5, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:51 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:51 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:56 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:36:59 executing program 0 (fault-call:2 fault-nth:0):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2223.897995][ T5439] FAULT_INJECTION: forcing a failure.
[ 2223.897995][ T5439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2223.899812][ T5439] CPU: 1 PID: 5439 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2223.901137][ T5439] Hardware name: riscv-virtio,qemu (DT)
[ 2223.902415][ T5439] Call Trace:
[ 2223.903417][ T5439] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2223.905273][ T5439] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2223.906357][ T5439] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2223.907622][ T5439] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2223.908783][ T5439] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2223.910186][ T5439] [<ffffffe000a37532>] should_fail_usercopy+0x1e/0x26
[ 2223.911518][ T5439] [<ffffffe000974dc2>] _copy_from_user+0x34/0x110
[ 2223.913064][ T5439] [<ffffffe00001d606>] copy_clone_args_from_user+0xfa/0x470
[ 2223.914402][ T5439] [<ffffffe0000249f4>] __do_sys_clone3+0x42/0x1ba
[ 2223.915988][ T5439] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2223.917979][ T5439] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:37:03 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x8, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:05 executing program 0 (fault-call:2 fault-nth:1):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2228.766582][ T5446] FAULT_INJECTION: forcing a failure.
[ 2228.766582][ T5446] name failslab, interval 1, probability 0, space 0, times 0
[ 2228.768871][ T5446] CPU: 1 PID: 5446 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 2228.771740][ T5446] Hardware name: riscv-virtio,qemu (DT)
[ 2228.773527][ T5446] Call Trace:
[ 2228.774895][ T5446] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 2228.776388][ T5446] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 2228.777852][ T5446] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 2228.779947][ T5446] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 2228.781393][ T5446] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 2228.783520][ T5446] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 2228.784948][ T5446] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 2228.786724][ T5446] [<ffffffe0003b86ac>] kmem_cache_alloc_node+0x5e/0x404
[ 2228.789159][ T5446] [<ffffffe000021b34>] copy_process+0x133a/0x356a
[ 2228.790592][ T5446] [<ffffffe00002414c>] kernel_clone+0x94/0x84e
[ 2228.792564][ T5446] [<ffffffe000024b0a>] __do_sys_clone3+0x158/0x1ba
[ 2228.794801][ T5446] [<ffffffe000024c7e>] sys_clone3+0x20/0x2c
[ 2228.796224][ T5446] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
00:37:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:10 executing program 0 (fault-call:2 fault-nth:2):
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:14 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:19 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:20 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xf0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:25 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:27 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:29 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:33 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:34 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:48 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:49 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x5, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:37:58 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:01 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xf000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:06 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x20010, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:14 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x8, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:14 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x20200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:18 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x80000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:26 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:29 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:31 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:36 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xf0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x30e30d, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:44 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xf00000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:51 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xf01511, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:51 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:56 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:38:59 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:01 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:14 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:18 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:25 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:25 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x6000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:30 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x7000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:34 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:36 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:42 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xde33000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:44 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xf000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x10000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:50 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x11000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:54 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x20010, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:39:56 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x1115f000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:00 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:02 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x20200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:05 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x80000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x100000800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:25 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x1b11b1f000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:31 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x2488667000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:34 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:36 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x10000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:40 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x2001000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:45 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x2020000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:50 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x8000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:53 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x70ae0a, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x8000001000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:40:59 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x10000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:01 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xb04a14, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:03 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x10100000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:10 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x20000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:14 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xf00000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:18 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x30e30d00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x70668824000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:24 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xf0000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:32 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xf0151100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:37 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xf0b1111b000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:41 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x3000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x200000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x300000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x4000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x400000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:41:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x500000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:02 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x5000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:02 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x600000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:07 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x700000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:10 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x800000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x6000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:14 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x1100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x2000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x7000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x4000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0xffffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:31 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:36 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:41 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xaae7000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:51 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x10000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:42:56 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:00 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x11000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:02 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 2587.045296][ T9732] cgroup: fork rejected by pids controller in /syz1
00:43:12 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x144ab000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:20 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:45 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xf0}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:46 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x100000800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:55 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:43:57 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x1b0e91f000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:03 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x500}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:05 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x24945c7000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:11 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x600}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:13 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x10000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x700}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:20 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x2001000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:26 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:28 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x2020000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:36 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x8000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:41 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x8000001000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:50 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xf000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x10000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:44:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:01 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x10100000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x20200}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x20000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:21 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x80000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:24 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x705c9424000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:30 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x100000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x70ae0a00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:37 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x101000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:40 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xb04a1400000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x200000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:51 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xf0000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:45:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x30e30d}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:01 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xf0910e1b000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:06 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xf00000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:08 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:13 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xf01511}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:16 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x200000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:21 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:24 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x300000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:29 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x400000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:37 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:39 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x500000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:44 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:47 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x600000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:52 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x5000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:46:55 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x700000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:00 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x6000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:03 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x800000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x7000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x1100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:17 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:22 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x2000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xde33000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:30 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x4000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:35 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0xffffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:45 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:51 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x1115f000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:54 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:47:59 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:48:05 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:48:07 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:48:15 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:48:15 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58)

00:48:24 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58)

00:48:25 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:48:33 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58)

00:48:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:48:40 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x5, 0x0, 0x0}, 0x58)

00:48:48 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:48:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x6, 0x0, 0x0}, 0x58)

00:48:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7, 0x0, 0x0}, 0x58)

00:48:58 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:49:05 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58)

00:49:08 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:49:14 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10, 0x0, 0x0}, 0x58)

00:49:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:49:28 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58)

00:49:35 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xf0}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:49:37 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0, 0x0, 0x0}, 0x58)

00:49:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:49:44 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58)

00:49:49 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x500}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:49:53 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x500, 0x0, 0x0}, 0x58)

00:49:57 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x600}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:50:01 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x600, 0x0, 0x0}, 0x58)

00:50:06 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x700}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:50:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x700, 0x0, 0x0}, 0x58)

00:50:13 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:50:17 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58)

00:50:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:50:25 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58)

00:50:29 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:50:35 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58)

00:50:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xf000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:50:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf000, 0x0, 0x0}, 0x58)

00:50:51 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:50:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58)

00:50:58 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x20200}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:51:02 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20200, 0x0, 0x0}, 0x58)

00:51:07 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x80000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:51:10 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x80000, 0x0, 0x0}, 0x58)

00:51:15 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x100000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:51:20 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000, 0x0, 0x0}, 0x58)

00:51:25 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x101000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:51:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x101000, 0x0, 0x0}, 0x58)

00:51:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x200000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:51:35 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x200000, 0x0, 0x0}, 0x58)

00:51:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x70ae0a}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:51:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x30e30d, 0x0, 0x0}, 0x58)

00:51:50 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xb04a14}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:51:52 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf00000, 0x0, 0x0}, 0x58)

00:51:58 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xf00000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:52:01 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf01511, 0x0, 0x0}, 0x58)

00:52:05 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:52:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58)

00:52:13 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:52:15 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, 0x0}, 0x58)

00:52:20 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:52:22 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3000000, 0x0, 0x0}, 0x58)

00:52:28 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:52:32 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000000, 0x0, 0x0}, 0x58)

00:52:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x5000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:52:40 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x5000000, 0x0, 0x0}, 0x58)

00:52:45 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x6000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:52:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x6000000, 0x0, 0x0}, 0x58)

00:52:53 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x7000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:52:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7000000, 0x0, 0x0}, 0x58)

00:52:59 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:53:03 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58)

00:53:07 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0xaae7000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:53:11 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xde33000, 0x0, 0x0}, 0x58)

00:53:14 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:53:20 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58)

00:53:27 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:53:36 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58)

00:53:39 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x144ab000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:53:44 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1115f000, 0x0, 0x0}, 0x58)

00:53:48 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:53:52 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58)

00:53:56 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:53:59 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58)

00:54:08 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58)

00:54:10 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000800, 0x0, 0x0}, 0x58)

00:54:18 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58)

00:54:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1b11b1f000, 0x0, 0x0}, 0x58)

00:54:26 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58)

00:54:28 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2488667000, 0x0, 0x0}, 0x58)

00:54:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x5, 0x0, 0x0}, 0x58)

00:54:35 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000000000, 0x0, 0x0}, 0x58)

00:54:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x6, 0x0, 0x0}, 0x58)

00:54:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2001000000000, 0x0, 0x0}, 0x58)

00:54:49 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7, 0x0, 0x0}, 0x58)

00:54:50 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2020000000000, 0x0, 0x0}, 0x58)

00:54:57 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58)

00:54:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000000000, 0x0, 0x0}, 0x58)

00:55:07 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000001000000, 0x0, 0x0}, 0x58)

00:55:08 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10, 0x0, 0x0}, 0x58)

00:55:15 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000000000000, 0x0, 0x0}, 0x58)

00:55:16 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58)

00:55:25 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10100000000000, 0x0, 0x0}, 0x58)

00:55:25 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0, 0x0, 0x0}, 0x58)

00:55:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58)

00:55:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000000000, 0x0, 0x0}, 0x58)

00:55:45 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x500, 0x0, 0x0}, 0x58)

00:55:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x30e30d00000000, 0x0, 0x0}, 0x58)

00:55:53 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x600, 0x0, 0x0}, 0x58)

00:55:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x70668824000000, 0x0, 0x0}, 0x58)

00:56:01 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0000000000000, 0x0, 0x0}, 0x58)

00:56:01 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x700, 0x0, 0x0}, 0x58)

00:56:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0151100000000, 0x0, 0x0}, 0x58)

00:56:09 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58)

00:56:16 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58)

00:56:16 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0b1111b000000, 0x0, 0x0}, 0x58)

00:56:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000000000000, 0x0, 0x0}, 0x58)

00:56:24 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58)

00:56:31 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x200000000000000, 0x0, 0x0}, 0x58)

00:56:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf000, 0x0, 0x0}, 0x58)

00:56:39 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58)

00:56:39 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x300000000000000, 0x0, 0x0}, 0x58)

00:56:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x400000000000000, 0x0, 0x0}, 0x58)

00:56:48 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20200, 0x0, 0x0}, 0x58)

00:56:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x500000000000000, 0x0, 0x0}, 0x58)

00:56:54 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x80000, 0x0, 0x0}, 0x58)

00:57:01 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000, 0x0, 0x0}, 0x58)

00:57:02 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x600000000000000, 0x0, 0x0}, 0x58)

00:57:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x101000, 0x0, 0x0}, 0x58)

00:57:10 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x700000000000000, 0x0, 0x0}, 0x58)

00:57:16 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x200000, 0x0, 0x0}, 0x58)

00:57:18 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x800000000000000, 0x0, 0x0}, 0x58)

00:57:24 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x70ae0a, 0x0, 0x0}, 0x58)

00:57:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100000000000000, 0x0, 0x0}, 0x58)

00:57:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xb04a14, 0x0, 0x0}, 0x58)

00:57:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000000000000, 0x0, 0x0}, 0x58)

00:57:40 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf00000, 0x0, 0x0}, 0x58)

00:57:42 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000000000000000, 0x0, 0x0}, 0x58)

00:57:48 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58)

00:57:50 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffff00000000, 0x0, 0x0}, 0x58)

00:57:55 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, 0x0}, 0x58)

00:57:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58)

00:58:02 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3000000, 0x0, 0x0}, 0x58)

00:58:04 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x58)

00:58:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000000, 0x0, 0x0}, 0x58)

00:58:12 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x58)

00:58:17 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x5000000, 0x0, 0x0}, 0x58)

00:58:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x58)

00:58:24 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x6000000, 0x0, 0x0}, 0x58)

00:58:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x58)

00:58:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7000000, 0x0, 0x0}, 0x58)

00:58:35 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x58)

00:58:40 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58)

00:58:44 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x58)

00:58:49 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xaae7000, 0x0, 0x0}, 0x58)

00:58:53 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x58)

00:58:58 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58)

00:59:01 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x58)

00:59:05 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58)

00:59:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x58)

00:59:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x144ab000, 0x0, 0x0}, 0x58)

00:59:16 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x58)

00:59:20 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58)

00:59:25 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x58)

00:59:29 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58)

00:59:39 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x58)

00:59:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000800, 0x0, 0x0}, 0x58)

00:59:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x58)

00:59:51 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1b0e91f000, 0x0, 0x0}, 0x58)

00:59:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x58)

00:59:58 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x24945c7000, 0x0, 0x0}, 0x58)

01:00:05 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x58)

01:00:06 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000000000, 0x0, 0x0}, 0x58)

01:00:12 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x58)

01:00:13 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2001000000000, 0x0, 0x0}, 0x58)

01:00:18 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf000}, 0x58)

01:00:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2020000000000, 0x0, 0x0}, 0x58)

01:00:25 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20010}, 0x58)

01:00:28 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000000000, 0x0, 0x0}, 0x58)

01:00:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20200}, 0x58)

01:00:35 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000001000000, 0x0, 0x0}, 0x58)

01:00:42 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x58)

01:00:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000000000000, 0x0, 0x0}, 0x58)

01:00:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x58)

01:00:50 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10100000000000, 0x0, 0x0}, 0x58)

01:00:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x101000}, 0x58)

01:00:57 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000000000, 0x0, 0x0}, 0x58)

01:01:04 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x705c9424000000, 0x0, 0x0}, 0x58)

01:01:05 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x58)

01:01:11 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x70ae0a00000000, 0x0, 0x0}, 0x58)

01:01:12 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x30e30d}, 0x58)

01:01:19 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xb04a1400000000, 0x0, 0x0}, 0x58)

01:01:20 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf00000}, 0x58)

01:01:27 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0000000000000, 0x0, 0x0}, 0x58)

01:01:28 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf01511}, 0x58)

01:01:40 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0910e1b000000, 0x0, 0x0}, 0x58)

01:01:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x58)

01:01:49 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000000000000, 0x0, 0x0}, 0x58)

01:01:50 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x58)

01:01:57 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x200000000000000, 0x0, 0x0}, 0x58)

01:01:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x58)

01:02:04 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x300000000000000, 0x0, 0x0}, 0x58)

01:02:06 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x58)

01:02:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x400000000000000, 0x0, 0x0}, 0x58)

01:02:13 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x58)

01:02:18 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x500000000000000, 0x0, 0x0}, 0x58)

01:02:21 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x58)

01:02:25 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x600000000000000, 0x0, 0x0}, 0x58)

01:02:30 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x58)

01:02:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x700000000000000, 0x0, 0x0}, 0x58)

01:02:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x58)

01:02:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x800000000000000, 0x0, 0x0}, 0x58)

01:02:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xde33000}, 0x58)

01:02:50 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100000000000000, 0x0, 0x0}, 0x58)

01:02:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000200}, 0x58)

01:03:00 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000000000000000, 0x0, 0x0}, 0x58)

01:03:06 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x58)

01:03:08 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000000000000000, 0x0, 0x0}, 0x58)

01:03:14 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1115f000}, 0x58)

01:03:16 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffff00000000, 0x0, 0x0}, 0x58)

01:03:21 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x58)

01:03:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58)

01:03:29 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x58)

01:03:30 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x58)

01:03:41 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000800}, 0x58)

01:03:44 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x58)

01:03:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b11b1f000}, 0x58)

01:03:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x58)

01:03:56 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2488667000}, 0x58)

01:04:00 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x58)

01:04:04 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x58)

01:04:07 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x58)

01:04:12 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2001000000000}, 0x58)

01:04:14 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x58)

01:04:21 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2020000000000}, 0x58)

01:04:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x58)

01:04:29 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x58)

01:04:29 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x58)

01:04:36 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x58)

01:04:37 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000001000000}, 0x58)

01:04:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x58)

01:04:44 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x58)

01:04:51 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10100000000000}, 0x58)

01:04:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x58)

01:04:59 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x58)

01:05:00 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x58)

01:05:06 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x30e30d00000000}, 0x58)

01:05:08 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x58)

01:05:14 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x70668824000000}, 0x58)

01:05:15 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x58)

01:05:21 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}, 0x58)

01:05:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x58)

01:05:29 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0151100000000}, 0x58)

01:05:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x58)

01:05:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0b1111b000000}, 0x58)

01:05:45 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf000}, 0x58)

01:05:52 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x58)

01:05:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20010}, 0x58)

01:06:00 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20200}, 0x58)

01:06:00 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x58)

01:06:07 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x58)

01:06:07 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x58)

01:06:15 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x58)

01:06:15 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x58)

01:06:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x101000}, 0x58)

01:06:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x58)

01:06:30 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x58)

01:06:31 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x58)

01:06:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x70ae0a}, 0x58)

01:06:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x58)

01:06:44 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xb04a14}, 0x58)

01:06:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x58)

01:06:51 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf00000}, 0x58)

01:06:53 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x58)

01:06:59 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x58)

01:07:00 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x58)

01:07:07 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x58)

01:07:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x58)

01:07:14 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x58)

01:07:15 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x58)

01:07:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x58)

01:07:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57)

01:07:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x58)

01:07:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4000000000)

01:07:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x58)

01:07:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:07:56 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x58)

01:07:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x1c8, r2, 0x710, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xd8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "88672dbe6bc7708d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7be25e4fef789a41098d7c181222ba1d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5c69330720c5403763625d988722ccc10df4e45dc8c013f0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="614e22716b766e3a5bb17bbb838c0b79136d15d03ef59f658adc6858264a54ad"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="00b8dbfb073ab01d8f88634a6b5bf379625496ff234067c916d0e4390f1059ad"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9186447552ebb993f5f0cc94d3b0655492d90361f15ba8b5dbf1cb1a002e934b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfe}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="69a9a20917b4df88dffb1226ce0eee13"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d505a47f684178505737bdf23ae5a75e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f5b7e6fa85e12edf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "be585982ab2bfee7"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7ae842c4d209dad7fc6ac489727509c9"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bc5c73eea5393250"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="834774436ec03a17b760d4d804648a1b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x792d}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "266b883619f652de"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "107aae4924ec9273"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x33}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="99bd34511b750ee9f11607c5e195f4bc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "db86cebd15696526"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2aef9d3ab50a17d7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

01:08:04 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x58)

01:08:07 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/148, 0x94}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000440)=""/74, 0x4a}], 0x5)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:08:11 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xaae7000}, 0x58)

01:08:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000200}, 0x58)

01:08:31 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x58)

01:08:40 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x144ab000}, 0x58)

01:08:51 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x58)

01:08:55 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000002c0))
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x6, 0x2004, @fd_index=0xa, 0x4, 0x0, 0x0, 0xf, 0x1, {0x2}}, 0x0)
r2 = syz_io_uring_setup(0x39df, &(0x7f0000000080)={0x0, 0x5344}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x6000, @fd=r0, 0x4, 0x8, 0x4, 0x10, 0x1, {0x0, r3}}, 0x8)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, r0, 0x8000000)
r5 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r6=>0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r5, 0x0)
syz_io_uring_submit(r7, r6, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r8 = syz_io_uring_setup(0x39de, &(0x7f0000000080)={0x0, 0x5344, 0x20, 0x0, 0xe4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9)
syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd_index=0x5, 0x51, 0x1, 0x0, 0x5, 0x1, {0x2, r9}}, 0xfffffc00)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r11 = openat(r10, &(0x7f00000001c0)='./file0\x00', 0x351340, 0x2)
ioctl$BTRFS_IOC_LOGICAL_INO(r11, 0xc0389424, &(0x7f0000000240)={0x1f, 0x28, [], 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]})

01:08:59 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x58)

01:09:08 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000800}, 0x58)

01:09:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84800)
r5 = accept4(r3, 0x0, &(0x7f0000001840), 0x0)
finit_module(r5, &(0x7f0000001880)='/sys/kernel/debug/binder/stats\x00', 0x1)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001740)=""/235, 0xeb}], 0x1)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000001540)=""/243, 0xf3}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000001640)=""/95, 0x5f}], 0x7)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_uring_setup(0x42e3, &(0x7f00000001c0)={0x0, 0x2071, 0x0, 0x2, 0x331, 0x0, r6})
r7 = accept4$unix(r6, &(0x7f00000029c0)=@abs, &(0x7f00000018c0)=0x6e, 0x80800)
fchown(r7, 0x0, 0xee00)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r8, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f00000019c0)={{r8}, 0x0, 0x20, @inherit={0x68, &(0x7f0000001940)={0x1, 0x4, 0x1000, 0x9, {0x20, 0x5, 0x9, 0xcf, 0x2}, [0x1, 0x6f, 0x9915, 0xfff]}}, @devid})

01:09:16 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b0e91f000}, 0x58)

01:09:17 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81800)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f00000004c0)=""/9, 0x9}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000640)=""/168, 0xa8}], 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:09:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x24945c7000}, 0x58)

01:09:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x58)

01:09:32 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000380)=0x1, 0x0, 0x4)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/7, 0x7}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/208, 0xd0}], 0x3)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r5, 0x5016, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:09:45 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2001000000000}, 0x58)

01:09:53 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x2dac, &(0x7f0000000000)={0x0, 0xef96, 0x8, 0x1, 0x6, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200))
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x47)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x157, &(0x7f0000000280)={0x0, 0xbb46, 0x1, 0x0, 0x21e, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340))

01:09:57 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2020000000000}, 0x58)

01:10:04 executing program 1:
r0 = syz_io_uring_setup(0xffffffff, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/88, 0x58}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000200)=""/73, 0x49}], 0x4)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:10:07 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x58)

01:10:12 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x638c01, 0x14d)
syz_io_uring_setup(0x367a, &(0x7f00000001c0)={0x0, 0x576, 0x20, 0x3, 0x90, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:10:16 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8000001000000}, 0x58)

01:10:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0xa}, 0x10)

01:10:24 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x58)

01:10:32 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}, 0x2fc6, 0x1, 0xfffffffeffffffff})
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000), 0x0)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x81, 0x64}, 'port1\x00', 0x40, 0x0, 0x7, 0x0, 0x3, 0x1000, 0x3, 0x0, 0x5, 0x3f})

01:10:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10100000000000}, 0x58)

01:10:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x58)

01:10:42 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xabc4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:10:49 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x705c9424000000}, 0x58)

01:10:53 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000640)=""/154, 0x9a}], 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000540)=""/235, 0xeb}, {&(0x7f0000000440)=""/191, 0xbf}], 0x5)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"])

01:10:57 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x70ae0a00000000}, 0x58)

01:11:02 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/93, 0x5d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:11:04 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xb04a1400000000}, 0x58)

01:11:11 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[r2, r0, r3, r0, r1, r0, r1]}, 0x7)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f0000000440)=""/90, 0x5a}], 0x4)

01:11:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}, 0x58)

01:11:20 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xf0910e1b000000}, 0x58)

01:11:21 executing program 1:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x64, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x94)

01:11:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x58)

01:11:33 executing program 1:
r0 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@ieee802154={0x24, @long}, &(0x7f0000000040)=0x80, 0x80000)
accept(r0, &(0x7f0000000240)=@alg, &(0x7f00000002c0)=0x80)
r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x2a7, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x440280, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:11:42 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x58)

01:11:45 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000540)={{r4}, "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"})
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r6, 0x0, r5, 0x0, 0x4, 0x0)
openat$cgroup(r6, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)

01:11:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x58)

01:11:59 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000340)={0x0, 0x8, {<r3=>r2}, {0xee01}, 0x0, 0x4fb0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={<r4=>0x0}, &(0x7f0000000440)=0xc)
r5 = open_tree(r1, &(0x7f00000004c0)='\x00', 0x80001)
syz_io_uring_setup(0x6784, &(0x7f00000005c0)={0x0, 0xe27, 0x2, 0x3, 0x284, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680))
clone3(&(0x7f0000000540)={0x144020000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x1c}, &(0x7f0000000200)=""/122, 0x7a, &(0x7f0000000280)=""/188, &(0x7f0000000480)=[r3, r2, r2, r2, r2, r4], 0x6, {r5}}, 0x58)
pipe2(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="71fc0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b4}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004000)
splice(r7, 0x0, r6, 0x0, 0x4, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0)

01:12:01 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x58)

01:12:08 executing program 1:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fbdbdf250400000008000a00010000000c0010003f00000000000000050004000100000008000a0002000000080011000100000008001700", @ANYBLOB="13b3940f267f7f539875ddad51b028d2be5bd22b5b4164ab9b533df1ee17d57ac195ce1176a86b50234e39570e5d7801ce2b7436443b5ab8d7dfe20f5624b6f1aad881ae866bf4a396284a819b538b0c2b140eb89e60a77b48bb69530bbe0b4f11ce4629006b7bc7d9f95b4efaf09b0f24ca6baa762dbd87edf6d47fb622a54422e9d149e7a64076e469bab1518adf04b2580ac5e1895119b3de5982", @ANYBLOB="060003070000000000000000070002000000"], 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x4000040)
r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = getpid()
r3 = getpid()
kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:12:09 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x58)

01:12:17 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x58)

01:12:23 executing program 1:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000240)='/dev/usb/hiddev#\x00', 0x5, 0xb00)
ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000280)={0x1, 0x80})
clone3(&(0x7f0000000000)={0x268009800, 0x0, 0x0, 0x0, {}, 0x0, 0xb, 0x0, 0x0}, 0x58)
r6 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r7=>0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r6, 0x0)
syz_io_uring_submit(r8, r7, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r3, r7, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, r4, 0x0, &(0x7f00000001c0)='./file0\x00', 0x20, 0x400, 0x23456}, 0x2)

01:12:29 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x58)

01:12:39 executing program 1:
r0 = syz_io_uring_setup(0xffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x40804}, 0x80)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00', 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)

01:12:44 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x58)

01:12:51 executing program 1:
r0 = syz_io_uring_setup(0x15, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:12:53 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x58)

01:13:01 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x58)

01:13:06 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/214, 0xd6}], 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000008c0)={&(0x7f0000000880)=[0x8000, 0x200, 0x20], 0x3, 0x0, 0x0, <r3=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000900)=[r0], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000780)=""/92, 0x5c}], 0x5)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r4 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000380), &(0x7f0000000140)=<r5=>0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r4, 0x0)
syz_io_uring_submit(r6, r5, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r8=>0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r7, 0x0)
syz_io_uring_submit(r9, r8, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r6, r8, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4}, 0x100)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:13:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x58)

01:13:16 executing program 1:
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x40c880, 0x2)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@private0={0xfc, 0x0, [], 0x1}, 0x32})
r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/18, 0x12}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:13:18 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x58)

01:13:26 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57)

01:13:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8)
io_uring_enter(r2, 0x698b, 0x4eb8, 0x98c2d64090f82ec7, &(0x7f0000000040)={[0x54e]}, 0x8)

01:13:37 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/215, 0xd7}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000001640)=""/185, 0xb9}], 0x8)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:13:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4000000000)

01:13:44 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:13:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4c40, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000001c0)={0x400, 0x0, &(0x7f0000000040)=[r1, r4, r5]}, 0x3)

01:13:54 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00')
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000280)=""/213, 0xd5}], 0x2)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:13:55 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x14)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:05 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:05 executing program 1:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
r2 = syz_io_uring_setup(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0))
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
close_range(r0, r5, 0x2)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000080), 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = clone3(&(0x7f0000000280)={0x4000000, &(0x7f0000000000), &(0x7f0000000040)=<r3=>0x0, &(0x7f00000001c0), {0x2c}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000000200)=""/53, &(0x7f0000000240)=[0x0, r1, r1], 0x3}, 0x58)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5)
r6 = inotify_init1(0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3ff, 0x1, 0x1, 0x8, 0xf8f7, 0x8}, 0x20)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r7, 0x0, 0x4, 0x0)
r9 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x4, 0xc003)
kcmp$KCMP_EPOLL_TFD(r5, r3, 0x7, r6, &(0x7f0000000340)={r8, r9, 0x6})
tkill(r2, 0x21)

01:14:16 executing program 1:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
read(r0, &(0x7f0000000200)=""/175, 0xaf)
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5)
getgroups(0x1, &(0x7f0000000e40)=[<r6=>0xee00])
r7 = timerfd_create(0x2, 0x800)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r9 = getuid()
r10 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=r10])
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000440)="60dcf31e29cf19085e8c15a54c98093b906702d86aa4bac881fe4bc1e9745223026c791382f7ca4766a2afe343dac899d0d461c7b1e7aeba7aaabc9e82c55a328b8158672df98b5566969586a2c30b791014a6a49706a062e1d6f616d305a9eb147878389ce1993988a5059517d209c281a62230bb79b68df1b6fdfc4e31dbc80dbe8f3821e80b8f58f1e1c42be90b106ee9e548322b16263402186859924872", 0xa0}], 0x1, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xb0, 0x4000070}, {&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000007c0)="fd6cf0d8a037c6a612d04c8edfd08b22b5b19403d3355c3b13d3bfe8f1b89dbf3bfab3de8f9577554f9956201be0f982eceb60888bbff2620db758fc718db3538c518d0637bf8f84151783e75e666f18d1abf973fd3072b526238c22f4a5b36d4f73820c0e09dc140e53644caffc39592ff974573affbf662136518bef", 0x7d}], 0x1, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4000000}, {&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000980)="3f4d8fdb9948618af5e5a3772dfd2b3f882e4c9720f4785388b361ccae2bf469f7d49dd5d520e3cf5c995bdbba7686f93ddfb18e3fd85fa8a2a58851a9e10cb835135113ae7f2ba914820a0a54ddb8b14585d910af884f39ce472763859a2b4eb62a48dfd20974e2b378817fb88b3967e16bb74cee52f71471a1625760bd8958ca147cfcd9c93ecd9732c6bf9fbc7e2a49a8928c0bb21e0d763dcfa4f5ba923d3cbdbc988e54985a6f6b242e070567f74636f693c4f7dadc4a81c2b2ee59da8182804a71efccaac8a9d65988cf5edaebd37ec2c5ad1efd94b464322cd523c037d3c2", 0xe2}, {&(0x7f0000000a80)="ff720e07abfc80d220fa1224d59ae100910505f3b9a7880bf07266865cc12a59218a4e68637e19c0baa822efd1d8fca5fe852e61ab7d3ce2068b045366e6a43b0951747a2de3ac71743f6d043d", 0x4d}, {&(0x7f0000000b00)="47daa862f62cad2180181c4e1cc26c11f933eaac3dfec5eaf078de450060ae96de18efe963633d29f500cc8d4e8e2851149f53c301c183", 0x37}, {&(0x7f0000000b40)="5dd633cdb3a8cc743b3af0b34344a6b089f8425d132a8eb9404926205ab32ef35fb9c46ee62c392dbd5e38cf4b3435d3c063294795c60b8053c1ecb7ca5698cb474e9c943618c3cfc586d9770388951d84e9a9687620d84eb806417863feb2f3a10fb504acf39dd1553b519358", 0x6d}, {&(0x7f0000000bc0)="5f346eef1af6ef7b922f0e2a627d0b294ed9df5b124626fd87d322c47c3b36", 0x1f}, {&(0x7f0000000c00)="ea6f1bd335867609638153dc5baf9969b2a569c778b6d2b87143f1cd4e441f3f75d14f7edd3ce9ff450b86f36202c542fa61e0928384689d66b020357aa535d623d5e8f792210e59467a04fbe0125a62b7757a9d25e79e6e563a866981d2b72bd4dbf9f7f8690dd48ddb903b543488fbdae5ae1cc9682807", 0x78}, {&(0x7f0000000c80)="af886764317309a3d48c9cd0d595cb6db9ca9fee68a9d19ceb8a365ce5d277c93bbfe629720bd81c6657e2424068422428ece718463c39f61e15444e9be9503d6481e68171967b66408ca5833d0759308ec2fcfef0a0f657c918ecbf596999d921880abeb68cb2de75326a6988011132", 0x70}, {&(0x7f0000000d00)="6808c6fbfacd14fdf2cffeb3201d0f49660c9577e966de816cf3f851cb81a32ed4486f7d3312ad12d0f7cb1570adb7dc311ab3249536714060a911fa13", 0x3d}], 0x8, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r1, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r7, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xee01}}}], 0x138, 0x40}], 0x3, 0x40810)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r11 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x420000, 0x110)
io_uring_enter(r11, 0x158c, 0xd1dc, 0x3, &(0x7f00000001c0)={[0x4]}, 0x8)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x9b10031481ab5e5e, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x76f4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:29 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='.\x00', 0x2, 0x19cea971903ee8b9)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x8000, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000880))

01:14:40 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xe, 0x0, 0x0}, 0x58)

01:14:44 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000180)=""/196, 0xc4}, {&(0x7f0000000280)=""/186, 0xba}], 0x3)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = syz_io_uring_setup(0x769e, &(0x7f0000000440)={0x0, 0x81b0, 0x10, 0x1, 0x2fa, 0x0, r0}, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000380))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)}], 0x3)

01:14:48 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x29a4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}, 0x9)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/134, 0x86}, 0x40010002)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:14:59 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0xb85, &(0x7f0000000000)={0x0, 0xfccb, 0x4, 0x3, 0x1ff}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:15:04 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
fcntl$setlease(r1, 0x400, 0x2)

01:15:14 executing program 1:
r0 = syz_io_uring_setup(0x40000004, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x3, 0xfffffffc, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r0, r0, r1, r4, r0], 0x5)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:15:14 executing program 0:
r0 = syz_io_uring_setup(0x364e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r0, 0x0)
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_io_uring_setup(0x39df, &(0x7f0000000080)={0x0, 0x5344}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6)
syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="2bb1f677a327daa55bdb96666da100bf78d1c5addc9e4ea51ef107f8f122d427b851a7388e2ac4ce93c5b520c5ae7b8b40aa05f30f8ddabcddaa4e49b1b1f0848e4a42910b64f1a2ec2054f27c6a0b1c25c2644eab3f67d1", 0x58, 0x2, 0x1, {0x0, r6}}, 0x10000)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:15:25 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = syz_io_uring_setup(0x4896, &(0x7f0000000340)={0x0, 0x7ecf, 0x0, 0x0, 0x1b1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/67, 0x43}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000240)=""/129, 0x81}], 0x3)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4)
r4 = dup3(r1, r1, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r7, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000540)={0x0, 0x80000, <r8=>0xffffffffffffffff})
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004004)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[r2, r3, r4, r1, r1, r5, r6, r7, r0, r8]}, 0xa)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:15:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = io_uring_setup(0x4f75, &(0x7f0000000300)={0x0, 0xeba1, 0x0, 0x2, 0x1d4})
io_uring_enter(r1, 0x46e5, 0x6141, 0x2, &(0x7f0000000380)={[0x80]}, 0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x3e, 0x10001, 0x8})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000540)=""/215, 0xd7}], 0x3)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:15:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:15:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x12, r0, 0x0)
syz_io_uring_setup(0x4d98, &(0x7f0000001900)={0x0, 0x528, 0x1, 0x3, 0x377}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000001980)=<r2=>0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r4 = syz_io_uring_setup(0x39df, &(0x7f0000000080)={0x0, 0x5344}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r5=>0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x0)
syz_io_uring_submit(r6, r5, &(0x7f0000001a00)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1, 0x1}, 0x7f)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r7)
syz_io_uring_submit(r1, r2, &(0x7f00000019c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x4, 0x0, 0x5, 0x4, 0x1, {0x0, r7}}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
recvmsg$can_j1939(r8, &(0x7f0000000380)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/198, 0xc6}, {&(0x7f0000001740)=""/140, 0x8c}], 0x7, &(0x7f0000001880)=""/74, 0x4a}, 0x10142)
ioctl$LOOP_SET_FD(r8, 0x4c00, r8)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1)

01:15:50 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x7237, &(0x7f0000000000)={0x0, 0xe5cf, 0x20, 0x0, 0x26b, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))

01:15:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x14}, 0x10)
r3 = eventfd2(0x23e270bc, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000240)={0xffff, 0x0, &(0x7f0000000200)=[r2, r0, r3, r1, r4, r0, r0]}, 0x7)

01:16:00 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r2 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = getpgid(r2)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = getpid()
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000180)=r6)
r7 = gettid()
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = getpid()
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000180)=r9)
clone3(&(0x7f0000000440)={0x20001000, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280), {0x36}, &(0x7f00000002c0)=""/175, 0xaf, &(0x7f0000000540)=""/197, &(0x7f0000000380)=[r3, r2, r2, r4, r6, r7, r2, r9], 0x8, {r1}}, 0x58)
io_uring_setup(0x69e2, &(0x7f00000001c0)={0x0, 0xbb16, 0x0, 0x1, 0x26e})

01:16:11 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x88000)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
syz_io_uring_setup(0x3aa, &(0x7f0000000000)={0x0, 0x2922, 0x2, 0x1, 0x174, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:16:11 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = dup3(r1, r0, 0x80000)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000040)={0x1, 0x2, 0x2})
r3 = syz_io_uring_setup(0x39df, &(0x7f0000000080)={0x0, 0x5344}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4)

01:16:21 executing program 1:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/230, 0xe6}], 0x7)

01:16:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x28ad, &(0x7f0000000000)={0x0, 0xb778, 0x20, 0x0, 0x1c2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:16:30 executing program 1:
r0 = syz_io_uring_setup(0x800001, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1800000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0xd19, &(0x7f00000001c0)={0x0, 0x4924, 0x4, 0x0, 0xe3, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x500, 0x0)
write$binfmt_misc(r3, &(0x7f00000002c0)={'syz1', "2fa1fe152b87c663f0034b4d267fe3f13188819fcc4af0ec8b8cbe0d74a4d16227fcee880b29a50d3efe044f9af8245514b94125c2030fb125f38e925b3425740986bd14b07a0e526b740ebf5adfb755e6939c9cad4877ed6e6512e25086d95df8aaf9b5c6c87393a8233bacdf61778215db49faf953030a198c86996228198eb83de4d102e02508a76b1edf1582ed0bc963fe62ca2d823912a055acddeaaf16262900bedde26f679c252b513c3f186e6d60755627cccf7bca06248aecd52dd1eeb8b2a55e0a01f40e3909b9"}, 0xd0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)

01:16:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000240)=""/53, 0x35}], 0x4)

01:16:39 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000002c0)={0x4000, 0x2, {<r6=>r2}, {0xee00}, 0x7, 0x1})
clone3(&(0x7f0000000340)={0x8101000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x26}, &(0x7f0000000200)=""/51, 0x33, &(0x7f0000000240)=""/76, &(0x7f0000000300)=[r3, r5, r6], 0x3}, 0x58)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r7, 0x0, 0x4, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000440)={@mcast2, 0x20, 0x0, 0xff, 0x3, 0x9}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)

01:16:45 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000140)=<r0=>0x0)
syz_io_uring_setup(0x3a0e, &(0x7f0000000000)={0x0, 0x198d, 0x1, 0x3, 0x161}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000001c0))
syz_io_uring_submit(r1, r0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9}, 0x1)
clone3(&(0x7f00000003c0)={0x808200, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:16:48 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r4 = accept$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10)
syz_io_uring_submit(r1, r2, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000340)=""/83, 0x53}], 0x5, &(0x7f00000006c0)=""/166, 0xa6}, 0x0, 0x40010020, 0x1}, 0x8)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:16:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000003980)=[{&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="c03fc34341a5dc514917b3599fcdcb3267f11259bb2d8707ebc18ad4efdb4a722724a58396ae113b617ac42e0276894e2e4b2c0c286cf0ac3f836453eddca5297150b3596e1c65f72535bdf61f2ab56208d63111655953bf20f52b90beb283749c283475361c0a45279f7595f5403af4f206e3c6e69889acc289714766f2c62713e8c0f780df893bcfdc7023e9847ab30deb8a37c96c0b4e4f211319b78e4602dc79806ca8877194016f130ae64220cd121ba544978dca25d2351b1a5fd02e9a7d7d6e262623e49a1c95e13efeaabd84bd0942d31b5fedea6638cc6a1ded31038050485622ea8a562504884162e83929e3cf56b4e4554a94b962d756c193efd079b362ffe31622610c016e0926c6928f3f6749fd3c5a973558d3f285e7f0048cc1af10182083f27879c9bafbd458b8e840e94b29dde4faf06c69376be692e3d32fef6e8763ae8f4203291bbbd3ad9eca2d26c160c34b34ade31f2f8b95a4cd3d885f3677203e5b110578e2233b24c84156df76ffeb7b63c03e42680287c5bf56c1de098d5fd21a91bb68c3bb8e618e57bd70e9e0d4456859c630eba9eeab5b95a2bea27515370710578066d1978921b20a1d853c92d70b7bfe829bc6cc819d01aab3099fae24c70b052184dbe47c47c40d810ca3de5f339e7da617b5fecf4c72b58d081911dcc225c09a46e30f4132093c8656fcf6d361c4aa97a744553722de414c0f50268979b766e838a3a1e958780274ce93d409c8349e07b5bab6f8df6ad38e8facac9305c7a60453bb6356b5052ef0be6e1f4a582d47b2be172b0ff58ecd3da590a2ddeb677811577c729121c51a9b2cfe65739f2aae141881b17ec05f0af06a0206a09c7dc49679ce5960d7352e9ab8f1a4a74646d3904cd2ff8697ef65fb630caefdb7c53a03716b781014eea1eeeb31f9507e5a151fbbb097348affa870c957fd393c8d8f84270ad4a30e636bd4d008ce69f72706831124841afdbedb3f93bb589c1c321a7418910706758f078d79ef3837d189947669eaceaaa45badcd798c83689b027aeeca013979835a5d40c4d2851d2a1246d3b3fe7256430f82bdf3fe8468686234bda18e87760434f9e790a7ddf1af4ced81039774d083d6f6709af5b7b9a4e5ca7f46b364747c9d741661ab0c9a7e6c00736f71a8945936557746e059a9a17d31cff321006539d95d23f189e6ec72a4c94f68181061619b797d9a101587d5ab2b1c1e3f47430d00c654eda65c9ed6f551b61c60be5dec99e43fb3d9759720c0108e8b202ab76ed8d9b02441f1a9ed232e716e58fe5ce344dd10764ee08993828331db8e5e35feb82569d08da331e61fadbe0fbcafa1e096c2a24bf046297bfd9fe9a74c494c5b549e513f7e37bc5c5b7583779f57c65d376e101bd9c253c98cf15831f74c5c0261cc97ad4dd1ebc161326598b8ad940e251800b5da0a8d2d8293ada54b8794084e2c07f986d68fe367e5d0846d0f2477afe702873fcca4fdb46d715de714bb95905802147955ea57228ce2354483b1e6322a7d2f7387cec03e0647577eb2db9d96bdac743db4bb6e4b15d914495822437b266d73181360a3d98d02f30a0269d9630f48106f1addbc73b3e1d6d53727aee18e56019a3a62667cfaa4717fb774621b89a2aed223cdc46772cfa5b63020463c157f41c71fdc10653486eee1e91f21fedf0a0edbc17fb341979cb28c0c1f9409a98f6cd72e3fafabb5268c681d86d60f317b93f0988d704e8decbba6d2e13cc04f015dee7bee81975fe6eeefaf6cb5fe265942152940addeacac09c92bd75caad196eeab860e7950e65a706c5cbbf77af9e908844302b43406a4d229658552e48dc0c35222f3c2fedbfd628b7485b47e3c61f2bf769d2e922bd65c2b92b817435ed18f97e1f0edd11056e36fbe060b4373ee50b590b2e10611b945cad5f6ea2054b1abf8a51d1ea209b6689bbf5d563c63b615510ac3ac915a909967da863fcfd4aa3dc828bec386f2f9953b49b4c423f8f0010d34b8ce66f069161a1311abb893d083077cc54bf63766f0a51b6afaa45f070928b39181dab49c9fff424aba9a7b7a1b2362972adf5db6dcfacf1a1f5b5d9736c87504350062d1874bc50920bb4fe4540987b84d80dc180ce65e41b9167174424f976912af09cd3eec4b93b0920e9ca7229ebcc3310f883b67ff2a8f8214a22491dc6d2d270ef516200d3d52ba1c45d94fadbeff541dadf11c76c1d9f035cd3efb0e7e4e3781529cb952d1bd228f583ab412402a20ea5dcea988941ae3da0c1f6183a2522037a90f9004cd2c244329c85a42be3474b4b704cd5ede4417284d378188898503738d2478bf360d3e3feaf5e1f607781903b878ae23701797d1e92392b380e04f68273e19ec2fe7efa0276388dcf4f7d4ad47e8c9f5b1a86864070d38c3ea1160d04bb049c85fe52011d31f1c88576a0fdca7a6a1681caecae38ce935011e0adec1348b13227dfbadb15e31712bdc812fa5d3503ebf2825a95efdb778d64c1fc04f82cf3d06a47dcf95b33b622ba8ce4736f7ae270b6d918f9d1d7869a152fd5acdc214478693333812807952d18c18e24d9b5e33a7e44d8335b03672dc1e0d8c40d854c4fdb38229f293bbbaea8f16ad1e6f424b2507d0e47cd26d64f5bf1fd6cdf426fa80e43feb7ac9b7a66ffdf3387aa7156b4bfc48260d4cad0c5df7f23b1986e06a52b1c2d2d7eb9f59744a876001d51998fd73b54aa032a96c7f249aa3f05fe30a673ab4766961810483a052f1a64b97fd20f7735bddf1ddf33abdfb098ef211bdbfe0d1fc191000b356e28d1a1638e66fa61f9b48d7272529e034e8c5a0760f8128a8ec8374205511f4c5a4fdd7566fd4c8e7a1f39db26c6629f9427198bbee64506ae0b879e105333d214357264028eba80148ddd69edbeff3ad8383e4d5f7f172c6080d09b940da00cc315b10a9bce461a6ef91cf4948ef56078c7ab4d5e6233dc79f9c688ab9bd2a2a9eeaa54dbfb206b7c9f49e35e25323fc3f1f7b5c5c8edfd69ade8023f40b20b9f02f5e085c25241067538d9e5b94139c24022d90c822a99db6646be79b5bcb5c4c0fe90ba3562b2ca2f89f16e6aed8c38208b39d8f6b6abb9645a2dae6bbada9458500be096b9f811e8e8288c205a7d5c1899ab5dc9bca4c1bb684a64c1fb16f31afc093c0709c03f7f9495091883cdbe500a83ab1a6a6b45ddb32cd091b31584eeb7d182532f23f3fbe6c98b30892d4150d25166f5b04b0d6411b003b485a20cef0b88184e415f8d345c0871ac81e4f8114a2d689f04a8d215ab1f6bb64465ebc5f2b8a77600d2090eb9af3ef42f80babf2909cbdde625d53a0f001ba74cbd736324e0514a64c6270fd9a20038f0a4aeaee6c758bc55683865ea7d9970efbf24375172a8368fb716638fcf88d965d1e13bef17350e3b9584979d307f02c202c7f729d8bc46f07f721ec15a2597879d8e88ce83dcfa009ad56948b5ad1d03dee70a078f6e9b4733a9f12170f3fdc7bcc80127927b88a50de6d98583a2e31029b0e3b31af2127971273290232b3a916a3aa4b36a0fd13225ed6cfe5e9aa05d3c43ce6d6c1d3af195cfefd0ddc3a8840cbfc3e4b61228c6da6b5a81fee9d37a9e4c5bb59bc139053770bb432f8f4760556295ce3ca3e44c4e6f5ec55c03a70aaac69984c8946300fe6d6f981d6209b982f245cd63a0c9f08faa4050cef05e3079d088249ff7186c50351f1535c67e46d0e49cfed3d6964112d1beadf9f5440b14da2112e956033c79e615cfd83c98abb7f75274a0e1bf52e047e6ff13cd38d638f7a2468ae58b289a8e919c31cf64733ada7334784af0136a6938a76cf5f84a318c38edaa7efd657d3a1f4c96eadf5cd7c0eecfcd584c88a0d1920360c1b5f956cfbdf1ad54cdd9ab831fa36b3cf42cd279d3cccf9d2cbc54d77df109e8d7e0562b39456d9f7283fc45775e6cb9783c956cdf084652d3d6ab0a1a0d8f498e7328550fcfc54cdc10e8b353831e1f3450c6a6e5f713557dedc6f2e8f5a7f17a5e53706eaf0a33bda48bce03f3de749774c90ac12d3fe2fede46dc109c68af252f4e61aa275fb6cffdf47b8119dc0f797b71cab2d99b95b75369b456cf28fa4c2053cfe015172217e5de472db71f968728f326144e8b886abc1e9f81253b8e70fe978dfa1b2c16e2916bfef1963e07fcc990e820ac0268cba0fdc49da1a7d90c21e6adff5385b2afc64a7a32daa795f69cf8d063003666d4659dd3149ce617ca9e711f22516803d8039f0451519c3a2797ea92aed526bb80535e332040127dfef6e4d993ac89069d9c2e7398c816a160756eeef9bd1267a01d69659e2cfb79cd57239f645e66d19a0770ac3b8b017d013b3b298ca23b5de1ea07b248d736012f6e01ba69f0f935deef04f9831c10d282e4990823c8aedb65d391e8cc528e8ed1c3c897782d4a6ad4949e26bcfe50013331df02566039788d9a594f0d7ff3af7a07c7cd804e9ac49aeec41507865e605a9192f99e1cc8fb6e66552d1c89cac6a131ef9cbaece2fe8969297e27ae87354803f0dd5b5dbbf617723bac4fc0868c3866aa191cc0a31ac52be60cd9d368261fed0673acd32a1bf3c297f9183cdfeba10b7719f35c5649a34e5bb3a2fcd97ec38295d383c3432766c84b8603652ec510609f8cd939bab1d41ae1ffdf520f86e139d1580e1bf77929f805671b05ce0eeb91f197cca43c1fcd1d5788a23517dad6a528025f31a6b36a4ae912af9c4cb77667faf91b29f709279d6d1765b4142a2e01e7d577399e15e223b682ea8cf4f8c2d91fc24d9168216f62190937291c06bb6720979fce801e417f9ea8343c37de746b96eed21bbd1599765dbcd22b8f380040beadc493a418b261d1bd1abf77c8cebe11f198984076afea345910fafe524b7a4cb0b9eacfd1ccd0353a1a905dbc5486759af4ab148be40bfdbcb61bc00ff7aa315cf2a8665a7e3ed03cdbf2cdb44663acf698b3f54201d219c5b037c36714a4319b688ee4b0f5b1edecd8ee7b5a6d5b008feebfea35b8d2b74d2c317d1b9ea148b028eb927652d1ef8f91773b1bb8d7e7d0bb93cea74f64723841c2abb4abd4726498030b10856af07c15884ce27957b44a63c7458eb7095f3a643bc6745f50faa9ce41e5776c85d08d678822132112db8b81f0302bb210a75f5af12e657e21c8098f6ff9084ed8c7a73632a2e96deef694e5f6902a25c21bda3335b94919bf8513911d799effa1289694082cbe9601fb189ebdd982f7b76b64c93b91fabd57c635ca4763b64a41c2f0abaf89c0260401c4ee045594665af6f2387a9190ee3398cbfb3e2392264d5afb3ca9cb3a17bf77b1ab9d7cf1494243e7b32a631845d95d3b0361bf63a856ff364f8afe74990440ec784b7d6e2a1f30058b6013b35e6e286bddaaa5f1a7f47ef70db2cda57238ca5580dc06579238deb95309ad4af8cf4b84a3e5bfc269d76d9a6511ae5cb022fe75c0fe4cbe6ed11ea368fef700650f2b380da6eebc47028f62af8300d6d4eeedd3d378f3b9924e75afdf770f034cf27ae99779796a23b777b26519001a076fc994bdbb7fb625965179dc4e1d798e85e155c69cba0a651ed4cb668ffd2fa104a8a04d8816913c5cc88e4aa8225ac08dd762422cd3bba6be4a55f1ce2454d3cd1a03d72268d318635afa29b7a63527469b91836e12971405033b2e605915fc75226ae7a843cd1873fa2d26bbe1cb7ad66d4c555fa62f632aff6e973af321c667daf5d353e86f4ddcb000213ddd49eed5c50ac7481d3a4e6f594a95e", 0x1000}, {&(0x7f0000003780)="9d3f92d06e22699fd95b12512cdb2c55fb395bd0de72674867275babc10bdf3be95b5e448a927c194839d2dc23878c2f0e1be56f4a5bf42604cbde781d449645b758f19f7f7dca78efe5faba42cae9f882daf16cf65ff568b71de17270a82c7eb34d3368d6610b8ce95ffb97500cdbbfe89d46197c8dc052126027702293086c132d0452", 0x84}, {&(0x7f0000003840)="103c44939073d044c80abae76e2230f73170cea20067cbb437d9c095952825885dc5e0d95572023a2869bd6a973c03ab7abd01a913ccc9114242deb8198238848593fdf4660e7a962d57188b3785147336e311a8e25437a87dd65eefbfa2ed29de6ce8fb89a2925a0798cad953d370a32a110dd5bafbb0df34de0aaa30f2cec8395455181c53779faabd29ff45b2a844cd74890eddeedf7da84d765314a7ad87fc6da6a38d52f3903cd1bd0b955f80cd01883b9eca8c0b", 0xb7}, {&(0x7f0000003900)="1de36926213d96190424947a597a7d283d16cc4ade9749bfdf56d5e61d220c842732fe2c5cd919f6a3b2110c4557b8736b9771c3d287a903c2064db236d8ddeecff956fe4773ad63fc96b6609299595fc7aedec0bc852839326f8cc0813d92b6e7f81ffe5dca1c19cacb9a715800845e88590c2c", 0x74}], 0x5, 0x9)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001700)=[{&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000001540)=""/182, 0xb6}, {&(0x7f0000001600)=""/202, 0xca}], 0x7)

01:16:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x801, 0x0)
write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x82, 0x4, 0x5}}, 0x14)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:17:01 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000280)=""/210, 0xd2}], 0x4)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:17:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x176a, &(0x7f0000000280)={0x0, 0x3df8, 0x20, 0x0, 0x172, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000380)=0x2, 0x0, 0x4)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0)
syz_io_uring_setup(0x3046, &(0x7f00000001c0)={0x0, 0xd597, 0x0, 0x3, 0xb6, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:17:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x80, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x400000, 0x0)
ppoll(&(0x7f0000000540)=[{r3, 0x2}, {r4, 0x3400}, {r0, 0x8002}, {r2}, {r5, 0x4410}, {r6, 0x1450}, {0xffffffffffffffff, 0x8018}, {r7, 0x1080}], 0x8, &(0x7f0000000580), &(0x7f00000005c0)={[0x3]}, 0x8)
pipe2(&(0x7f0000000400)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
splice(r9, 0x0, r8, 0x0, 0x4, 0x0)
pipe2(&(0x7f0000000400)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
splice(r11, 0x0, r10, 0x0, 0x4, 0x0)
pipe2(&(0x7f0000000400)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0)
splice(r13, 0x0, r12, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:17:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe, 0x40010, r0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[r0, r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x6)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:17:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002840)=[{&(0x7f00000025c0)=""/128, 0x80}, {&(0x7f0000002640)=""/22, 0x16}, {&(0x7f0000002680)=""/177, 0xb1}, {&(0x7f0000002740)=""/131, 0x83}, {&(0x7f0000002800)=""/27, 0x1b}], 0x5)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f0000002440)=""/224, 0xe0}], 0x7)

01:17:29 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_enter(r2, 0x5615, 0x43d4, 0x2, &(0x7f0000000000)={[0x1f]}, 0x8)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000000600)=""/17, 0x11}], 0x2)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x68083, 0x0)
write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040)={'vlan1', 0x32, 0x37}, 0x8)
ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f00000006c0)=0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540), 0x0)

01:17:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101002, 0x0)
syz_io_uring_setup(0x54ab, &(0x7f00000001c0)={0x0, 0x7a8f, 0x1, 0x2, 0x25, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280), 0x10)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[r0, r1, r2], 0x3)

01:17:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x6328, &(0x7f0000000000)={0x0, 0x5f40, 0x20, 0x3, 0x17a, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

01:17:42 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x44180, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000340))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000040)=""/20, 0x14}], 0x3)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:17:47 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
r2 = syz_io_uring_setup(0x6594, &(0x7f0000000000)={0x0, 0x23b7, 0x4, 0x1, 0x13b, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000440)=""/67, 0x43}], 0x2)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x5}, 0xecb)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r2, r6, r2, r7], 0x4)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r8, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f00000004c0)={0x2002})
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:17:53 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x121000, 0x0)
syz_io_uring_setup(0x59ec, &(0x7f00000001c0)={0x0, 0x5180, 0x20, 0x0, 0x2d1, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240))
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
io_uring_enter(r2, 0x4e6a, 0x25e0, 0x0, &(0x7f0000000280)={[0x8001]}, 0x8)

01:17:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[r3, r0, r0, r4, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f00000001c0)={{<r8=>0x0, 0x0, 0x1, 0x56, 0xffffffffffff0000, 0x200, 0x50c, 0x7fff, 0x2, 0x45d, 0x7, 0x8, 0x1, 0xfffffffffffffeff, 0x8000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000540)={r8, 0x9})
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:18:02 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xe648, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:18:10 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x200000, 0x0)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000240)=0x5)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/69, 0x45}], 0x1)
lseek(r1, 0x1000, 0x2)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:18:15 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1)
syz_io_uring_setup(0xa52, &(0x7f0000000000)={0x0, 0xcee2, 0x2, 0x1, 0xc2, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:18:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x80000001}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x2, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x13, r2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800000, 0x4010, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x1}, 0x25)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:18:32 executing program 0:
r0 = syz_io_uring_setup(0x509e, &(0x7f0000000080)={0x0, 0xc698, 0x10, 0x1, 0x24c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_enter(r0, 0x4cd4, 0x6802, 0x3, &(0x7f0000000000)={[0x7a85]}, 0x8)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:18:40 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_io_uring_setup(0x3aa6, &(0x7f0000000000)={0x0, 0x9093, 0x8, 0x2, 0xb1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:18:44 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:18:52 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r3=>0x0}, &(0x7f0000000040)=0xc)
kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r0, &(0x7f00000001c0)={r1, r0, 0x81})

01:18:54 executing program 0:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "726652c1445f03760f30696e0d9dd4b945"}, 0x15)
r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xffdffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000003640)=[{{&(0x7f00000001c0)=@ax25={{0x3, @netrom}, [@remote, @null, @netrom, @rose, @null, @remote, @default, @null]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000040)=""/23, 0x17}], 0x7, &(0x7f0000000800)=""/74, 0x4a}, 0xb17}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, &(0x7f0000001a00)=""/60, 0x3c}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a40)=""/243, 0xf3}, {&(0x7f0000001b40)=""/148, 0x94}, {&(0x7f0000001c00)=""/130, 0x82}, {&(0x7f0000001cc0)=""/222, 0xde}, {&(0x7f0000001dc0)=""/101, 0x65}, {&(0x7f0000001e40)=""/215, 0xd7}, {&(0x7f0000001f40)=""/95, 0x5f}], 0x7, &(0x7f0000002040)=""/141, 0x8d}, 0x10000}, {{&(0x7f0000002100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002180)=""/242, 0xf2}, {&(0x7f0000002280)=""/93, 0x5d}, {&(0x7f0000002300)=""/79, 0x4f}], 0x3, &(0x7f00000023c0)=""/41, 0x29}, 0x1}, {{&(0x7f0000002400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002480)=""/12, 0xc}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/59, 0x3b}, {&(0x7f0000003500)=""/200, 0xc8}], 0x4}, 0x81}], 0x5, 0x40000160, &(0x7f0000003780)={0x77359400})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:19:01 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)}], 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
syz_io_uring_setup(0x2fcb, &(0x7f0000000180)={0x0, 0x250e, 0x4, 0x0, 0x1ab, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240))
clone3(&(0x7f00000003c0)={0x4000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:19:06 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x1e, 0x1, 0x200, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20)

01:19:12 executing program 1:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040))
r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0))

01:19:16 executing program 0:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000))
r2 = syz_io_uring_setup(0x6d43, &(0x7f00000001c0)={0x0, 0xadb8, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:19:24 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[r1, r0, r0]}, 0x3)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:19:28 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x1575, &(0x7f0000000000)={0x0, 0x33d3, 0x4, 0x2, 0x1b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))

01:19:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x1972, &(0x7f0000000000)={0x0, 0x25d1, 0x2, 0x1, 0x19f, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0x0, 0x40000000, 0x1, {0x2, r6}}, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0xa, 0x3, &(0x7f0000000440)="345376256f4e8f8068e22a447c7628097d4ec3d1afedb06eca0aa4c0d23d6988bf1e0e89d5673781dfdfd16db625007970d4d6aebb01e1d02bc7a132c393ad247169e67c2b697e336c874395b1b8b99401d6a867e9dac1c7e4efa2a6c03ae441dfb1498b2764ff60c21b28d0b693bcc3b59bf0cfb4226dc1f432cfc74cb865cc56", 0x81, 0x10, 0x1, {0x0, r7}}, 0x2)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:19:39 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:19:48 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001900)=[{&(0x7f0000001640)=""/255, 0xff}, {&(0x7f0000001740)=""/131, 0x83}, {&(0x7f0000001800)=""/234, 0xea}], 0x3)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000001540)=""/220, 0xdc}], 0x3)
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r6, 0x0, r5, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001940)=""/85, 0x55}, {&(0x7f00000019c0)=""/219, 0xdb}, {&(0x7f0000001ac0)=""/59, 0x3b}, {&(0x7f0000001b00)=""/57, 0x39}], 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)=""/202, 0xca}], 0x4)

01:19:50 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000280)=""/94, 0x5e}], 0x2)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x6f18, &(0x7f0000000000)={0x0, 0xfb07, 0x8, 0x3, 0x26e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200))

01:19:58 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:20:00 executing program 0:
r0 = syz_io_uring_setup(0x20001, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x21c, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:20:08 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)

01:20:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0xa6c, &(0x7f0000000000)={0x0, 0xe131, 0x10, 0x3, 0x195}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x3e72, &(0x7f0000000240)={0x0, 0x1437, 0x0, 0x2, 0x7b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300))

01:20:21 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = syz_io_uring_setup(0x6e8, &(0x7f0000000000)={0x0, 0x4d0d, 0x8, 0x1, 0x370, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, r1, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1ff, &(0x7f0000000240)=[r0, r3, r1, r1, r0, r4, r0], 0x7, 0x0, 0x1, {0x0, r5}}, 0x6d9)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:20:23 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300))
r2 = getpid()
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, <r4=>0x0})
clone3(&(0x7f0000000440)={0x218200200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x35}, &(0x7f0000000200)=""/42, 0x2a, &(0x7f0000003800)=""/172, &(0x7f0000000380)=[r4, r2, r3, r1, r1, r1], 0x6}, 0x58)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x40000, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000003780)=[{&(0x7f0000002580)=""/153, 0x99}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/56, 0x38}, {&(0x7f0000003680)=""/236, 0xec}], 0x4)
pipe2(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x4, 0x0)
ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f00000037c0)=0xff)

01:20:33 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000002c0))
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400000, 0x108, 0x9}, 0x18)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r3, 0x1)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x18000, 0x0)
fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:20:36 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000640)=""/147, 0x93}], 0x2)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = getpid()
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440))
fcntl$getownex(r0, 0x10, &(0x7f0000000480))
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = getpid()
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000180)=r4)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = getpid()
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000180)=r6)
clone3(&(0x7f0000000540)={0xa400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x1c}, &(0x7f0000000200)=""/169, 0xa9, &(0x7f00000005c0)=""/113, &(0x7f00000004c0)}, 0x58)

01:20:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000040))

01:20:49 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)

01:20:53 executing program 0:
r0 = syz_io_uring_setup(0x928, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500), 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:20:56 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_io_uring_setup(0x75da, &(0x7f0000000200)={0x0, 0x6b7b, 0x10, 0x2, 0x1f7, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1, 0x20000)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80400)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r2, @rand_addr=0x64010102, @rand_addr=0x64010102}, 0xc)

[ 4860.884717][T28720] mmap: syz-executor.1 (28720) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
01:21:06 executing program 0:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1)
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x67e9, &(0x7f00000002c0)={0x0, 0xc8e1, 0x20, 0x20, 0x6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_setup(0xf48, &(0x7f00000001c0)={0x0, 0x69b4, 0x4, 0x0, 0x219}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=<r3=>0x0)
syz_io_uring_setup(0x45b2, &(0x7f0000000440)={0x0, 0x75ce, 0x8, 0x3, 0x1f1, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000004c0)=<r4=>0x0, &(0x7f0000000540))
syz_io_uring_submit(r4, r2, &(0x7f0000000580)=@IORING_OP_NOP={0x0, 0x2}, 0x80)
syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x3}, 0x1ff)
r5 = syz_open_dev$vcsa(&(0x7f00000005c0)='/dev/vcsa#\x00', 0x6a3, 0x800)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={<r6=>0x0, @dev, @private}, &(0x7f0000000680)=0xc)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:21:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r1, 0x8000000)
syz_io_uring_setup(0x24bc, &(0x7f0000000000)={0x0, 0x22c5, 0x4, 0x1, 0x344, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x1, 0x1}, 0x7)

01:21:17 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xe5af, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:21:20 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x460b, &(0x7f0000000000)={0x0, 0x2e57, 0x0, 0x1, 0xd2, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:21:27 executing program 0:
vmsplice(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000001c0)="a24c82f56a8f6869efd059d0b0268446aef239a36c81e640d240919c62bcdcf50d70a61422947f6da855936d5e15b4dfc8e013c1c96b263e43e72bc4f1639de6e50d5b44e3ae84a7a9e80d6767b884ce86cc49b9669e60332ec844c673fe310f2c4c87e079de5217267c98451af35a6cb3180afed80a253e8358fe619acd4a3d13f6c22c94cffe9e54e0d337e27bd8de09ff05ae57241b7b43194636", 0x9c}, {&(0x7f0000000000)="44de20b7f60e7f854c2c8cd085a555b8f14f6734cb3029b378a89f5812e563eca9c8eeb843721c07e1e2a2", 0x2b}, {&(0x7f0000000280)="7d28458fb49e7f8597b98471f8aa0b144b89ba391ba601ad0a51ba8a714716059a8789e617ee63e45725d0a2a087c0f1994b01c88d818cc272be41927085edc58d23d9b0c96b5258b0370ebe8a0ff01986464e92e50d6fdc890709611915bf8bd89162dd986b0b1541a2a7b124d575e5284a6bb4f2af12ef5e9c38efb5e46d0d7b407550f5c116c2842696c31e0b3b4798ab8654dd93e8b8893f1797066e7cd5b001dd217a5f5a5463bfc4b82671fbddf8ed1ca049c3a047fb4a1f554d97213743207e6fbd19f1684c37079c9dcff114341b05f46b0e99db958ace921a6b4b", 0xdf}, {&(0x7f0000000040)="264bf6ec640f72c4193d58335fe8a06aca67049dc1f77f412d350e5a1996cdf2843e352405", 0x25}, {&(0x7f0000000440)="7dfa1cdb1c0abb5bafb3d5e286436fc5362e734ac71b44ecaa2321c7880ef90daf057621ea69454d24092954f580d175f992a7329bdffeccdc34a7d498c46c9c1705cc31e9521d0389863c88f129ae9c13ea170c7bea660f541dc73eaa427a137ed239a6906f314b12af37caca7e05ca31f2c9e91149fab5fb4c4f388d794c95778b", 0x82}, {&(0x7f0000000540)="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", 0xff}], 0x6, 0x7)
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:21:30 executing program 1:
r0 = syz_io_uring_setup(0x125e, &(0x7f0000000000)={0x0, 0xfffffffa, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:21:39 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0xffffffff, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:21:41 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x312}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:21:52 executing program 0:
r0 = syz_io_uring_setup(0x6560, &(0x7f0000000440), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000080)=""/46, 0x2e}], 0x2, 0x800, 0x1, 0x0)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000980)='/dev/vcsa\x00', 0xc0180, 0x0)
recvmsg$can_raw(r3, &(0x7f0000001100)={&(0x7f00000009c0)=@un=@abs, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000a40)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/147, 0x93}, {&(0x7f0000000b80)=""/206, 0xce}, {&(0x7f0000000c80)=""/234, 0xea}, {&(0x7f0000000d80)=""/242, 0xf2}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/216, 0xd8}], 0x7, &(0x7f0000001040)=""/148, 0x94}, 0x40010041)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/249, 0xf9}], 0x2)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)=""/31, 0x1f}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000840)=""/201, 0xc9}], 0x3)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:21:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x7, 0x190, {<r2=>r1}, {0xee01}, 0x80000000, 0x8000})
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4c, 0x7)
clone3(&(0x7f0000000440)={0x800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x2e}, &(0x7f0000000200)=""/82, 0x52, &(0x7f0000000280)=""/102, &(0x7f0000000340)=[r2], 0x1, {r4}}, 0x58)

01:22:03 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x4531, &(0x7f0000000000)={0x0, 0x52f7, 0x2, 0x3, 0x9c, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:22:04 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x9a7, &(0x7f0000000000)={0x0, 0x28ab, 0x1, 0x1, 0x4b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))

01:22:15 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x8b, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x1220, 0x13, 0x0, 0x70bd26, 0x25dfdbfb, {0x2c, 0x1, 0x9, 0x3, {0x4e21, 0x4e21, [0xfffffff8, 0x400, 0x194ac1, 0x3], [0x0, 0x7f, 0x1, 0x8], 0x0, [0x2, 0x2]}, 0x400, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "0860179a9ec3dfe417b44c4dda717eabde6305d8affa967dde55bd91f9db0fb4d6fc43"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "1cd9b34c1b53f056416d45838faab086f712ffd827ae6548eafd82efe32d64186658a2659cef1f13060ab90fe64b4dd3aa2e2cec255878042f537fcbf60cf485b9d2897f8f2d6be063453b3854ce42febd4ea5bc665c5f85d480d6777bd94cd88f398fc62ef1ab588972624b48ceb4b5856f544d00"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "352bee0ae701735cc8e31b4dbed69a022eb045c6b544cea0a2944ab368cac99b23dfc3bb5c305d7c3f14f8bfacce3b2c676d1a9235f8ebedcaa7dda57d1740a0ed0f6cd78d9a68b58429b8"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "30ed03f37321a64070d02a0aea539f26085836f5d921ad4c58994393e5c707f6c562c36650fc661cdb1d868b83b6184a25e10c05b48ca4670ce120d4d0ed814f0a16d188969d1a06182972bfce388916598614d2819638e6105f22d8247af05778dddc953062a203c4c809f3ce2c8148f093f076852dc16f4cf094d3f43b64e0510fea910a5426c3ad8e6a1cf4c25b0695eacabfce5f6f7355a56b62118a418b5ce1b7c62b2791ab7665b0d06009a205ca1bb258f494215f7aebdea05a29a68361d93472c00c748cb487822fab1c19c9f046bba179"}]}, 0x1220}, 0x1, 0x0, 0x0, 0x4008001}, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:22:15 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/218, 0xda}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000000)=""/92, 0x5c}], 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:22:32 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:22:32 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:22:44 executing program 1:
r0 = syz_io_uring_setup(0x40001, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:22:45 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:22:55 executing program 1:
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5d5c, 0xa7, "446183bf3ac44147fc1d3d1cec0dccc30f7887d6336882f0bf18b4365cf490e17d3d13816fa66cf8a7db7cde6d72453317279c7e00c791174fa22d65fb85076bbea042169ee4ab893a45ebb04570c1d1cd379721baed5560937925b8c0fa1d1ece8c2e9b9678b7db1a19885117ee5c86208147b8f3f00df3d9f49d8f565fee45498b03b92067e675e7546d97334478f01eb76707686017e68226a3dac9ed70dfde490e67ac0af6"}, 0xaf)
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000300)={<r2=>0x0, 0x8001, 0x400}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}, [0x7f, 0x80000000, 0x66a9a89c, 0x9, 0x5, 0x9, 0x68, 0xfde, 0x2, 0x8000, 0x7fffffff, 0x20, 0xfffffffffffffffc, 0x4, 0x5]}, &(0x7f0000000380)=0x100)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0xd2d, 0x8000})
r3 = syz_io_uring_setup(0x5, &(0x7f0000000000)={0x0, 0x3fffffe, 0x0, 0x0, 0x45, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, 0x8)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:23:01 executing program 0:
r0 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x4c33, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
r1 = syz_io_uring_setup(0x39df, &(0x7f0000000080)={0x0, 0x5344}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fremovexattr(r1, &(0x7f00000001c0)=@random={'os2.', '#\x00'})
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1)

01:23:06 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
syz_io_uring_setup(0x432d, &(0x7f0000000000)={0x0, 0xaec4, 0x1, 0x1, 0x1d3, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:23:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000080)}], 0x4)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$int_out(r1, 0x6, &(0x7f0000000080))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:23:17 executing program 1:
shmctl$IPC_RMID(0x0, 0x0)
r0 = syz_io_uring_setup(0xfffffffd, &(0x7f0000001240)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
process_vm_readv(0xffffffffffffffff, &(0x7f0000000e40)=[{&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000340)}, {&(0x7f0000000bc0)=""/187, 0xbb}, {&(0x7f0000000c80)=""/127, 0x7f}, {&(0x7f0000000d00)=""/120, 0x78}, {&(0x7f0000000d80)=""/145, 0x91}], 0x8, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/110, 0x6e}, {&(0x7f0000000fc0)=""/143, 0x8f}, {&(0x7f0000001080)=""/108, 0x6c}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f0000001100)=""/131, 0x83}], 0x6, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/autofs\x00', 0xa40c2, 0x0)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000016c0)={@map, r2, 0x11, 0x0, r3}, 0x14)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x65c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xb6, 0x80, [@preq={0x82, 0x67, @not_ext={{0x1, 0x1}, 0x6, 0x7, 0x8000, @device_a, 0x1ff, "", 0x8, 0x7, 0x7, [{{}, @device_a, 0x4}, {{0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x7a2e}, {{0x0, 0x0, 0x1}, @broadcast, 0x11}, {{0x1}, @device_a, 0x9}, {{0x1}, @device_a, 0x101}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}]}}, @preq={0x82, 0x30, @not_ext={{0x1, 0x0, 0x1}, 0x7, 0x9, 0xfffffffb, @device_a, 0x3, "", 0x9a1, 0x1, 0x2, [{{}, @device_a, 0x1}, {{}, @broadcast, 0x659}]}}, @supported_rates={0x1, 0x2, [{0x1b}, {0x12, 0x1}]}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x3, 0x7, 0x6, 0x2c7}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x12, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xac, 0x39}}, @challenge={0x10, 0x1, 0x80}, @channel_switch={0x25, 0x3, {0x0, 0xb4, 0x81}}]}, @NL80211_ATTR_PROBE_RESP={0x495, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0xe4, 0x80, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0xab, {0x0, 0xf9, 0x6, "c4bcdde54ea4e1bcf3011b02e03cd5f04de5b364183b849473168e4cc2c436eb69f1331b4e3fe6cd3879bc6b8bf8919266b58888d3f1d51a1440119ebf9b790d2aa548b9db4992c3e142fa124074df1c4f58785ecca72aff98395a6fb6754ca4c34f2be4c419548cc350fcc725e422ad7a56271aa6f21a71bfe71af1a14188694da41abcf7f37aed8da9344b24b029c649f98187dae5e06ca7189703bbdc16bef4770c0af4e1b16b"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x65c}, 0x1, 0x0, 0x0, 0x881}, 0x4014)
sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="a7e7b10f973bca0144e8f2", 0xb}, {&(0x7f00000012c0)="d55bfdbaa9061e22587d2560b4acbf67bd157fb7ce9a1e98da743bf8f5d365c4e6adeefb3bd99e682af32968c5365092440e8774d3e2214ed7e4db693e2d690193acefd84d0b9f0e7d2a843446f3e55a78f93988e05bf213e587aa060add413b58031b4179632d42cff2845c7f7001d052888dfa829da033bf", 0x79}, {&(0x7f0000001340)="e190d40a47ffa5ddefbfd2b1e27f8533771f93adc0486a2f65249c0fc1d4844d22185a44c2fc55cbb8fdd60aa2bef97b5c1f033ff400ad11d5007f36a46877ad36b3921f42343ea1238789bdd62a6730983e147b9a72d567843769ad622848d4fd1086fd48821b6ced248c510262333cd9c7f8836f83e7011cf55f1944460fecee6995ff57f23ff45f05d39feb13aa08a4d09a561db617f0bbc509", 0x9b}, {&(0x7f00000000c0)="6d72466810d8a341a9f2cd5ce7e15c105fa4ea29efb403cc7b2674f7442a60bb86901d4dbf248319299bb4e581e0", 0x2e}], 0x4, &(0x7f0000001400)=[@iv={0xa0, 0x117, 0x2, 0x86, "e7444b2670d11b471edf835c47d48dbf51b202a3f9d1c23acba989312b6d5635c20655ad90de91762b5326f2a0feb2a78ba8c26cfa4ce19c8e4175475ef040fc4cccfec2ec3387240af7620b45cf2cf8a66d92a0b51148fc2858ebd89379c52e224f267467fbdd4d6a647ae2b4a0cf5de1723695c05286b834730a13514a76a97de0371155b3"}, @iv={0xc0, 0x117, 0x2, 0xa6, "b6636d74bfd8337b2b20729a84e9f473b4e7a58ac0d0dcdd441651f2adf8e6c30b3aa61ecc3158ceacfc1a0179037fa79675290a7e9298f84000c37e6930b589566a3df9370d35c61f7b0f7df482c5413ec78a11ec42df6e64ed1b452a822b6ebedd3cb07042c29b5a4558c29cfcf5dd0c5083b846ab7ac7a82f2b01dbab4c204ce22e39e4ba18ffbda048e01ad7396a765ca8bdfb804d270fc7825ac76ce0d2a51dc4292140"}, @iv={0xc0, 0x117, 0x2, 0xa8, "b343a8cbb730de5547505b65350339cfb649e0cd2f03ea652650b19c1ea9fee078ee9a3a3e26338822e6408cc211531f67cb28956d3b0f0ddf95de9d57076a7b5341b5e15f0a8f3a57ff3e3311d12e33fbc38f42ef26ebf368adae32da4ab4c5dfddef457284e08935e8a0ebde6be03c748aa200a9860335896bf3acd82b20a0406b1cabaacff166ca33217aeb3598c2adaa2bd67983b64cffedd6403225b83b753f64a2f1b9725f"}], 0x220}, 0x20004000)

01:23:21 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x282, 0x0, 0x0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1)
read$FUSE(0xffffffffffffffff, &(0x7f0000001540)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = getpid()
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5)
fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, <r6=>0x0})
syz_io_uring_setup(0x2e8e, &(0x7f00000003c0)={0x0, 0x3b8e, 0x0, 0x0, 0x31d}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f00000004c0))
clone3(&(0x7f0000000440)={0x281000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0), {}, &(0x7f0000000200)=""/202, 0xca, &(0x7f0000000540)=""/4096, &(0x7f0000000380)=[0x0, r1, 0x0, 0x0, r3, 0x0, r5, r5, r6], 0x9}, 0x58)

01:23:28 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x2, 0x37f4, 0x7, 0xde], 0x4, 0x800, 0x0, <r0=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x39}, 0x9}, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0xc}, 0x200}, 0xffffffffffffffff, 0x7}}, 0x48)
r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/41, 0x29}], 0xfeee121470390428)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
io_uring_enter(r2, 0x80000000, 0xdf9b, 0x3, &(0x7f0000000180)={[0x200000000]}, 0x8)
clone3(&(0x7f00000003c0)={0x120900000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:23:33 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_io_uring_setup(0x596f, &(0x7f0000000000)={0x0, 0x3047, 0x4, 0x2, 0x322}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000200))
r2 = syz_io_uring_setup(0x405b, &(0x7f0000000240)={0x0, 0x7d8f, 0x1, 0x2, 0xe9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x9, 0x2, &(0x7f0000000540)="f66ede6ae4f21e58df1cc93cf43fa08f129707baae4a1e89afd016f970a159b3d6e12196a2af5b2e9c7e27a10b8a53cbf28f84f51195fccb162048ff7fe6d7600d36c01e99bbb9f7b9ff6f627c94d14dfdaa9fe629e27fad9a9350546c7bab512e75d613934a96901bad9d06506633058f4eaef6e72221e9094bb1dd56100535ae9471664bd29680706bec72686811488431ad7c5b3044305ab899631cea4c4ef77c95915154c39c399ef20b49b08b5d3a2b90380c8509a99415f789715eed4281264556dce8ef4329201c79b99b59ce450f1a5cc65242fca336d62529d2efe0ec2fd230b394", 0xe6, 0x9}, 0xfffffbff)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffa26f)
r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x10000, 0x0)
r8 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x7, 0x4000)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r9, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000480)=[r0, r6, 0xffffffffffffffff, r7, r2, r8, r9]}, 0x7)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:23:39 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000000)={0x1, 0x3})

01:23:45 executing program 0:
r0 = syz_io_uring_setup(0x5481, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000140))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000600)=r2, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r4 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=<r5=>0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
r7 = getpid()
syz_open_dev$vcsu(&(0x7f0000000640)='/dev/vcsu#\x00', 0x9, 0x202400)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000680)={0x0, {}, 0x0, {}, 0x408, 0x9, 0x17, 0x5, "c253e5d6ce32430fe66cd5e68aeceb33e7f3052c616fce2247b88a1ee09085531e5f700c9dc71712b99846c3f37d32dd18735cac11a4dfdc7b443b2b65f59bee", "98632dde60eea489fce66a60458d4acac11a9ccc92711f923b4eaf0f7173318f", [0x3e, 0x7ff]})
ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000180)=r7)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=<r8=>0x0)
pipe2(&(0x7f0000000400)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/58, 0x3a}], 0x1)
getpid()
splice(r10, 0x0, r9, 0x0, 0x4, 0x0)
clone3(&(0x7f0000000480)={0x10000080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x40}, &(0x7f0000000200)=""/128, 0x80, &(0x7f00000002c0)=""/69, &(0x7f0000000440)=[r4, r5, r7, r8], 0x4, {r9}}, 0x58)

01:23:48 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f0000000140))
io_uring_enter(r0, 0x2e58, 0x92b0, 0x0, &(0x7f0000000000)={[0xcdd]}, 0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/9, 0x9}], 0x3)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:23:54 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000001c0)={0x80000200, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3f}, 0x58)
r1 = eventfd2(0x9, 0x80800)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000))
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x2})

01:24:00 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xfffffffd, 0x4, 0xfffffffd, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:24:01 executing program 0:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0x1, &(0x7f00000001c0)="650f130f42d5a2a48c328231bb25fd9f491525421fa1b3c85c2d8776157debe22006cf9b7bb8b07fa42e2e9de0330ad138867d0a264eaef1a764a824a6c69651dbccb9d91506919222b48dfdb06529bf", &(0x7f0000000040)=@buf="cd5496ba1cecc8288a288d01f14594822ce7ab3c78267301a3a27b691dbce0cbed62500527c834daa8e1a0092d86bfc3677df1c678", 0x2}, 0x20)
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_io_uring_setup(0x39d2, &(0x7f0000000280)={0x0, 0x3562, 0x8, 0x0, 0x2f1}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340))
r1 = dup3(r0, r0, 0x0)
io_uring_enter(r1, 0x5f32, 0xeb2, 0x1, &(0x7f0000000000)={[0x81]}, 0x8)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:24:12 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000180)=""/155, 0x9b}], 0x2)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:24:13 executing program 1:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x610b, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp1\x00', 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000540)=[r5, r2, r2, r6], 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r8 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x3ff, 0x7f, 0x80, 0x2, 0x1ff], 0x6, 0x800, 0x0, <r9=>0xffffffffffffffff})
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r10, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r11, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[r10, r5, r5, r2, r11]}, 0x5)
clone3(&(0x7f0000000440)={0x801000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x20}, &(0x7f0000000200)=""/59, 0x3b, &(0x7f0000000240)=""/131, &(0x7f0000000300)=[r8], 0x1, {r9}}, 0x58)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000600)='trusted.overlay.nlink\x00', &(0x7f0000000640)={'U+', 0xef}, 0x16, 0x1)

01:24:27 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
syz_io_uring_setup(0x5905, &(0x7f0000000940)={0x0, 0x5b91, 0x10, 0x0, 0xc3, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000009c0), &(0x7f0000000a00))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/209, 0xd1}], 0x1)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000a80)={r3, 0x80, 0x100000000, 0x80000000})
flistxattr(r1, &(0x7f0000000a40)=""/16, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/21, 0x15}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000300)=""/137, 0x89}], 0x3)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/24, 0x18}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/243, 0xf3}, {&(0x7f0000000740)=""/99, 0x63}, {&(0x7f00000007c0)=""/31, 0x1f}, {&(0x7f0000000800)=""/13, 0xd}, {&(0x7f0000000840)=""/68, 0x44}], 0x8)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:24:28 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80400, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))
recvmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000540)=""/4096, 0x1000}, 0x1)

01:24:43 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200000, 0x0)
syz_io_uring_setup(0x7ae2, &(0x7f00000001c0)={0x0, 0xebb6, 0x10, 0x1, 0x2e, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:24:44 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = getpid()
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r6=>0x0}, &(0x7f00000002c0)=0xc)
clone3(&(0x7f0000000340)={0x10002000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x23}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000000200)=""/107, &(0x7f0000000300)=[r3, r1, r1, r1, r1, r5, r6], 0x7}, 0x58)

01:24:53 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x5219, &(0x7f00000001c0)={0x0, 0xe0e0, 0x0, 0x3, 0x105, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1)

01:24:55 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:25:02 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
read(r0, &(0x7f00000001c0)=""/186, 0xba)

01:25:06 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
syz_io_uring_setup(0x435d, &(0x7f00000001c0)={0x0, 0x2a47, 0x1, 0x1, 0x28a, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280))
r3 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000040))
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', r1)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x3f0, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3aa, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_a, @device_a, @from_mac=@broadcast, {0x3, 0x17}}, @ver_80211n={0x0, 0x4, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x0, 0x4, 0x4b, @void, [{0xdd, 0xc9, "351a3c5b7f47efbb807326bc50f7ba3888c5eccd70af0244aaaf633641eec8e0689eb117ecfc2725a16514498d39aa9d343e2a386cc0e9f79e7aa5c85e1da9a8a7f9dd762fdc011733d5cf87846d47dba0f373c725d526427c43753c459a9a9bd81578a48e24d8de0ff0fbcb35d323a79d3be147a6e22b4918c8eb92eabbc2d0e12407b95ad794e92fba169b2edba145d6f1e2befb5e2866cf3d3faf69c8d6c597419a1984bfc85dad1d79b8db651afaebf81c387785ca704b5aba61a523976164a219d41c614dfa08"}, {0xdd, 0xcb, "579d775454e2268acdfa8c9f91a758f7b6c22bb0a711a1154c8ac1aefdef8077fc3040b5e9b8d9acfa27d5517397a618f989cfdd616c793f959472f843243eb8f42e430680ff0c6c3b4002710db47caba659707054b7b7c81a5fd9f4351de1b03ec6f97f5611cf2ad1ea23c4014f3cef3aaa1f0a9629c490f0826e446bdbc0d66100e1b513765b51ca6f626622836c91f718bc1d7c3df8bd8a46ffa9b484df895ca020e94ad6f4079f5e80d14d1d117f298f3256f99d93137e8acd8a62cd5fe97b73b86167077fff9515a3"}, {0xdd, 0x78, "2b2e06c5ef2279697cff1c584bbcaca17e7041110fafc8826efa6220816fce4a3550740b16771411ca39bd2d179f14ce65816ca1d8987d26e88aebd3e9079212318ee88dde60c8c1c8823d8dd8de7b22ba70ef3ffc08a23cbf2a15649fd194028180a9a89cda8f1924ad35520d13de1b58eb99c2b812471e"}, {0xdd, 0xc9, "9bf617e97af175c3526040ce89455134bf1af5faa2ab945d0e2d38e215251ca1c1d32a7dcbe571ef6af52aeb5f64e8b1a371d892078e903986bb42589822733bf9603ce13165fe37368d17d04fd1db98b92be3da493fbd88b25044e3690a696d8c8aa95917bb217724808987fceee104c784213661669eb8d42d669423d6ffd368826b050796bd06251b605a447dafdc962cd73832dfaf9b4ea09015ed31a2d4439ac8ff21ddc40bdcace8c54126fd1e3bfe9060c9166a2497b3b4b2f658701ce9762f67ff604f3d2f"}, {0xdd, 0x33, "84e042627fbd19c1a8ad606a8ad2b452aa7fc3e066f3a81cbbd12338c605944a3d5644e9dec14dee0dba5de5c4a287d2ac529c"}, {0xdd, 0x70, "596e987dfe0e31241db561f398664c95fe432bb749123aa7b523f413134bc05eac9c529a625789bfd549832a71a76370d119fe43e1a1301fdfe2c50c5f0f87f4e46f381f881908641cafd1d8b707adf1a36120e9592c7b3d0d16ddbb0d1b9a2b399757f5e516f822a5fc9b3224c94781"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x24010800}, 0x40)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000440)={0x9, 0x101, 0x5, 0x2, 0x6})
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:25:11 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x10, r1, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:25:16 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7ffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000804}, 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:25:22 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:25:28 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = gettid()
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
r7 = getpid()
ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000180)=r7)
setsockopt$inet6_buf(r6, 0x29, 0x3d, &(0x7f0000000440)="fbc42a011a6565e3c824316589", 0xd)
setpriority(0x0, r7, 0x1)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=<r8=>0x0)
clone3(&(0x7f0000000340)={0x8000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x6}, &(0x7f0000000200)=""/4, 0x4, &(0x7f0000000240)=""/126, &(0x7f0000000300)=[0x0, r2, r2, r2, r2, r3, r5, r7, r8, r2], 0xa, {r1}}, 0x58)

01:25:34 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1)

01:25:38 executing program 1:
r0 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x8000000)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x1010, r0, 0x10000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x7, 0x5, 0x0, 0x8001, 0x5, 0x1, {0x0, r3}}, 0x200)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:25:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0xbea6, 0x10, 0x3, 0x72, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
syz_io_uring_setup(0x36b0, &(0x7f0000000240)={0x0, 0xcb98, 0x0, 0x3, 0x239, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
syz_io_uring_setup(0x7382, &(0x7f0000000340)={0x0, 0xced3, 0x0, 0x2, 0x1a3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480))

01:25:48 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:25:59 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x32f7, &(0x7f0000000000)={0x0, 0x16a1, 0x0, 0x1, 0x13d, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:26:07 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x2eab, 0x21, 0x1, 0x10000000, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
r1 = syz_io_uring_setup(0x6004, &(0x7f0000000300)={0x0, 0x92ea, 0x2, 0x1, 0x10d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=<r2=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r4=>0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r3, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r7, 0x0, 0x4, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000001600)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r7, 0x80, &(0x7f0000001580)=@nfc_llcp={0x27, 0x0, 0x2, 0x5, 0x59, 0x20, "f5b2ed1bc117d77bd3a7b455e33bce7c7dded5ba7525164cf44432042f9fc274b7cb604d5b43b0230aec6aee1ec21bf70404b39965f21a68351fa9bf38ba49", 0x2e}, 0x0, 0x0, 0x1, {0x0, r9}}, 0xc44)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r10, r4, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0)
r11 = dup3(r0, r1, 0x80000)
r12 = syz_io_uring_setup(0x239df, &(0x7f0000001640)={0x0, 0x5341, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000016c0), &(0x7f0000000100))
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0xa, 0x0, r13)
syz_io_uring_submit(r5, r2, &(0x7f0000001540)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000480)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default]}, 0x0, 0x0, 0x1, {0x0, r13}}, 0x3)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000440))

01:26:18 executing program 1:
r0 = syz_io_uring_setup(0x3, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:26:22 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1, 0xfffffffd, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:26:30 executing program 1:
r0 = syz_io_uring_setup(0x17b3, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000b40))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/105, 0x69}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/192, 0xc0}, {&(0x7f0000000d40)=""/50, 0x32}, {&(0x7f0000000d80)=""/141, 0x8d}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/114, 0x72}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/136, 0x88}], 0x8)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = getpid()
wait4(r3, &(0x7f0000000000), 0x20000009, &(0x7f00000009c0))
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5)
clone3(&(0x7f0000001580)={0x100000, &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0), {0x3a}, &(0x7f0000001300)=""/253, 0xfd, &(0x7f0000001400)=""/196, &(0x7f0000001540)=[0x0, 0x0, r5], 0x3, {r1}}, 0x58)
getrusage(0x48f3ec8edd0074f3, &(0x7f0000000a80))
waitid(0x2, r3, &(0x7f0000000880), 0x20000000, &(0x7f0000000900))
pipe2(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ec0)=""/68, 0x44}, {&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/228, 0xe4}], 0x4)
connect$inet6(r6, &(0x7f0000001200)={0xa, 0x4e21, 0xfffffff9, @mcast2, 0x9}, 0x1c)

01:26:33 executing program 0:
r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x2, 0x4000)
ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000040)={0x3, 0x200, 0xffff, 0x0, 0x1000, 0x0, 0x8, 0x5, 0x1f, 0x100, 0x4, 0x40, 0x2, 0x263b})
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = syz_io_uring_setup(0x50001, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xe5, 0x7, 0x6f, 0x9, 0x2, 0x3, 0x4, 0x1bc, 0x38, 0x1bc, 0x1, 0x1, 0x20, 0x2, 0x0, 0x3, 0x8}, [{0x6, 0x1000, 0x2, 0x718, 0x2, 0x1, 0x8000, 0x3}, {0x60000001, 0x1d4, 0x3, 0x8, 0x44ae, 0x1000, 0x6, 0x7fffffff}], "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", [[], [], [], [], [], [], []]}, 0x1778)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:26:40 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
sendto$l2tp6(r1, &(0x7f00000001c0)="3496b9e890b5d67649930b743897bcb54de6bd5ca54ac211719407b4c10c246a723ea3fe409b26d88f1631022fd75552e27f45eee31b2c72f62655e7e7dd89343204e8deaf4489975b14136ee9b03de4f0c7344ed99b684a4f051a525d9f62917ede0cd228a68c5dff2b396e92946b303da54a22fdd46faf9fcaa0e90be4575606e9929a946e129155df7a", 0x8b, 0x20000000, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0x8001, 0x1}, 0x20)

01:26:43 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40002, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x78d201, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000480)=[r3, r0, r0, r0, r4, r5, r6, r7], 0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:26:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = fsmount(0xffffffffffffffff, 0x0, 0x82)
r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc0184, 0x85)
syz_io_uring_setup(0x7306, &(0x7f0000000600)={0x0, 0xedad, 0x2, 0x2, 0x30a, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000680))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0)
r3 = io_uring_setup(0x4448, &(0x7f0000000700)={0x0, 0xeb7, 0x2, 0x1, 0x194, 0x0, r2})
syz_io_uring_setup(0x168, &(0x7f0000000780)={0x0, 0xd6e5, 0x1, 0x1, 0xa6, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000540)=""/131, 0x83}], 0x4)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:27:01 executing program 0:
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf052d00000006000400ffef00000c002d00000000000000000006000600fff7000005002b0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff)
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xacbe}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500), 0x0)
r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = getpid()
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3)
pipe2(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x4, 0x0)
clone3(&(0x7f0000000540)={0x898000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x20}, &(0x7f0000000300)=""/135, 0x87, &(0x7f0000000440)=""/179, &(0x7f0000000500)=[r1, r3], 0x2, {r6}}, 0x58)

01:27:02 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000240)=[r0]}, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_io_uring_setup(0x11b8, &(0x7f0000000000)={0x0, 0x84b6, 0x10, 0x2, 0xcf, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:27:15 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/155, 0x9b}], 0x1)

01:27:18 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x4, 0x2}, 0x10}, 0x78)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, r0, r2, r3, r4, r5], 0x6)

01:27:25 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000540)={0x0, 0x200, 0x0, [0x3, 0xcc7b, 0x3, 0x3f, 0xd3], [0x0, 0x398, 0x6, 0x6, 0x7, 0x1, 0x9e, 0xffffffffffffff07, 0x6, 0x9, 0x1, 0xffffffffffffffa5, 0xfffffffffffffbff, 0x3, 0x0, 0x9, 0x2, 0x8, 0x1000, 0x10000, 0x7, 0x2, 0x6, 0x3f, 0xff, 0x5fe, 0x4, 0x0, 0x1, 0x2, 0xfffffffffffffffb, 0x100000000, 0x1, 0x20, 0x0, 0x4, 0x841a, 0x100, 0x6, 0x2, 0x2, 0xffffffff, 0xa69, 0xe2, 0x0, 0x1000, 0x1f7e, 0x8001, 0xfffffffffffffff8, 0xffffffff, 0xc42, 0x1000, 0x0, 0x3, 0x5, 0x6, 0x5, 0x1f, 0x80000001, 0x7, 0x800, 0xcdd2, 0x0, 0x6, 0x3, 0x40, 0x0, 0x5, 0x3, 0x7fffffff, 0x2, 0xfffffffeffffffff, 0x7, 0x8000, 0xffffffffffffee39, 0xffffffff, 0xf9, 0xab5, 0xd64, 0x9aa, 0x5, 0x3100, 0x200, 0x2, 0xffffffff, 0x80000001, 0x37d2, 0x80, 0x5, 0x0, 0xb3, 0x8, 0x3, 0x3, 0xffffffff, 0x1, 0x1, 0x101, 0x0, 0x100000001, 0x80, 0x1, 0x81, 0xe4, 0x1, 0x0, 0xa26, 0x46c, 0x0, 0x80, 0x8001, 0xffffffffffffc1a3, 0x20, 0x6e6e, 0x8000, 0xfffffffffffffffc, 0x9, 0x2, 0x1, 0x40, 0x1]})

01:27:27 executing program 1:
r0 = syz_io_uring_setup(0x17b3, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000b40))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/105, 0x69}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/192, 0xc0}, {&(0x7f0000000d40)=""/50, 0x32}, {&(0x7f0000000d80)=""/141, 0x8d}], 0x6)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/114, 0x72}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/136, 0x88}], 0x8)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = getpid()
wait4(r3, &(0x7f0000000000), 0x20000009, &(0x7f00000009c0))
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = getpid()
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5)
clone3(&(0x7f0000001580)={0x100000, &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0), {0x3a}, &(0x7f0000001300)=""/253, 0xfd, &(0x7f0000001400)=""/196, &(0x7f0000001540)=[0x0, 0x0, r5], 0x3, {r1}}, 0x58)
getrusage(0x48f3ec8edd0074f3, &(0x7f0000000a80))
waitid(0x2, r3, &(0x7f0000000880), 0x20000000, &(0x7f0000000900))
pipe2(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ec0)=""/68, 0x44}, {&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f0000001000)=""/251, 0xfb}, {&(0x7f0000001100)=""/228, 0xe4}], 0x4)
connect$inet6(r6, &(0x7f0000001200)={0xa, 0x4e21, 0xfffffff9, @mcast2, 0x9}, 0x1c)

01:27:35 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x8001, 0x5, 0x7fffff23, 0x0, 0x1}, &(0x7f0000000000)=0x9c)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:27:36 executing program 1:
r0 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x8000000)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x1010, r0, 0x10000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x7, 0x5, 0x0, 0x8001, 0x5, 0x1, {0x0, r3}}, 0x200)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:27:44 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
syz_io_uring_setup(0x435d, &(0x7f00000001c0)={0x0, 0x2a47, 0x1, 0x1, 0x28a, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280))
r3 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xff, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000040))
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', r1)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x3f0, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3aa, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_a, @device_a, @from_mac=@broadcast, {0x3, 0x17}}, @ver_80211n={0x0, 0x4, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x0, 0x4, 0x4b, @void, [{0xdd, 0xc9, "351a3c5b7f47efbb807326bc50f7ba3888c5eccd70af0244aaaf633641eec8e0689eb117ecfc2725a16514498d39aa9d343e2a386cc0e9f79e7aa5c85e1da9a8a7f9dd762fdc011733d5cf87846d47dba0f373c725d526427c43753c459a9a9bd81578a48e24d8de0ff0fbcb35d323a79d3be147a6e22b4918c8eb92eabbc2d0e12407b95ad794e92fba169b2edba145d6f1e2befb5e2866cf3d3faf69c8d6c597419a1984bfc85dad1d79b8db651afaebf81c387785ca704b5aba61a523976164a219d41c614dfa08"}, {0xdd, 0xcb, "579d775454e2268acdfa8c9f91a758f7b6c22bb0a711a1154c8ac1aefdef8077fc3040b5e9b8d9acfa27d5517397a618f989cfdd616c793f959472f843243eb8f42e430680ff0c6c3b4002710db47caba659707054b7b7c81a5fd9f4351de1b03ec6f97f5611cf2ad1ea23c4014f3cef3aaa1f0a9629c490f0826e446bdbc0d66100e1b513765b51ca6f626622836c91f718bc1d7c3df8bd8a46ffa9b484df895ca020e94ad6f4079f5e80d14d1d117f298f3256f99d93137e8acd8a62cd5fe97b73b86167077fff9515a3"}, {0xdd, 0x78, "2b2e06c5ef2279697cff1c584bbcaca17e7041110fafc8826efa6220816fce4a3550740b16771411ca39bd2d179f14ce65816ca1d8987d26e88aebd3e9079212318ee88dde60c8c1c8823d8dd8de7b22ba70ef3ffc08a23cbf2a15649fd194028180a9a89cda8f1924ad35520d13de1b58eb99c2b812471e"}, {0xdd, 0xc9, "9bf617e97af175c3526040ce89455134bf1af5faa2ab945d0e2d38e215251ca1c1d32a7dcbe571ef6af52aeb5f64e8b1a371d892078e903986bb42589822733bf9603ce13165fe37368d17d04fd1db98b92be3da493fbd88b25044e3690a696d8c8aa95917bb217724808987fceee104c784213661669eb8d42d669423d6ffd368826b050796bd06251b605a447dafdc962cd73832dfaf9b4ea09015ed31a2d4439ac8ff21ddc40bdcace8c54126fd1e3bfe9060c9166a2497b3b4b2f658701ce9762f67ff604f3d2f"}, {0xdd, 0x33, "84e042627fbd19c1a8ad606a8ad2b452aa7fc3e066f3a81cbbd12338c605944a3d5644e9dec14dee0dba5de5c4a287d2ac529c"}, {0xdd, 0x70, "596e987dfe0e31241db561f398664c95fe432bb749123aa7b523f413134bc05eac9c529a625789bfd549832a71a76370d119fe43e1a1301fdfe2c50c5f0f87f4e46f381f881908641cafd1d8b707adf1a36120e9592c7b3d0d16ddbb0d1b9a2b399757f5e516f822a5fc9b3224c94781"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x24010800}, 0x40)
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000440)={0x9, 0x101, 0x5, 0x2, 0x6})
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:27:46 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x14ef, &(0x7f0000000240)={0x0, 0xcdf, 0x2, 0x0, 0x1dd}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
syz_io_uring_setup(0x451a, &(0x7f0000000000)={0x0, 0x1d5f, 0x10, 0x0, 0x268}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:27:52 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x8001, 0x5, 0x7fffff23, 0x0, 0x1}, &(0x7f0000000000)=0x9c)
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:27:57 executing program 0:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x144, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x36f3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x97}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa27}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x430}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3df}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x4c041)
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r3 = syz_io_uring_setup(0x4c18, &(0x7f0000000e40)={0x0, 0x45ef, 0x20, 0x0, 0x21b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000e00)=<r5=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1)
pipe2(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
splice(r7, 0x0, r6, 0x0, 0x4, 0x0)
sendmsg$rds(r6, &(0x7f0000000dc0)={&(0x7f0000000980)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/107, 0x6b}, {&(0x7f0000000a40)=""/237, 0xed}, {&(0x7f0000000b40)=""/211, 0xd3}], 0x3, &(0x7f0000000d00)=[@zcopy_cookie={0x18}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffff9, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x6}, &(0x7f0000000c80)=0x2, &(0x7f0000000cc0)=0x3, 0x4, 0x467, 0x1, 0x7, 0x0, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0x78d, 0x2}}], 0xa0}, 0x82)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000580)=""/71, 0x47}], 0x2, &(0x7f0000000640)=""/118, 0x76}, 0x0, 0x40000000, 0x0, {0x2, r8}}, 0xab)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r9 = accept(0xffffffffffffffff, &(0x7f0000000300)=@qipcrtr, &(0x7f0000000380)=0x80)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r2, r2, r3, r9], 0x4)

01:27:59 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
read(r0, &(0x7f00000001c0)=""/186, 0xba)

01:28:06 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
clone3(&(0x7f0000000480)={0x200000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x40}, &(0x7f0000000200)=""/182, 0xb6, &(0x7f00000002c0)=""/233, &(0x7f0000000440)=[r1, r1], 0x2, {r3}}, 0x58)

01:28:09 executing program 1:
r0 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x4c33, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
r1 = syz_io_uring_setup(0x39df, &(0x7f0000000080)={0x0, 0x5344}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fremovexattr(r1, &(0x7f00000001c0)=@random={'os2.', '#\x00'})
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1)

01:28:15 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_io_uring_setup(0x36ee, &(0x7f0000000000)={0x0, 0xd9a3, 0x2, 0x10001, 0x275, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:28:20 executing program 1:
r0 = syz_io_uring_setup(0x125e, &(0x7f0000000000)={0x0, 0xfffffffa, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:28:26 executing program 0:
r0 = syz_io_uring_setup(0x83, &(0x7f0000000540)={0x0, 0xbd81, 0x2, 0xfffffffd, 0x31c}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000100)=<r1=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x1, 0x0, 0x2}, 0xec)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x4010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_setup(0x2aab, &(0x7f0000000000)={0x0, 0x8fda, 0x1, 0x3, 0x181, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1, 0x0, 0x1}, 0x6)
sendto(0xffffffffffffffff, &(0x7f0000000340)="d51b92f428e40ca2e32882f1d0f9116f57b640a55875ba6489a8fda773516810b36a2d7fa210fe5d8d39086ba035997d15281321cd815b92b627849c771a6ae7dc36", 0x42, 0x800, &(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x577, @empty, 0x9, 0x3}, 0x80)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x3)

01:28:27 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_io_uring_setup(0x36ee, &(0x7f0000000000)={0x0, 0xd9a3, 0x2, 0x10001, 0x275, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:28:34 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300)='NLBL_CIPSOv4\x00', r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x3}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x68, 0x0, 0x500, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0x0, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf3bd}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}}, 0x8804)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280)='NLBL_UNLBL\x00', r0)
r2 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:28:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xe5af, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:28:41 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000640)=""/147, 0x93}], 0x2)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = getpid()
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440))
fcntl$getownex(r0, 0x10, &(0x7f0000000480))
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = getpid()
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000180)=r4)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = getpid()
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000180)=r6)
clone3(&(0x7f0000000540)={0xa400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x1c}, &(0x7f0000000200)=""/169, 0xa9, &(0x7f00000005c0)=""/113, &(0x7f00000004c0)}, 0x58)

01:28:44 executing program 0:
r0 = syz_io_uring_setup(0x1000001, &(0x7f0000000080)={0x0, 0x8099f2, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:28:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x80000001}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x2, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x13, r2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800000, 0x4010, r0, 0x8000000)
syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x1}, 0x25)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:28:54 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:28:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002840)=[{&(0x7f00000025c0)=""/128, 0x80}, {&(0x7f0000002640)=""/22, 0x16}, {&(0x7f0000002680)=""/177, 0xb1}, {&(0x7f0000002740)=""/131, 0x83}, {&(0x7f0000002800)=""/27, 0x1b}], 0x5)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f0000002440)=""/224, 0xe0}], 0x7)

01:29:06 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = getpid()
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000180)=r4)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = getpid()
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000180)=r6)
r7 = dup3(r0, r0, 0x0)
clone3(&(0x7f0000000440)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x13}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000000200)=""/223, &(0x7f0000000340)=[r2, r1, r4, r1, r1, r1, 0x0, r6, r1], 0x9, {r7}}, 0x58)

01:29:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x176a, &(0x7f0000000280)={0x0, 0x3df8, 0x20, 0x0, 0x172, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000380)=0x2, 0x0, 0x4)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0)
syz_io_uring_setup(0x3046, &(0x7f00000001c0)={0x0, 0xd597, 0x0, 0x3, 0xb6, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:29:16 executing program 0:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}}, 0x4008081)
r2 = syz_io_uring_setup(0x5a33, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x2, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r3 = syz_open_dev$vcsu(&(0x7f00000004c0)='/dev/vcsu#\x00', 0x3, 0x181000)
recvmsg$can_raw(r3, &(0x7f00000006c0)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/186, 0xba}], 0x1}, 0x10001)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:29:17 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0x28ad, &(0x7f0000000000)={0x0, 0xb778, 0x20, 0x0, 0x1c2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:29:26 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = io_uring_setup(0x4f75, &(0x7f0000000300)={0x0, 0xeba1, 0x0, 0x2, 0x1d4})
io_uring_enter(r1, 0x46e5, 0x6141, 0x2, &(0x7f0000000380)={[0x80]}, 0x8)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x3e, 0x10001, 0x8})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000540)=""/215, 0xd7}], 0x3)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:29:29 executing program 0:
r0 = syz_io_uring_setup(0x6600, &(0x7f00000001c0)={0x0, 0xafe3, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000040)=""/40, 0x28}], 0x2)

01:29:34 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x76f4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:29:40 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xf316, 0x0, 0xfffffffc, 0x20a}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/56, 0x38}], 0x3)
clone3(&(0x7f0000000000)={0x80000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:29:42 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/214, 0xd6}], 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000008c0)={&(0x7f0000000880)=[0x8000, 0x200, 0x20], 0x3, 0x0, 0x0, <r3=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000900)=[r0], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000780)=""/92, 0x5c}], 0x5)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r4 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000380), &(0x7f0000000140)=<r5=>0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r4, 0x0)
syz_io_uring_submit(r6, r5, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r8=>0x0)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r7, 0x0)
syz_io_uring_submit(r9, r8, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r6, r8, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4}, 0x100)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:29:49 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x60700)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x101043, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r1, r0, r2, r3], 0x4)
r4 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x7b3a, 0x280)
ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000340)={0x7, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000380)={0x0, 0x8, 0x20})
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:29:51 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[r2, r0, r3, r0, r1, r0, r1]}, 0x7)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f0000000440)=""/90, 0x5a}], 0x4)

01:29:59 executing program 0:
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000000)=""/92, 0x5c}], 0x2)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:30:00 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x60700)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x101043, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r1, r0, r2, r3], 0x4)
r4 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x7b3a, 0x280)
ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000340)={0x7, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000380)={0x0, 0x8, 0x20})
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:30:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/93, 0x5d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:30:10 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:30:16 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000380)=0x1, 0x0, 0x4)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/7, 0x7}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/208, 0xd0}], 0x3)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r5, 0x5016, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:30:20 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:30:23 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x58)

01:30:29 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x58)

01:30:31 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, <r3=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = getpid()
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000180)=r6)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
r8 = getpid()
ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000180)=r8)
fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, <r9=>0x0})
r10 = socket$l2tp6(0xa, 0x2, 0x73)
r11 = getpid()
ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000000180)=r11)
r12 = signalfd4(r0, &(0x7f0000000440)={[0x3]}, 0x8, 0xc0000)
clone3(&(0x7f0000000480)={0x110008200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x20}, &(0x7f0000000200)=""/25, 0x19, &(0x7f0000000240)=""/128, &(0x7f0000000380)=[r2, r3, r4, r6, r8, r9, r11, r1], 0x8, {r12}}, 0x58)

01:30:33 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000000000000, 0x0, 0x0}, 0x58)

01:30:37 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x70ae0a00000000, 0x0, 0x0}, 0x58)

01:30:42 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58)

01:30:42 executing program 0:
ptrace$setsig(0x4203, 0x0, 0x3, &(0x7f0000000340)={0x3, 0x380, 0x7})
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000300), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/119, 0x77}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/7, 0x7}], 0x3)

01:30:46 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000, 0x0, 0x0}, 0x58)

01:30:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1b11b1f000, 0x0, 0x0}, 0x58)

01:30:52 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
syz_io_uring_setup(0xbc8, &(0x7f0000001540)={0x0, 0xaf5f, 0x0, 0x2, 0x20f, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000015c0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = signalfd4(r0, &(0x7f0000000000)={[0x2]}, 0x8, 0x180800)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000440)=""/182, 0xb6}], 0x7)

01:30:54 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x70ae0a}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:30:59 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x20200}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:03 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x500}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:03 executing program 0:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff}}, 0x1b72, 0x40}, 0x90)
r4 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x2000, 0x0, 0x102, 0xfffffff7}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000000)="b96e4dbe7fd80fb7c12aa1fc57d856242b68", 0x12}, {&(0x7f0000000040)="60c7adefcf", 0x5}, {&(0x7f0000000200)="efce4b12f7ae73e3ecd1701cfa1225ce3e8779c505466b81668bc0186e06c9df4ffa5b3810185bf14f353fd300271e1274b495d59b453cfa1f7ddf158c2d1c25cf4758f433a1404d6df71054774ddc3899bada0b060a46bd91af043b", 0x5c}, {&(0x7f0000000280)="555468ac6817fd680609", 0xa}, {&(0x7f00000002c0)="2e3abcafe42c38c9be4d8a0316cd4ca694104b9bc143842ce395deeaaba298b2404fa1dc92ca899cabf917f7d20e29fe1651e12f46b820364815d7e88c76a3022681159025e266f0d111e05237e122ce1b89c83fee8924af2046fe01bee5e8df0987f1775cf788e663e9e0e056f892440cf6f935b07b4c2cc75e543515f1638088450f033e4b3e5a9b4b4a443e6b9fb1e213cd632dfe0d781cb7342ca96e9d645ec4bfa6050df147d63542cd2e618301095a40c887e83884c1371f48c6f2cd604bfe4669793e109d2111", 0xca}, {&(0x7f0000000440)="cf23239096572db1f2a628ebc77ee33f6c679b17044499042b1a3ab6151a65072fd43210fd3d09891bca9ac6edbc9b2124c86b2f01622aa0bda808ee694acb16548ee5c10a85fd001993b51fc82df166b0f58bbce7e65d1bdafc19a3954efccfae5d237271b713ef3042610fe3cc3ec341c43d8b32e6e062c718f5bace5d04c240", 0x81}], 0x6, 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:09 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x500}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:15 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x500}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:17 executing program 0:
r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r3, 0x8008af26, 0xe9002)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00')
read$FUSE(r4, &(0x7f0000002400)={0x2020}, 0x2020)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r7, 0x0, 0x4, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e20, 0xfffffffa, @mcast2}, {0xa, 0x4e20, 0x3, @remote, 0x3}, 0x81, [0x7, 0x1, 0xfffffffc, 0x1, 0x4, 0x6, 0x7, 0xfffffffd]}, 0x5c)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x81, 0x7, 0x80, 0x81}, 'syz1\x00', 0x1d})
close_range(r5, r6, 0x0)
io_uring_enter(r2, 0x2ae1, 0x9202, 0x1, &(0x7f0000000000)={[0x130]}, 0x8)

01:31:19 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:26 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:28 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x24400, 0x0)
fstatfs(r1, &(0x7f00000001c0)=""/194)

01:31:33 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:37 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/135, 0x87}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:41 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:48 executing program 0:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000002c0))
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)="c525200f794e8172202c909e3db2b8e250dae2af0ba6f78099e6653e12b3569233a484d71dd6e36e29cda00f98ce591ecf46f8bb06c602b3ac90e01341a75e06dc171373285d2a91bd3fd1d771161a9b8ac67e4b6bce34d9ca69c19e7bb1ef1c59a2b0256460eced8d365af8c99eb704c3caed0e99b5c65650069c32225b409c", 0x80}], 0x1, 0x2)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000540)={0x46, "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"})
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000))
r3 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000300)={r1, 0x274, 0x2, 0x7})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000280)={0x16, 0xb, 0x10, 0x2, 0x2, 0xffffffff, 0x1, 0xa5, 0x1})
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:49 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:31:57 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:32:01 executing program 0:
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:32:04 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clone3(&(0x7f00000003c0)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:32:12 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x10d240, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
sendfile(r0, r1, &(0x7f0000000040)=0x5, 0x0)
read(r0, 0x0, 0x1000000)

01:32:13 executing program 0:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0xf67f, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/29, 0x1d}], 0x1)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
syz_io_uring_setup(0x5f7f, &(0x7f0000000000)={0x0, 0xacc0, 0x2, 0x3, 0x106, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:32:20 executing program 1:
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x0, 0x600})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"5c874473e69292623a9b90e10f6c03bf", <r0=>0x0, <r1=>0x0, {0x7f, 0x3}, {0xfffffffffffffff7, 0x8000}, 0x3, [0xd9, 0xfffffffffffff78b, 0xffffffff, 0x6, 0xa84, 0x0, 0x81000000, 0x1, 0x1f, 0x2, 0x9, 0x6, 0x6, 0x500000000000, 0x7, 0x2]})
syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x1, 0x40)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x24c)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"b32c9ef9a700d349aa850217e7f89fab", <r3=>r1, r0, {0x80000000, 0x3}, {0x3ff, 0xa81}, 0x9, [0x200, 0x1, 0x7, 0x80000001, 0x9, 0x5259, 0x3, 0x100000001, 0x1ff, 0x101, 0xfffffffffffffffa, 0xd9d, 0x380000000000, 0xf78, 0x7, 0x25e4]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"c8fb13e3217c5d1303aaf9bd77a94f32", r0, r3, {0x2, 0x9}, {0x5, 0x101}, 0x8, [0xfffffffffffffffa, 0xe2, 0x3, 0x800, 0xfc, 0x6, 0x1, 0x1, 0x1, 0x800, 0x8, 0x7, 0x100, 0x0, 0x8, 0x100]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x201, 0x0)

01:32:22 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000be00000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000040)="0000000000000000000000008174406d72404b538720b2bc7333620000000000daf4655f00000000000000000000010000000000000000008f90f794a261713275899969e7a69924821eecfcf8e912fe9a359cb3cdb1af29ab14d3878f806a849e3fa1e0c2c0126d61f0f09f0d451cdcf7883511a645a56540d2d98e5949ebbb6fec880ce3", 0x85, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}, {0x0, 0x0, 0xffffffff}], 0x0, &(0x7f0000013800)=ANY=[@ANYBLOB='2'])

[ 5545.636383][ T7009] loop0: detected capacity change from 0 to 264192
[ 5545.777219][ T7009] EXT4-fs (loop0): Unrecognized mount option "2" or missing value
[ 5546.888363][ T7009] loop0: detected capacity change from 0 to 264192
[ 5547.090117][ T7009] EXT4-fs (loop0): Unrecognized mount option "2" or missing value
01:32:27 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes256, 0x1, [], @a='i\xb2\xf6\xed\xee\xe7 \xcc\xe0Wy7\xeb\x8agQ'})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2900, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x4, 0x8, 0x9, 0x9})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000000))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8)
pipe2(&(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r6, 0x0, r5, 0x0, 0x4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000380)={0x10000000})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000300)={'sit0\x00', r4, 0x4, 0x13, 0xff, 0x6, 0x41, @mcast1, @rand_addr=' \x01\x00', 0x700, 0x80, 0x8000, 0x9}})

01:32:28 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18}, 0x10)
openat(r0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x204101, 0x24)
r1 = socket$packet(0x11, 0x3, 0x300)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x10, @desc4='\x85\xba\xa1t\xf0\xcb\x11B'})
write(r1, &(0x7f0000000040)="b2002de82c5b954377a6da27dbed5ff8d4739a951ba81f28dd35b7a6111d3174191ef90b29f55c857a7b27d0d15ff35786bdf1d04ea400", 0x37)
fchown(r0, 0x0, 0xffffffffffffffff)

01:32:35 executing program 0:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto(r2, &(0x7f0000000000)="25b2e6956fd89959c2c666740b76ab3a20f55bf74155cf4959ff5706b9ccacb8cf5c", 0x22, 0xc810, 0x0, 0x0)
listen(r2, 0xe0000000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8)
sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ef484f2c7b495ea327167341f20fde750aaf84bd6c48df1afc7cec90f9e399a9b674c2ce919df7f71a2b118ce84fc32c324c651926f00a406175c2a6b8751176967d7ce2fb345da4c3c66a5932f09cf5b0d69eba57182a1dc0cdbe78982f09406772f5107f57646d0d2efa00375b71c514edf7d34979f883010172f71ea0509fbacecb2ab065790ec6c4065316abc363347ddbfc09a20cecd4c8341ee60da2315f479ed2", 0xa4}, {&(0x7f00000001c0)="a0fd14c35276b42df93c3393fc8f8e42ac5f9d8be56c872d9db9b933318e9a6bb0fd5c2bc2ebb15e2fbfccc8cd57ab96992abc80130f2a19a4e23539d90b6284e980e8850a5bd8522f81a0f3bb4a2a9bf8", 0x51}, {&(0x7f0000000240)="f46d5e9e9c8afefe9ab99a6e32209938eefbe7c3f9eda1aa7585d8e8eecf22ceb2e3ed77ed54ec251a9e284bb8dacfae4ffe27eb8705f01be04beec075397ef208b60af13db7b6c7f53fa21cc42d2ee827e7b01b94cb46c24df20a8bb9a5ae416e78fcb0be5465f6e1ef1d2743bbbec5453d99d12a6095727220a25f33294490f0db8b44f096ea440899539be5f4cdb82c6e6c43d4daebd578c2d0fcc5f995db84781b96272769839e283c60b6b638c9dae44babb38a11f47ae6f56a85f3b0aee6596ded9dd4f0411e3600f65ba2fac8856146dba10c6fa95d4c58ad467058237432f7c2c399d34029a0ccfb93c6c37f10bab4", 0xf3}, {&(0x7f0000000340)="86c0a7b51881dd16e5e86007e2f2df30de87fadf9173d9f89eab09d50027a851e24ade1a659068fcd9f7a767eda84ccaafd2de8c9cf98645bb5b806fa7d9225315d492d9c699a1277de46dabdd2730242ed3e83b88cd12", 0x57}], 0x4, &(0x7f0000000440)=[{0x80, 0x10d, 0x0, "fac9fb3d52677349ff550add1a733e9751adb2d018ef347d5771ba6ed9236229cf3824c0a74fbe29d643889f2364030f189a795e3bd0783f9eb7763cfc036bf9a493fd5bb67471a27fe3d95257ced0ad1f74c08c63ee0d75141146fec523dab65259208374b16209ee"}], 0x80}, 0x40)

01:32:36 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x82, 0x0)
sendfile(r1, r1, 0x0, 0xfdef)
close(r1)

01:32:43 executing program 0:
prctl$PR_GET_DUMPABLE(0x3)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getpeername(r0, 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0)

01:32:45 executing program 1:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x4, 0x81, 0x1f, 0x7fff})
getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000001800)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000200001", 0x21, 0x544}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {0x0, 0x0, 0x407100}], 0x0, &(0x7f0000012c00))
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x10, [], @a='i\xb2\xf6\xed\xee\xe7 \xcc\xe0Wy7\xeb\x8agQ'})

[ 5569.254782][ T7623] loop1: detected capacity change from 0 to 16497
[ 5569.733706][ T7623] EXT4-fs error (device loop1): ext4_fill_super:4943: inode #2: comm syz-executor.1: iget: root inode unallocated
[ 5569.737090][ T7623] EXT4-fs (loop1): get root inode failed
[ 5569.738230][ T7623] EXT4-fs (loop1): mount failed
01:32:49 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f000000d100)=@assoc_value, &(0x7f000000d140)=0x8)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x213003, 0x0)
r2 = dup(r1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={<r3=>0x0, @in6={{0xa, 0x4e20, 0x7ff, @local, 0x2}}}, &(0x7f0000000180)=0x84)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3}, 0x8)

[ 5573.424412][ T7725] sctp: [Deprecated]: syz-executor.0 (pid 7725) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 5573.424412][ T7725] Use struct sctp_sack_info instead
[ 5573.757946][ T7725] sctp: [Deprecated]: syz-executor.0 (pid 7725) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 5573.757946][ T7725] Use struct sctp_sack_info instead
01:32:53 executing program 1:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x33}, 0x1c)

01:32:57 executing program 1:
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x1}}, 0x14)
socket$netlink(0x10, 0x3, 0x14)
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xa)
bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400080, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x2, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008880)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0300002d0001490ee0255c1d858bdc1a46ac1196a8d4e04f2340ddab6ee48f33"], 0x36c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4)

01:32:57 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801fe00fcff000000000000020000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x31, &(0x7f0000000240)=""/49, 0x41100, 0x9, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x3, 0x9, 0x2}, 0x10}, 0x78)
ftruncate(r0, 0xffff)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000080))
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x20, 0x1, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
renameat2(r1, &(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000500)='./file0\x00', 0x2)
accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040)=0x6e, 0x800)

[ 5581.257999][ T7849] loop0: detected capacity change from 0 to 512
[ 5581.867000][ T7849] EXT4-fs error (device loop0): ext4_fill_super:4943: inode #2: comm syz-executor.0: iget: root inode unallocated
[ 5581.928192][ T7849] EXT4-fs (loop0): get root inode failed
[ 5581.929708][ T7849] EXT4-fs (loop0): mount failed
01:33:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ppoll(&(0x7f0000000100)=[{r2, 0x4013}], 0x1, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1)

01:33:09 executing program 0:
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)={0x30101, 0x1a, 0x3}, 0x18)
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000280))
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000002c0)={r0, r1})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
preadv(r2, &(0x7f00000000c0), 0x0, 0x5, 0x8000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000462a360c0040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040))
recvmmsg(r0, &(0x7f0000005180)=[{{&(0x7f0000000340)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/243, 0xf3}, {&(0x7f0000000740)=""/247, 0xf7}], 0x7, &(0x7f00000008c0)=""/239, 0xef}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/172, 0xac}, {&(0x7f0000000a80)=""/190, 0xbe}, {&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/131, 0x83}, {&(0x7f0000000c40)=""/81, 0x51}], 0x5, &(0x7f0000000d40)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/159, 0x9f}], 0x2, &(0x7f0000002e40)=""/164, 0xa4}, 0x101}, {{&(0x7f0000002f00)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003480)=[{&(0x7f0000002f80)=""/199, 0xc7}, {&(0x7f0000003080)=""/194, 0xc2}, {&(0x7f0000003180)=""/183, 0xb7}, {&(0x7f0000003240)=""/32, 0x20}, {&(0x7f0000003280)=""/231, 0xe7}, {&(0x7f0000003380)=""/104, 0x68}, {&(0x7f0000003400)=""/6, 0x6}, {&(0x7f0000003440)=""/1, 0x1}], 0x8}, 0xffffff80}, {{&(0x7f0000003500)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004580)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1, &(0x7f00000045c0)}, 0xfff}, {{&(0x7f0000004600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004680)=""/131, 0x83}, {&(0x7f0000004740)=""/198, 0xc6}], 0x2, &(0x7f0000004880)=""/5, 0x5}, 0xe32}, {{&(0x7f00000048c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004940)=""/70, 0x46}], 0x1, &(0x7f0000004a00)=""/190, 0xbe}, 0x1011}, {{&(0x7f0000004ac0)=@ax25={{0x3, @null}, [@rose, @null, @default, @null, @null, @bcast, @remote, @bcast]}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004b40)=""/26, 0x1a}, {&(0x7f0000004b80)=""/167, 0xa7}, {&(0x7f0000004c40)=""/9, 0x9}, {&(0x7f0000004c80)=""/88, 0x58}, {&(0x7f0000004d00)=""/79, 0x4f}, {&(0x7f0000004d80)=""/222, 0xde}, {&(0x7f0000004e80)=""/191, 0xbf}, {&(0x7f0000004f40)=""/234, 0xea}], 0x8, &(0x7f00000050c0)=""/162, 0xa2}, 0xcb}], 0x8, 0x22, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000005380), &(0x7f00000053c0)=0x4)

[ 5595.508883][ T8058] loop0: detected capacity change from 0 to 4
[ 5596.741286][ T8058] EXT4-fs (loop0): #blocks per group too big: 204876358
01:33:24 executing program 1:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001680)=0x1c, 0x4)
readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/185, 0xb9}, {&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/183, 0xb7}, {&(0x7f0000001340)=""/112, 0x70}, {&(0x7f00000013c0)=""/88, 0x58}, {&(0x7f0000001440)=""/94, 0x5e}, {&(0x7f00000001c0)=""/1, 0x1}], 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x28, 0x3f7, 0x2, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @local}, {0x2, 0x1, @remote}, {0x3, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x2})
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf2507000000060001000800000014002000000000000000a200000000000000000108000c0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000)

01:33:25 executing program 0:
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x400, 0x207, 0x2, 0x4}, &(0x7f0000000100)=0x10)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8)
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRESHEX, @ANYRES64=0x0, @ANYRES64=r1], 0x0)

[ 5609.595408][ T8262] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 5609.836318][ T8262] usb 1-1: device descriptor read/64, error 18
[ 5610.155284][ T8262] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 5610.364950][ T8262] usb 1-1: device descriptor read/64, error 18
[ 5610.491070][ T8262] usb usb1-port1: attempt power cycle
[ 5611.394011][ T8262] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 5611.565595][ T8262] usb 1-1: device descriptor read/8, error -61
[ 5611.874586][ T8262] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 5612.047163][ T8262] usb 1-1: device descriptor read/8, error -61
[ 5612.167747][ T8262] usb usb1-port1: unable to enumerate USB device
01:33:30 executing program 1:
prlimit64(0x0, 0x6, &(0x7f0000000000)={0x3, 0x5}, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0)

[ 5615.375215][ T3354] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 5615.886528][ T3354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 5615.888481][ T3354] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 5615.890227][ T3354] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 5615.913656][ T3354] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 5615.915688][ T3354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 5616.116004][ T3354] usb 2-1: config 0 descriptor??
[ 5616.567867][ T3354] usb 2-1: USB disconnect, device number 14
01:33:39 executing program 0:
fcntl$addseals(0xffffffffffffffff, 0x409, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_hsr\x00'})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000001540)={0x8, 'veth1_to_bond\x00', {'dummy0\x00'}, 0x8})
getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)={0x58, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x69c}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000001500)=[{0x2, 0x3, {0x2, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0xff}], 0x20)
readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$FICLONE(r2, 0x40049409, r0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, <r3=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000440)={0x0, r3, "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", "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"})

01:33:39 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}, {&(0x7f00000003c0)="f5455fd2f4655f0000000000000402f1fa287498a7a719a5f4957a22ff3de941e7a4567d", 0x24, 0x11080}], 0x0, &(0x7f0000000040))
lsetxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "9ab5f16b611c469df2bd48bb8a97d2b1"}, 0x11, 0x3)
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080))
splice(r3, 0x0, r2, 0x0, 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x2, @loopback, 0x1}}}, &(0x7f0000000340)=0x84)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={r4, 0x8, 0x6, [0x2, 0xfff, 0xfff9, 0x9, 0x101, 0x9]}, 0x14)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes128, 0x3, @desc3='\xe8\xda\xb9\x924\xbb1.'})

[ 5622.913081][ T8382] loop1: detected capacity change from 0 to 512
[ 5623.648233][ T8382] EXT4-fs error (device loop1): ext4_fill_super:4943: inode #2: comm syz-executor.1: casefold flag without casefold feature
[ 5623.755794][ T8382] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[ 5624.060624][ T8382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
01:33:47 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0xcb}, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0)

01:33:47 executing program 0:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
syz_open_procfs(r0, &(0x7f0000000000)='net/icmp\x00')

01:33:52 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000040)="00004fc00f89194f835900006a641059655a4e10bf1130ee53bb67aeedce9bd9f4", 0x21, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="707294004b078ead55b6b283a5eb970a4599754d6ea7a9e4de533c02ef0907806af9bd5a77f14434155b45a1ec955f03f19fd06aa163e7ac46e53f1bd61b990f3b5e4b2e8d375175ecc49ae5d39c76a4c1835bc7f5433d5a4fc42dcbf7c1d9cb35518a52c889abffff928b2d663a2ad5f939f43f09b9f6886db6d14f2176f015a8b9b42aead9dc9d41854476ad393ebc683900181c785b5fd140b107753175d443afeb8215a03ab759fa6bdc47dffcef2ebad4d7d1"])

[ 5635.985819][ T8697] loop0: detected capacity change from 0 to 512
[ 5636.423742][ T8697] EXT4-fs (loop0): Unrecognized mount option "pr”" or missing value
01:33:55 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x10, 0x2}, 0x18)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c9cfef878e844b5c93d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x21, 0x0, 0x3dadf00277194bc}}, 0x50)
write$FUSE_INTERRUPT(r1, &(0x7f0000000080)={0x10, 0x0, r3}, 0x10)
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[ 5637.168810][ T8697] loop0: detected capacity change from 0 to 512
[ 5637.230190][ T8697] EXT4-fs (loop0): Unrecognized mount option "pr”" or missing value
01:33:56 executing program 0:
r0 = syz_mount_image$ext4(0x0, &(0x7f0000002780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0xee63)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes128, 0x0, @desc1='\x00\x00\x11\x11\"\"33'})

01:34:03 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[], 0x0)

01:34:05 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x44443, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f0000000100)="99c613378a60effdcce842bcd39ee091ff"})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180), 0x64)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x9f6, r1, &(0x7f0000000000)="fbfda0c01081eece403142305426f48250db6fa9a717ee8a7cb9bc26892502773ce35613db1c402095d41f462873b916ca4ddb98266d64f6bd27e239b0d9521455ea0ac44291c951d8eda03727ec5b6a0428ec509200602e9e74ca801757a52b7b995b526a972a7d5c2102c9435825719fac6992e52237dc2d3eaf1d818ee0439a956988f79075cf54388361b5c52b43625a94e786e7a32bd6fff1313ab0f08a87d6d988cc99bc109f521eaec973573f6fa0474a9f23a822662ff5e32c277a17710253a176a8b50925b7687cc2b560c6915a0f2d998aa05e5f80b4d5effa5b", 0xdf, 0x1}, &(0x7f00000001c0))

01:34:12 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32303330363131363700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000c8946f1dc8946f1d00000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404ddf4655fddf4655fddf4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000004d5f6b7100000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000048dad3ce00000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3230333036313136372f66696c65302f66696c653000000000000000000000000000000000000000000000c7982f7500000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="ed8100000a000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8fa251200000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000000002ea040700000000000000000000000000006461746106015400000000000600000000000000786174747231000006014c000000000006000000000000007861747472320000000000000000000078617474723200007861747472310000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002002000000000000800010000000af301000400000000000000000000000900000060000000000000000000000000000000000000000000000000000000000000000000000000000000ede1c35b00000000000000000000000000000000000000000000000020000000c8946f1dc8946f1dc8946f1de0f4655fc8946f1d0000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00))
readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/188, 0xbc)

[ 5655.997275][ T9115] loop1: detected capacity change from 0 to 1024
01:34:14 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6_vti0\x00', 0x0})
socketpair(0x3, 0x5, 0x32, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmmsg$inet6(r1, &(0x7f0000000dc0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x9, @private2, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000000c0)="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", 0xfa}, {&(0x7f00000001c0)="312055ff472205e5c5cbfecb804f516dd8386556f59c0b418fcca0a6d3dae577bb2025", 0x23}, {&(0x7f0000000200)="2e00b1cf8869485ce75d3241fac618396061ab00b04a8be6a65f77bfefa6a695a1a1cc1c0bb42caa6174e4e23a97a92e44c9a89110eb5816f3a9d77bd76cc65badb0998d77707f6ec881653dc8a425fe4decadeb63f99af99300eba5877c014f2fa82eb696a0ef57592dccc85cb328f9021fa24de52508049e804040456141bed08777ef6ef15c170eec6a8d2d3519", 0x8f}, {&(0x7f00000002c0)="f21b128550813d5d249e7817651d4e76df62b18104e8f6a9115db5e09b95f5d406f935ee8652253811b64c72422e457986cb977592d9e4a999bf792bd15cd05025a366d1841ec1cb85081e8de467f8a8bc92ed1a6bcd02f0a48a521cc40d5150171b46e398711728fa0207e7d64b5f1ae95ceca76611a9fbf7b5e5337988cd74868e289b9b2c7b4bba5b7cd9d7c89e22e159ff4e51ccde16db23f3bcc280972a0ecf4b8218f94b71eddf6dd37afe6c7f69ed364b5c0551fc769b2deb006bb911a1d8577736dad7c62306e463571d17687a", 0xd1}, {&(0x7f00000003c0)="614952d162b10783883a9253236d13ecc8e0da86a2382f289e5dba0d", 0x1c}, {&(0x7f0000000400)="2619c0aae0a7bc7c183818cf91652b5f3e67bfcd8341b773bce2beeb40114392a4e85a89b6bd26885544baaa8e64c947e323c937fc5064bf1d87ab0ba92f8ba3db0c51bd768317cc1dfe684f5cb4f22fd5429e95ea10e90e7e5cafb32f7defd058689d02ab43db72385ce97ecf48842e431411a72f14e1a563df", 0x7a}, {&(0x7f0000000480)="aaca608f0896a51153ad2158ba3310cad0a918972ae10ca09a9db1207c6d8a1e9629ada244a130e0d78a3fcd8235549c0acf6af5a980f00f3631223adfc8655cf5", 0x41}], 0x7, &(0x7f00000005c0)=[@rthdr={{0x48, 0x29, 0x39, {0xa6, 0x6, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x21}, @mcast2]}}}, @rthdr={{0x78, 0x29, 0x39, {0xff, 0xc, 0x0, 0xb, 0x0, [@rand_addr=' \x01\x00', @private0={0xfc, 0x0, [], 0x1}, @private2, @remote, @private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x16, 0xa, [], [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0xf9, 0x3d, "2d9e7b5b755b45a38aa47363d845fb6a373a7df603c5ac18e8168acbadf715b0acdfabd1feb6c8780edbcff0c74c23e48bec518b00783d1f28075081a5"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffff9}, @pad1]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2f, 0x8, 0x1, 0x1, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @mcast2, @private1={0xfc, 0x1, [], 0x1}, @mcast2]}}}, @dstopts={{0x80, 0x29, 0x37, {0x2f, 0xc, [], [@enc_lim={0x4, 0x1, 0x81}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x200}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x2, [0x80000000, 0xfff, 0x7, 0x0]}}, @pad1, @enc_lim={0x4, 0x1, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dstopts_2292={{0x40, 0x29, 0x4, {0xc, 0x4, [], [@jumbo={0xc2, 0x4, 0xb01a}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}, @ra={0x5, 0x2, 0x8000}, @ra={0x5, 0x2, 0x8001}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff8}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x32, 0x1d, [], [@generic={0xff, 0xd2, "b985f76439a56db3b6d297255ac7919e77f04cbd2662c82cc537c6864659e832181503993bf4d4b646d1971498723bca6d8a8b78bb33e1b026ab6056f2ab624c4abad4cdb7ebfa01e6f39092e9dd335c7b635bb84cd21136910139c52779dd28fc63070b1c4ce749ec047e8b04debbc5379fa453cd94bd1eccd65c6188c53d624a06f99b8f6d922533307c3b9e925564cfc3b0b1905b2f740db44b26955d3cfee76adc857640ec2d6dba72c347d8cbf9cae2fbe50f4809f53fbe9a70d371cedcdc2770d81274224ceb1e67391ca7ac0a7efc"}, @enc_lim={0x4, 0x1, 0x20}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x380}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x7, @remote, 0xfffffffd}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000980)="17bfad9ae5dfcb75569a267d2294e6561998d894831629f1f18efe8306a3096b3596015065ed94a620badd0f7e11e156a29636b569987f5c6ed46c760bcd2b996d34366d6e4578d7d70de6f7e3755596ef147f338e8a0f7c8bed95d71384b530928dbd07260ad2d8d6d8b7fdf05db5a9f5da7ec091b118a5f367cdb73535fed3b8b275a1b58b9b70089e5b1b46a299eebc9da9856d5129b3d50671d9ae959a75b4d5c7ca12b22f09cae9fa6d8333851f6e117d209a906709a32369503881e601c934aca300bfac289a99c3852fac91", 0xcf}, {&(0x7f0000000a80)="30d8f21c3feb67cecfecdaf89f99aacd293617d86d0fecb2193996c886f7b72c05dd195e22ce4e798bdd03f6061ffa108486eafcc26c36022ef7d2dfe7f06f4218e54be0fa9bb3cb5c294c9f282ef90c92e25a60", 0x54}, {&(0x7f0000000b00)="e4f4817baa69444596b36ac9c2e076c4a4a7611d993f91ab8dc4f066a4d262f7b172422655a5eefcfe850c13a01f05e1b82b70630c23828d5956f58860439474ef273b45c63b87c8b8e88498c581c32593ff1ac61c22ed707b21d7a8", 0x5c}, {&(0x7f0000000b80)="a98ca3c28cec7bcf6bcc4ae8dc7ff825fc81598efcf7c9454e129054e7b99ce488a2be5dd3af7c8e0647bfa4fe", 0x2d}, {&(0x7f0000000bc0)="658336cc7eb9c487583339f6fec38dcb11ae40b637816dea8054388b5fc6f64ccded6757434e7867524eddf515546645e4035d3d7eff2bcf16e56cbb8c7ba831c09d4374680bd53a42dec2631918468dabd3efcbc93064c191bd585d51e4c7a5671b127701c71ea58ae0158ab327bc220b8bddd14c988b46953228398e64dfdfa99f6298d2f783841b2ac63bc9eb9fc46719", 0x92}, {&(0x7f0000000c80)="0b7bd39ef5868d76e949726a3d48467b4725bcada9996aecde16759f07354d04", 0x20}], 0x6, &(0x7f0000000d40)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x1, 0x6, [], [@calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x4, [0xffff, 0x8, 0x5, 0x101, 0x10001]}}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x68}}], 0x2, 0x5)

[ 5657.410481][ T9115] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
01:34:21 executing program 1:
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000400))
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000340)={'ipvs\x00'}, &(0x7f0000000380)=0x1e)
r3 = fcntl$dupfd(r1, 0x0, r1)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001b40)={'ip6gre0\x00', &(0x7f0000001ac0)={'syztnl0\x00', <r4=>0x0, 0x29, 0x7, 0x3f, 0x3f, 0x59, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, 0x8, 0x40, 0x6, 0xff}})
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$inet(r5, &(0x7f0000000a00)={&(0x7f0000000480)={0x2, 0x0, @local}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000000c0)='\x00\x00', 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010100, @broadcast}}}], 0x20}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', r4, 0x2f, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x7}})
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000300)=@generic={0x3, 0x7f})
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000003c0))
readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r7, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r7], 0x2)
sendto$l2tp6(r3, &(0x7f0000000000)="c1009559c0aafebdacf88e166c66d687aada1f00abcdc0fa57c2c480adde09be6eb2730a26917ec6f721d0bdd6a0bd1e13b78c675ec95fc17aff45ecfa3d93b70a7b508fbf8552abb48992", 0x4b, 0x810, &(0x7f00000000c0)={0xa, 0x0, 0x1cf, @remote, 0x7, 0x3}, 0x20)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)

01:34:24 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x79, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x2, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x1f, {{0x9, 0x24, 0x6, 0x0, 0x0, '\b<LV'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x3, 0xc5}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x3, 0x7, 0x20, 0x2, 0x3f}, @mbim_extended={0x8, 0x24, 0x1c, 0x1f, 0xc5, 0x1000}, @network_terminal={0x7, 0x24, 0xa, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x6, 0xd2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x80, 0x20, 0x8}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x44, 0xc, 0x40, 0x47}, 0x43, &(0x7f0000000a40)=ANY=[@ANYBLOB="050fedb60607000212470000d9104cee7dd60f0800e1000000f5ff6904f7716ab60b100102bd00000000001002040b43229c5cb3380e72c86277230bf11b032e2a00000a10030000"]})
r0 = syz_usb_connect(0x0, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001fe879085e04ce04ba59c00203020902"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ecm(0x0, 0xfe, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x1, 0x1, 0x2, 0x3edaf70cbd713ee, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x7d, {{0x7, 0x24, 0x6, 0x0, 0x0, "ca60"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x0, 0x5, 0xf7}, [@mbim={0xc, 0x24, 0x1b, 0x21, 0x729, 0x6, 0xe3, 0x3}, @dmm={0x7, 0x24, 0x14, 0x6, 0x1ff}, @mdlm_detail={0x93, 0x24, 0x13, 0x5, "eac0eac46bfd36689584127e12976d7dc8f081525f90929630cc86726d7f43861ce8e374dc3afc7d5dd87d3ef03ceb749b9d240572d56d3a833d39f6eb4870333b1014f73c4b510182a70edebdd1b0bc787109ff78aed64bb3de4c32714a6b20eaccdefdd7bbd5472e70428b544a0f6704045dd08ff721e5588b827485b38f630abbd8ad6aecd99df50a0ae91cac1d"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x0, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81, 0x5, 0x81}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x0, 0x87, 0x6, 0x40, 0x20, 0x20}, 0x34, &(0x7f0000000680)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x80, 0xf000, 0x52, [0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "5a539a59025a047dbce4f4706ae5dc1e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x0, 0x20, 0x6, 0x8}]}, 0x1, [{0x64, &(0x7f00000006c0)=@string={0x64, 0x3, "60a9e3d749e64e7bd516f3c286b0fa886e3a6d05cd156bc51e6da39bb13df3ca4f40831f49ff6bdf657c91cf83c8ea47fd86497ea446494b7333c3c4d6f4b3c6716b62f7666979a76d741f5abd6c091e47b97ef81f69cb25549dc9e91daf45937536"}}]})
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000008c0)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="4022c5000000c5220acdd7e742e8b6b8de173584a5a6e9b3ad1b213bd1d365a8b26ff77b621df1f9e606855cc1eb63d25f54cc397410c2b364c50177251875459141d89477f51017072b2e465453aaea1c5d456e953e41df7f21ab4fe00ada50cd4272699c9322e07298e7176327141d0b9a12119a5ece425e16ba563bae250eabef600b423f8600d0a4405cc677cfa4942eb962d95f8c91d6ec8d04ca85debc7a45c6ae3ffc277684541ce1c70ee0a7ec49a89249dd982e9acc478e30c00bbe9a08046a00000000"], &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000900)={0x20, 0x10, 0x78, "5f6b6f0e15d7775ad44f2934a723e2ebb06cedcd30081fe76a7a2bc86340549804527585be64deb6d5018b711c7257a1edbafa38a7418cd3f453bbba74a3bfbde37a41d41c86acc2e8005231c3dcccf6238662273002372d838eae0ac4f7c17900066e2cbf26bb7a8b329831c7dd292489b4f920d5c84a3b"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7f}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x0, 0x7, 0xed, {0xed, 0x6, "75a9385537787f7190a09f10c273f0b352c2f6baa6cf882ea949b7105e712b52e83e403a755fa3dcbbf91e21fb577fe742aca4fba16e47b274d651ef816514a8552b8fc3613b957acde5625b79a171bc1597744605e6cf33335dbb3c9d92b710619279ba0cec124f28e96dc54fe028a8ba9a4d95db8a80ccf3be694459c7e54e1e14f52410013e159694d23d545fd5179306eb4e44ac1ec58b261d3699df73370f00fd10c73fa4779b6c18a180e2edc66f4fd98be1f540e00225b09e259be67b52c6e673bbb46893128dfa6994115ab178f673cfae6486ce94ee015b299585cea881d5e2f2bdcd16ddbac3"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x0, 0x13, 0xc9, "89009e3bef5b605b9d638e5103b886d81600eaca5c1891cee4abc4d16f00fb81b596cdd94332ecad95d8003ac970c4d3b0367287f1265ec0353c5b510b76c40bf6dc984f0755cee0d3feab713d5851c498d38870484a418c16c5bde923f472de02d4f98c149ebf5ca4eac30d02233cbb5c20d25bca00a433a1c49dd9811d8320cf4193f5b45b78617734fef3d0c962a5fbc70a1f92bae86878ea166b08d9287b61580e4abc5b718a32a9ef7c7faaee7634add869da6a4c841dafe934df48581d8ffb2f3f5b4ac383fa"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5f}})

[ 5668.279250][ T5197] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 5669.156479][ T9339] udc-core: couldn't find an available UDC or it's busy
[ 5669.158116][ T9339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 5669.257173][ T9339] udc-core: couldn't find an available UDC or it's busy
[ 5669.299977][ T9339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 5669.639425][ T9339] udc-core: couldn't find an available UDC or it's busy
[ 5669.641103][ T9339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 5669.805268][ T5197] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 5669.876491][ T5197] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 5669.879477][ T5197] usb 1-1: can't read configurations, error -71
[ 5671.925872][ T3354] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 5672.339875][ T9339] udc-core: couldn't find an available UDC or it's busy
[ 5672.341419][ T9339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
01:34:33 executing program 1:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x80001, 0x0)
r0 = getgid()
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, <r3=>0x0}, &(0x7f00000001c0)=0xc)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r5 = getuid()
r6 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6])
syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x401, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2000}}, {@max_read={'max_read', 0x3d, 0x61}}], [{@smackfshat={'smackfshat', 0x3d, '\f\xe0\xa3\x85%&&f\xf6j\xceM~\xd4\xbf\xbe\xea.\xf9\x92\xd9@\x14\xc5\x9bzR\x88\xac\xb0I7\xdf\xa4\xe6i\xcd\x00\xc5!\xed\xc2\xd4\x16\x0fN\x98\x01f\xd5\x82\xafD\xae{>\xec\x92\xd3\xad`\xa1D\x05\xc1<\xa5\xf4\x02\x985\xea\x86\x143\xd9N\xa0\xee\x01Op\xfe\xd6~$\x19>+\xedk\xf1.6\xf3\xc8\xc8\xca\xf9\v\xf9\xf9K7\xe4jO\xf8\x12\xb0\x9a\x92\xad\x90\xeb\x13&\x84\xd2#\xd2\x9bn*6\xd4\x8a4:\x1e\xe3\x9eIz\x11z\x8b\xc3\xef\xe7a\x12\x7fx*p\x96\x93\xba\x1c\xb0o'}}, {@uid_lt={'uid<', r3}}]}})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x0, 0x0)

[ 5677.292598][ T3354] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 5677.365925][ T3354] usb 1-1: unable to read config index 0 descriptor/start: -32
[ 5677.367776][ T3354] usb 1-1: chopping to 0 config(s)
[ 5677.369258][ T3354] usb 1-1: can't read configurations, error -32
[ 5677.615287][ T3354] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 5677.825812][ T3354] usb 1-1: device descriptor read/64, error -32
[ 5677.956911][ T3354] usb usb1-port1: attempt power cycle
01:34:36 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
openat$mice(0xffffffffffffff9c, &(0x7f0000002300)='/dev/input/mice\x00', 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002380)='ethtool\x00', 0xffffffffffffffff)
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x40)

01:34:42 executing program 1:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00', <r0=>0x0})
pipe2(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x4, 0x0)
read$alg(r1, &(0x7f0000000200)=""/4096, 0x1000)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, r0}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "58b637be667088f1"}, 0x10}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0}, &(0x7f0000000080)=0xc)
syz_open_procfs(r3, &(0x7f0000000000)='children\x00')

01:34:47 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
ioctl$int_out(r1, 0x0, &(0x7f0000000000))

01:34:52 executing program 1:
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000060601020000000000000000050000090900020073797a30000000000900020073797a3100000000090002006a4a7a30040000000900030073797a300000000005000100070000000900030073797a30000000000900030073797a31000000000500010007000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4c040)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000006a641059655a4e10bf1130ee7fdbd1e0010200fd0b", 0x21, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}, {0x0}], 0x0, &(0x7f0000012c00))

[ 5696.265345][ T9959] loop1: detected capacity change from 0 to 512
01:34:55 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r3 = getuid()
r4 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="9b76170625982bf29c5739e496ee910c945572a19c295ba02c726fdf1d6d6f64653d3030203030fdffffff3034888e5aebf6859f773dcb21fdf48c01698298304707ef43243b05d52379d6333b56312d21aa05cd6401bb3054df9c14fe71991c1f1feafdf54ba4ba22791000b1cfcb476765122c4d9da115de431a948a29939e141c610879ec3342", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4])
fchown(r1, 0xee01, r4)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5697.173368][ T9959] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[ 5697.176085][ T9959] System zones: 0-11
[ 5697.370809][ T9959] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 5698.900884][ T9964] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
[ 5699.489753][ T9964] fuse: Bad value for 'fd'
01:34:58 executing program 1:
pipe2(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x401, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[r2, 0xffffffffffffffff, r3]}, 0x3)
r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000000)={0xffffffff})

[ 5700.096809][ T9964] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:35:03 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r3 = getuid()
r4 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="9b76170625982bf29c5739e496ee910c945572a19c295ba02c726fdf1d6d6f64653d3030203030fdffffff3034888e5aebf6859f773dcb21fdf48c01698298304707ef43243b05d52379d6333b56312d21aa05cd6401bb3054df9c14fe71991c1f1feafdf54ba4ba22791000b1cfcb476765122c4d9da115de431a948a29939e141c610879ec3342", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4])
fchown(r1, 0xee01, r4)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5707.707220][T10170] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
[ 5708.560026][T10170] fuse: Bad value for 'fd'
01:35:07 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r3}, 0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}]}, &(0x7f0000000140)=0x10)

01:35:11 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r3 = getuid()
r4 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="9b76170625982bf29c5739e496ee910c945572a19c295ba02c726fdf1d6d6f64653d3030203030fdffffff3034888e5aebf6859f773dcb21fdf48c01698298304707ef43243b05d52379d6333b56312d21aa05cd6401bb3054df9c14fe71991c1f1feafdf54ba4ba22791000b1cfcb476765122c4d9da115de431a948a29939e141c610879ec3342", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4])
fchown(r1, 0xee01, r4)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5715.311198][T10230] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:35:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x5af200, 0x111)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r2 = getuid()
r3 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3])
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x1010, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@measure='measure'}, {@seclabel='seclabel'}]}})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040)='/dev/fuse\x00', 0x2, 0x0)
mount(&(0x7f0000000300)=@sg0='/dev/sg0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x16080, &(0x7f00000003c0)='euid<')
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)='fuse\x00', 0x0, &(0x7f0000002100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=<r5=>0x0)
syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x82040, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000004,default_permissions,allow_other,allow_other,max_read=0x0000000000000020,default_permissions,default_permissions,euid<', @ANYRESDEC=r5, @ANYBLOB=',hash,seclabel,obj_role=@,fscontext=staff_u,subj_type=^@,rootcontext=user_u,\x00'])
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)={0x28, 0x3, 0x0, {0x1, 0x7, 0x0, 'user_id'}}, 0x28)
r6 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r6])
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r8 = getuid()
r9 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r9])
syz_fuse_handle_req(r4, &(0x7f0000002180)="03cb94c5f32e35e3d7cf1539098b2e947f6416f2993e2f4f55da8f9105ba45fafa5567a5de0f467e9030b180b1cb8a078e24c3cdbddfece8f8df17346499e05ecae153e9de17c1fdb8da9b1abbcc4abc072f726a6da0f2321c7132aa8a95dc66008b0b4b9f9178a2b82418e1c1c9ef9b1aae148aa522b6340c9bc8ff7fcac0aa95b4ee9e88c6c2885a19e430f311e23e86b55176191c29def9c4836bcbe0bdd4c2c289186b18a5530d8fea31bb0967de330aa6c483d5ef5012643bec9cf6261c105c07a43dee52f18d9dcf16eb37aa508ee1018fab618e20f74457fb005e4ffb5f9d5d09e78baacb471ef4e2e3615aa92b1ae806527c4554f8166f27b52af0e0b7061df285e2153a5b539cac5c667a18d50e53366bb801c191cebf1ea024891999bd0b4a7b42703cf8523784c434b6ffd47527d2ac8441aaad3b752f979299d3ef049c4dcb528fe2b921f5fa92f506a21d6fee83ead000502867a91c54f3da9446b8d510a60fa9045aafe7259fc8b573c03d3d6e9960e0f67683cf5ee0bde08548c4106faba7a3c4f946b899c32e14c9b7e8164a6aa292482168f4d3707c5b7427aa240e21f2340516ba0693eb9be197b6662bb005fd9b226c50fcc2fde2ec4cb28a2074cf474864e78d51a6f7d1a1b688f3e86488b940f0627862d41f79462c68f98835857828b08b396f7bd11a25d60d18f8303f0bf34277a39b5d23ffaf296fa37398efb8856dd3bdf75cc635d67f85a1af954930109c602f2d0c2feccc93453e99083a1a3a5cbdaeadf526113c8f756c5fe593d7c1ef1bd80528337fdb15d283a27d0531a7ab81dfe59263a67a7222add39227b0f92c5e733aed078bc00a6eb234e1b11fb3d71f3ea0b3a783875af95cab6e4ed65fffdfe940ecdfe4c3b0c828e21b7ee0de71262704802a6bc56fa90b91cd4e978f9ca3107a1c33a38cdeaa0ad2f4612b9f4a23bc83b09fbb3863a49a1592af1424507648659129c801e122c1b1cb427d9f54478432be8ced7d06fac614c597867b5400af8dd070b77c376a7692702a4a419a0a46a855e601b8cce1ba70a251af5722750fa43b5c8eefe79997306449e55f00d161d557668adde3341668f76dde0997d10faa9352ed51e6db8d45ec839c229d3930451944d93d5b7446cd446ac83b31a014a9ae53750c9b2dd27546703da3080e10bae98a8d290730ba8af5f94b869fc1f1069abd5387317940a059753ceb557ffb1f975481a49618c2e8a09ab3e145a6df5c41d8319c201704a727b1be135852176e042196e49725f0fb8f9fc08a8bad9b579b13c43eb47346595d20dd7a49bd990b0d123946aa4e998dbcc4627cc8b1cdd8d7a37a507f1c7aaabba159197fff5e6d045adf3cc21e60304b2b227315d716e3127c6d72c6cb0a36c06c3a4a749ab84950ff8481332080c1fc13bd936203fe1919d14276df7706c9929586b56edd7ca38fd63d26a54dc5473561e407cb51ce24d23953d6906d548b383eb543f02422b5a264f4a3d9dac3f1cda5c48c84169b0464928a05a654fd7c53bd9379c76a10907bc8784c1ab42503b45264801aacaa6ddde83ab699aaa45279ad7eb8595cb84dcdcf93d30cd228d5e98985d84b85ad074f832015e9d4b2ca22bad40f9ff353d4835315c1118d77ea3afe72ae2f305840a184fdacb71bc86d00c1466b0c6b922eba428d36616247d9800d1a0ad8bcf8861298d343b55c837a3fdb78399b065280805a2ad549dbc7e8f8920159f868404b4de91d8f05ea017caf2c0993993ddb960e7d41dc1cd15dd88458fbd7ee8515d47df48c632c3df2742228b208b61f86aeb9d50aa61b7a8c9879a6bad72bb6420dcc58d71f4867ff9089b301384e4f838db0c0b759d157821922beba0a43a0b1f22659e12b0e506c341c18e65f96cbbff1eb664a57e761c5a0ce0315b5eed60e4bec0ab760e5b2e48a4c99b165527b8102d368c51deaaf139cc058b7168969074ba0bb2079af9a17145885ac23127bcbc64b28c17b8a30a2f635ebf606b0b49d0128f960b1eee402bd5a78a17bbd3fea41ca2ead04dc71a5bd674b47e62cfe712ceb0ec9beb0a102a04ebcf97089d3dc8fda933c695c77452315f2bdbddf7b639359b2f64bec4e82ee9ab7a659ab10d6456ce3cdb5b4f5e6901b6fb69541359477a9d2bcf550622bbaf962d24495879022e7b73a37b1c5cbae3984a47bba83f75d52332589c39524483ad2bf39d78a244768ac949a3da9974abcac261610653396091e327d24dc8d42865c092fa5fbe902f2aadb144b8e116948d9ab496295e5d8c22edd2aceee2a573554b883926a7a9e222a305dadabf91aec31a17cb621a0543b273f558b3f3a4bda769ba73aac1fa9b0945ffa54738be5ba1c12303aae803059d62e67d087acf5b4c865bd70c04418caa1457a6514e7b710bff8bb2767acc82904e547af81c41f6be504a142e44c3ffb7ee1d691d876ec2ad49544f536db2b13fba8263e0e4168dee9025cb0334fe7e76e7308d86338bded0c65d589045078ca698f85d07d63e75162dac300d3634eb936091d58983cabc8136cab018d0ea2bbbafaef9334400b8ab1be40820c0478b87c086e658a7e1ddb3b2cb8a117d57130863b9a853e254676c540bf54ecfb41144afa4f4f82b5119a8234f7b4bad066f67e0e07513d033491fbe16268e8449eadcdd5f8a45b86a4feef2ce439d57847f7fa4979c4ac3b83cded69f0cc3aae5115f28010ac0d595c0a9580df47ec9e450391c06d4bc0a7a8fea07ca8fcf99f6c97a42e16c896287bf9c97d53947f0c312282012b2c4a9e3451c1244b37a9698030ef22d0f6c21d857722fb8e0a4930ecfa1cf89070a9edcf71d6f8a8c0c1fd2753d4773256e0057654d4efb2114d3578e0472061ecda2193358e88231474451aa7786e6cf6763bca32984806c172ff4e5c82f5b9be5a398a68c183f67fdd1ce936f8245766d95855fe486f9ebbe6a05e2aafc7f5bce87918d48194d8c9785d4154fe3bf0906bcf41b62d5b81f4e863a513d0404ab27a3cae746dc7c97f45ddb71d31b5c0cd1dec3db936769be5604696d2d257988ec9a3c177be28036e5e1ce0f38c9487225cf7f72ff4047a5500d0b76f4770a5ed3a50dfb913c425da31ef91f0dea50bfb5d29f082a9eade3ee1d2629b74cffc04f3ed5dd0b14c10be0f1d2e5b53e0aed626648b65f23edb6cd7fda5a77045ad0f310ef7fb13ca363a2af2e08059174c03fb8ea7ec8307325641f156fe823b48ba03d6b93fb99260735566001925c18576d49232522e4aaf8ac13c6f1f8cbf1dedbb95a6b037398bea0db1fbcc3e5886923546635ffd06792d5a0830e5df1e6266a841363f00a520d10bcd87cc9eb7a059f4a566253a561edc19f028abe4830c6ef35220a390f05b5458371ddc1dee98e3ee2505c2e018c8568ee89871182149f40e2876ee7876f8a8ead8fe12db40bc230ce77efca376ca1b43cf4d672f2619c647a36ebd6fb458665141e4026997bf27a24beb61ed0a79e0ab98e50ffee6f749ff91bbeb630c52c682808030716d73588a97eb4dfc9586e636561528a4cca45b12a93279cee30b151b2813982880f2ba688d188c7cf21123d96ff57240c6620daba48c48682c032cf6ad88fb2c9804dee37ecf83bc0d26df7f8689821a51eecf1508e3f3777a8258f4426d5e415db6df0a400cc9abc544d51bf9ac17c5cec92f7f04b83a57a5c63a2a825c045d1275436b1f960a2fb3b66e0783adceec00a47b7b87dbf5ad5d6b92213497a019507a82a9be85b9ec97b2ce54a694a0d1d6adf31c798dc646d698a573771f90957088224d6426be5e1632de484803addad0fda49d24bbff917b40427985244ca320b6849588599b19f0a941caf655b542b449396450bf5829b68abebd62b617c5beb414363c4bf161fff1b30c1852528709fb3dfb4c0ea975ff03e403174aa1bc2cee00530ad8267e48390be6d3975a08ce6e2c0a48472b51a1cd43126a60d4184cc2bf369b263632466be5fe5849fdca299df7cc404e81cfcdcb36fdaee2dc63c9281434a06dd63252e659569aeadda4ee6de7ee023c1f93e2ff6ec8fb7a062e11d1c5be27f13c428afc082b8180de3fa6cd781a255e4f9d90260bd4079dd2907276780dadda0a405ce82dcf91532460373e36174f6ebcf27882bf804f73d2f95869e2397fd88bcdbf04f3ada35dfeaef8d6306483a327647ee83dacd015a2657a2af14a044af656b0575933a13109d0af8eaad6b62cea8c74450178e7d373a4db97375f6913a071f10d18a756d4cf380fb3c23cad2bc3685aa8dc8c0b2b2d93442d07247a48b120401b46b4517e79c7d6f236a4c1c848dad6af8a4dcbd501f1c8f61078f6aa3436ca8278dbf87a5eba1096c151f2868a43850ded657e88ba6a3e81288fb78d4b1655b4018c12d686a807253abd671a3cb93d6802826932125e96a9d574068fb812a406d8debe6ebbcc911f7c694b6f596846b6f2b5b47cac774484b0f7e9a81b5cc36fa6925d8ab7247e428b81f0a15184c2b5dd6f3def95821616487724191a82374d9db92c6738a1c287e8e7f2ba303194fa2e750aa7bb10233b4250fa8ed3da1aecf0c1599e02a20af5a67826f9f754c243798ecb424a5a4b3237685c6f19813e4399a70d88a44a51ceb3b1ed30597709978190c6e66a3fc0320026636b89da9a39f02490b905fe90e9ca2ce07ada2d608394ccd99d21997e5a87bffd5de13883187981a38117b63b025a61384ed3ebc1893fda92103f1d6f24ccfd9de3e88a34391906b7d110c4667b7d749d61034a1a3ab719d7b493b297087844968e9884f2494ed51ac43be1ccc2b41ebc32e05adfe819423e9287088f5155178f82a29fd42bb54bffb146d6143b51f1466b78e927fa6d54743aed814c93772ceec7d3a36b1c0c775a1a9484effd044bb343acfd81a616993432954a72874610d82efcbb2d9c26aff6e9e761de9c5668af4a2b630126c0f75e2c2f741883035352303a543def120ae1f0a28198814987d618629203fec3e81adf82fdb33407338a79fd197bfc4424eec4956216f19684ca8ad007c2d7e5c139321f80298233ce76d7d18b84bab635fde26ed12828313eece7ea557e859161541625f24d7261c474d8c0c4f9d93096ae61484ed131617a28604b433211c52531e56554f16ea0f7bd4f81446560ef0897517c69a5ceac3a0cde696f347d971aaa1cb603d7dd3baac8f168abdc57c311bc9d4d979f50a3489e1ac528adc19034d3b91b85573dca087f9181ce9d2986802bfbe2f5a68651de462a80110b6d9f76aa6c792a2dc4720bdb6b5551035984d408efff2769eff19180319743722052da2ca3612be68e944011cba7efd3a8b81e821650adb6a404f3f5a4b4fc0a1b5f50fa7772b998e1f86da0f19a99e0a1b8ef50528044859b1bfaeebbaa9113aa724fcca9d5b99e594191129d65eaf4b2983f5f3bd42976cffa59c86e2c93cefe488178473db9035f918ead05692898172c9eeaf96076c101244ff4cd50c95b7a6af77c19a10980d257c5e6b23ae67c233555de36e4f53dbb9a8072977ce2c7fa2cc8a6b9ebfac42d8daa97ed17ed87adff3a9bc2d2f106323e73f99bdd29341c315521fcbabcbc6c4e402b86a4fa61c7c74805e47d8200d4b1686a82dc9c0854425e34bfae7afd1fcbe76ddeaf735a5a42b93be54e46ede2e32f3dbcc635391c9cc2678ff88e79bf07801422d16b6e286b518c73797667377fdaab89b4cee940fc2d586f979c402ed1f3bbc84720191792b96b8efb61b79d2cabb14cee1c3ff63aec21e69df3cccbabf328eb76d82d3a5a6838b30ab356f4c1f1dc3e006610b5aaf76b8fb0edad79234d8a02c26982e1082a711bc9d53a4de668a60f986d275c00467e6cf613aac835aec8f1e7ccc6a09f58bc127bb7fa1756214fb6b9fdbd62e46f87fdb60e78718a11574322019d7d302aab148b1323f66b7a9181439672180f5351c1b51f6468f6b34bb960d60365b2e0b76a4b8cee1ee677a077c9d60b27ecf82d6a386ef0a0cc6eb7ecc641fcf85ddaafb0295349aa59d8c6d64ee3f1f275edd6f2e92524288dab20a667a38cfd2e595fb52697df1c07a59bd94b7e2cfe5c3f0aa8f8d0b33240fe6b2c5752f870c028293b643e23920c181e3bda538db88d3c26e4b929262aa90717079ef176c4ca42dc210d06e2bd5d2c25bf2ee9f87f15860b99dff042ea34d2bc832ed30ec9d32c0dbb3c6792b16d18f23effcd84e23102a1e4d462b633bb875941a9780edf4b5099ffb17bafc6c323697283fb7638f06b0291cb1a103ca969bfb4a0aeaf56a144ab5c272ddd73cb538083d7f1ffe5ffa871e9cd8e72b484187ffbaadcad9eb7f94db237762188b7ea819c83bc516e5c2ff95873cc5e45e3cc29db5d46f9407dca2f1260762a8b213e0634ce8e3c29c103949aaaee81d654f0c6dec3d591f02d10afa8e3ef57629b8647fdd09cbfbe5350561a71e2042e5c332c3fd3ad46f4476123872af9a5649aaa8147c860a63bcef5e7d7b6625def7979f7cdaf35add072c821742ba70b0959e7c3de3dd70e138732d2d4af86c6ea3e714ff72a9c1164d0a1f9850f4727c1c4df5c705217140bf62c9ca5577d9563a528e1395e18e4179b9c919c458b00e3de6cd4475ee96e49cb6d3637f27d475bb9eb0edf4bb135d0a1281f0c45210fd22d85a8bf1bb0635a4e0cd35b49d4a601c0555642ed59d2080f71c33bbe08db591c2b281868d238aee5356543c6e23f56377fdc6868495df0c71841750f6de4b5673382e3d81ba9deb004c8e620d8e8b59d788229356c0b6c536d181fadcee4ec51e6720a7436eea0447fd264c748574d16e740a8d4d401729f0abaa2a75f00eaa5fdabf616ded432ed75cc5cf61a9971d251964889c55804167ea5112bff0db6c8405045b1a02723bd48bb0b9a4fcf99b5798d2b81c9d43c6ce7e7f86c8fa2cd90d94a9a76579b6da3db4af255c27967c02f0cb4c24b88d5331f6700e37b0fa27cc364bc8cecd17153c1804ac66bb5a9ebf6747239d4ad398ca78e443ed53ba487dfaa3cc844304b56adc2fefd870b44a5e909d693297936865bc710c3db86141ab3945510723b030bb155989e753b96e1766dd19076b184ff7f3516bf76a80279a0f25f63de824d5bc9aa0c9020aa8d1f26e8229188724a225b61ef13fe4bb3081dfc591a35510b14c556e6ae20826905d1e11de722d5a69a913109dae9d10e389783c46525425da199622e6e06a5e4b6cfd8083c101f51fc1c872cd320a5bab0d88665d6c5ef1908aa1950ffadd662a78f1e141b439054346cf09efaf2b26b20fc775ec74087278cc30259db70bdff01bc191e48bc4ce2cec66274ebfa2713124177d514698657ca1bf71e63406a891c739113f13abc433a7536acf1d2740f90afd4b14a47e7346b5e7c3ecb04c07915d6d7d5d9daa801ed5032d2462449cf24015a5beea835706222001f8d593f2b3cfcecf36ef489d79f9c4d9a239e581a03b5bdcbbbfec07df136b7279406d262ed87803d1099ae23767ad6ef2ea0f2d713c8e603d3f4e2c057f5b7aac3baff0c095e60eab3ec3d617dd80114ee897a9f942de949ef20d1bbdbffd4f8ec1a3f088e14ffeb0dc3150976e20f729b52bb0c1739b2b024e5eecf56c403a705bbd643333201bbd1e231438620cac71ee39927481999934a09e4d4d306d1b8e75240c85360a54b32c8b227314765a9b9dc5a63fcacb32ffc1cee39579b23598f846cf965a889009b6d6e9cd56f2c231d71f732c96cb842b4195d7a8cf581d0fcc16b29881eda557b1f83541c5256e8ce6ed2505360714d2d75474bdd37428895bf8c09ff31b51da6767d6890ca23e49a9dfbbbeea0b879df3f65dd9820e71306d94843117828f7a069374c25807bf5fdcfaa594198c4498141e405d03979d37739e497c11c9e792d4d2b681b1f057a8649ce1abf9db4705ceff04812d270a0892a1f5b1502ff79c0a1a4d03a1016946f941cb8a8807363ca901071d220ef9f9246e0db32ff5c44389630102bb8b416a6516ede60308c1bf023ed4609dc0678e7a14d9ef82a3781b51faf7e65050faca1b9617860d6250a70742654c09475d3af5ec01132d4b5f03f1c6eeb56dfc7f67a353f1cd2eb0e60c68b877647efbf2bd0f3d39ec1e880d486456d91e77c947bc2ae2d8b26ff7ca196034610171eac32598b6dd30d6c7eb90a7957161240ab2d82bcd39e4a7607ca872dce478487e887240527172f7fb4aab49c83a053ceccd9e67be8d9f2e52a723e879ea3aaa2be46f9bd48c030196d9e232a43d156020bbff8c00908991c788d2162bd8e8b1c3e93d4c6740a16ac902264e6c68fe5606d943fe1442311d3cdba77801f9607f238ab9a41f6094028be84fc79b387eba8101d3f851df3a318032f391a568706e26277d0a65d783dc01b3f082d846b1e0bf1f5016140e2cce17426a187da8b7e3afefcc6e0c1ef8d60c232cd867e9c37cf0611266b6bd84be585d9d62decc5b05987cdb15078734ed4a7e042f7cf0d9611b6de0f6a1b1cb85b7ccbdd6a194198b8357cce027780eccc4baf6a492a78577dc7650eb4ef6a7fc09b7bd6f8b3afb135993ab2efb63947d477a237f5c9a4b6b1ab06f81b37f184e8c268c311160f96d49fc89b51a571f8cc3ba591c2dcbaf6018a8db4cb0e9c20a2669a136a762008988ba07f84ca09394f391f039fcb4d59af00d931cf8163abcf257062cac35fb0cc74736e8825559b39cb6d23afcd441682e7367a459b38a1057240c5e17e84c1657c8757241ddf104192307c648372a70c5de9c19ec01d15f130772ef876963d8fab7a1f21bd56e4cb5a35c84658159c95ce6d90e2996a7000c38dc3def751bc266f985707469ed7a72abd70063e177e64702d1e202fd8a4daf09703303ed9ea9d899d7f5c081346efdc32eb8de87f47a765d6352f7bd75711d6bc23909dea0dcd5176c4cec6223e34b1db9845e4098f792c1370f20b882556343d2ebe6c109376dd7cfaccb9f9d905bc48ad31a3fd8b2b4f6177c8ddcb71756ed2a9d8d3f4d8a233e418219e1b089f5b71146b808860b4c60e5d522314804019c04cd2e64fd5423725de58e7b0e25f79d90ce56b162d7da65aee5761183bc6ac09f5c15277e6d5c9e0f3c305cb510fa3956a09b3d487cc247448602cb6fb88cfb4923af30f8fe5a031af36a9d7c9a614955df5885bf7ab23eb5c6445ce2ab286d2b5e7dc5f07d54069ae87ecd9932e85c0067666e3f9cc43af1e74faeab7dad763d8c78e44f9e0dc41d37c986c98bf1af8c5889b5de4dc928bffc03fd4f4bb167eb9c51967ba45a42bb7f61f08381a44a442a22dd5ba13de77e22fa61108c40e8708840b94631646dd63e8665a5ccc367735fecc03214954ede615e8725456d099b2c7723bb6c1a71e64ef49c998bc24d81bd3512b719f084298088b1edca31b326ac71b31befaef79fd138c6be9f7e351b615769c018148304115496c98a4c83deb22f401eacd4641ab93c85ae4776b3eccd27b497971627dab025f266db8aab7ffe029bb6d126da4f91269660634a7d2535d874cbf8fbed100319954a6ef16765f215438286b1f917382bae108f520aa81822cf3e2ef0bbbae49bf8edf056e4ba285fb274876549ad33b540b2c490b54c85c39355156ca9edf9499ad5ec93649f13b1fd9ec9057b2adbd1623a04ff0dec411dbb5fc89b2340e50618f09fca707833af3eafb29ac357e28cd7eb932827e8e479b89f9d44465fd93c00a344d643aa773d7b7a0abe7d449ef282f613188bb279a47b9e31b97dc4edfc7a0db6e794869b9be5ef8c216cc115e2aca538d7fb3774ed1aaabea0d5f6c089cb1c21d34121022250913defd42fcfa0f237155ec756e8f20802c3a2ebd0a885f3acf534914169fc654ebad567b9f4a1d68c6c929be2380698a703420cbf71d27e9a61ff5f3a539ad5d8ef6b59d29e8e27cb420c8225bcb3782b5cfc50ee8d49af5a7b4ff166cd4fa13c9accfff7eb315119e829ad854555a82f46dea9cfbfff24f93fbfe9d8fbb6cc91bf1877ad4896b6353725f943e79971685107bb416f28b40d62621a6c6a171e38b3cf260bbfa2af4bd8ebcae7ee91dedb63fd8caaa7912845991955b451c8c946ad61517e1960059c94f4529c343d1bc933337e79489c41dea77b04181400101ff87464fd36de7ffba2013bcea968e7872d73af8fcb770328f6114883883e335c1f1c87147d262f97ef9956a10dc25475268cbe457e46d647942ee9e3de1cbd641d35893ac5352f7f7f42c65e868cb37f3f3efee832b68fa0ce1fb93853eb228845fae1ddf838910e18a71ab091bd6aeded627f6b373547b217c5eb44550cc224ffb1070a2b12f7f6d12f2cbe8e81d74842c297b01deda82ca483a9ab97d11c8946111e3af6565f8843bce51fa16082b59dac288ab6edd12526ae9beb592b2c081a4a1ee36d0d39336f6d0a329f29554d296f7a0aa7b8909f92cd95f337a1066630bdaab06fe843ece64e55eb77f52ddeb3474f5ab7b445e2300983765e21dbd4debe5e4a4abac646ddb5674535df6fe8bb1bc559f34fdf1fb622796f6dd808aa21f0db921c9362a6411e0a2cfd30cdc090557c60408dc9746e2343ddee894c6f33a3c15d38014ce9601fe1639849baef1d9b0a77273f32d66703c961fa7c7c3fa09c0004daef6bb888b9573e257e95d1392bf1a267b344b2e169c81ce2f24e98cdc1923f1c296c6d00df2cd4365d0f95c7eb91bf901ebfed2b727086bae3c0921daa8c9c61f46a04cf3065d1b220881fdb42d0801d64e0c18792f738ba77496220e77ec718deb92331b8c448aed15678f46b28ac3d0c67b47350c3d7723055e00a2967654bf8d278c94042db48efc05d44da8d6abf84e1839cc02741923496ecf73af497e17df98d18295d6b0fdf9a2cdc89ffbd730eb828b8e821c16c440813b7d127850c928bb7fb810a68014ca37ca7beab732344e8fbbfa6c26bf5b6877b21e1d385c0562a6e68c0cf780afa427f92a21d09e989dff45464380563b869a36382883145a73ae4d7a2c272dae203a9a3502bcb8bee0851d9d13cdf6c58caa4fdb0407ed8875b344c380ad5df376775258c070085e261008bfac2fae0e3b12cdb511666e4bf9e3f2ff1c107137e62ffd11c92bf42e1a528248878c9bce4a8de1abd20c8c8ae630968925388e6256536d49042a60c5090c0e91cfd195570f6463a0b7543bf24f338d3a01f52594978a8a2a1d98552e42576fc62fbeabc5569167e531573b11f0d254071efc8b214fa24891fc5ab75c293102bb414b6962bd7a466fb7d5ccabc322795c31ab0eab191318331ebdf4d9d322e759174420917a2d43a426f0b6b7721df4a15824a6123954ab2714c8b4a16385a67fc372da9d6df212de0fc57b4bfc0ada9cbb96dd4c3a114cf38dc8b7114b6e1175112305ad38c259a8ee2386efe84597fd40e2a103a296afa6a2090fc920bb9579005e95f1b96ab18e6d94f01c2cbc1107d5e6b34abd2deb7d5c84da627960532f953cb738fae139bd1217daebeaa2dd17bc69e4852c5e20a0c6f887c1d51546", 0x2000, &(0x7f00000012c0)={&(0x7f0000000580)={0x50, 0x0, 0x101, {0x7, 0x21, 0x4, 0x8740, 0xa0c, 0x4, 0x7, 0x7}}, &(0x7f0000000600)={0x18, 0x0, 0x7, {0x1f}}, &(0x7f0000000640)={0x18, 0x0, 0x9, {0x2}}, &(0x7f0000000680)={0x18, 0x0, 0x0, {0x9}}, &(0x7f00000006c0)={0x18, 0x0, 0x3, {0x5}}, &(0x7f0000000980)={0x28, 0xfffffffffffffffe, 0x7, {{0x7f, 0x2}}}, &(0x7f00000009c0)={0x60, 0x0, 0x4, {{0x3, 0x35117785, 0x81, 0x80, 0x621, 0x4, 0x4, 0x2d}}}, &(0x7f0000000a40)={0x18, 0x0, 0x4, {0x5}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="120000000000000003000000000020007d00"], &(0x7f0000000ac0)={0x20, 0x0, 0x1e2, {0x0, 0x10}}, &(0x7f0000000b00)={0x78, 0x0, 0x6, {0x9, 0x9, 0x0, {0x6, 0x1, 0x4, 0x3, 0x200, 0x80000001, 0x3f, 0x8, 0x8, 0x8000, 0x8, r5, 0x0, 0x2, 0x7fffffff}}}, &(0x7f0000000b80)={0x90, 0xfffffffffffffff5, 0x1d21, {0x5, 0x1, 0x7fffffff, 0x16d, 0x5, 0x9, {0x0, 0x5, 0xfffffffffffffff9, 0x20, 0x7, 0x2, 0x6, 0x0, 0x80, 0x2000, 0xfb, 0x0, 0x0, 0x6, 0x1}}}, &(0x7f0000000c40)={0x50, 0x0, 0x3, [{0x3, 0x100000000, 0x8, 0x570, 'rootmode'}, {0x1, 0xa6, 0x2, 0x10000, '^@'}]}, &(0x7f0000000f00)={0x290, 0xfffffffffffffff5, 0x34, [{{0x1, 0x3, 0xfffffffffffffffe, 0x1ff, 0x1, 0xffffffff, {0x3, 0xffffffff, 0x2, 0xd146, 0x0, 0x5, 0x0, 0x3, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x1, 0x9}}, {0x6, 0x7fffffff, 0x3, 0x4000, '-$!'}}, {{0x2, 0x1, 0x200, 0x6, 0x400, 0x9, {0x4, 0xea49, 0x200, 0x2, 0x9, 0x81, 0xffffffff, 0x0, 0x20, 0x1000, 0xfffffff7, 0x0, r3, 0x8, 0x800}}, {0x4, 0x7, 0x8, 0x1a71, 'group_id'}}, {{0x5, 0x6, 0x44c, 0x2b31, 0x3, 0x1, {0x6, 0x2, 0x3, 0x8, 0x6, 0x8001, 0x3a, 0x4, 0x7fffffff, 0xc000, 0x1, 0x0, 0x0, 0x88, 0xff}}, {0x3, 0x1f, 0x7, 0x5, 'user_id'}}, {{0x6, 0x0, 0x6be, 0xdfa9, 0x9, 0x1400000, {0x0, 0x7, 0x6, 0x7, 0x0, 0x5, 0xf46816e, 0x8, 0x2, 0x6000, 0xb918, r2, r6, 0x3ff, 0x40}}, {0x3, 0x20, 0x1, 0x683c, '#'}}]}, &(0x7f00000011c0)={0xa0, 0x0, 0xfff, {{0x4, 0x0, 0x3860, 0x7fffffff, 0x2, 0x4a4, {0x3, 0x100, 0x8fa, 0x5, 0x1000, 0x3f, 0x4, 0x8, 0x25e, 0x0, 0x0, r8, r3, 0x1, 0x8}}, {0x0, 0x13}}}, &(0x7f0000001280)={0x20, 0x0, 0x8, {0x5, 0x0, 0xffff, 0x401}}})

01:35:21 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r3 = getuid()
r4 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="9b76170625982bf29c5739e496ee910c945572a19c295ba02c726fdf1d6d6f64653d3030203030fdffffff3034888e5aebf6859f773dcb21fdf48c01698298304707ef43243b05d52379d6333b56312d21aa05cd6401bb3054df9c14fe71991c1f1feafdf54ba4ba22791000b1cfcb476765122c4d9da115de431a948a29939e141c610879ec3342", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4])
fchown(r1, 0xee01, r4)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5725.708804][T10435] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
[ 5726.791221][T10435] fuse: Bad value for 'fd'
01:35:27 executing program 1:
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil)
syz_io_uring_setup(0x36d7, &(0x7f0000000140)={0x0, 0xfd0a, 0x20, 0x3, 0x30b}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0))

01:35:27 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
r3 = getuid()
r4 = getgid()
syz_mount_image$fuse(&(0x7f0000002040)='fuse\x00', &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="9b76170625982bf29c5739e496ee910c945572a19c295ba02c726fdf1d6d6f64653d3030203030fdffffff3034888e5aebf6859f773dcb21fdf48c01698298304707ef43243b05d52379d6333b56312d21aa05cd6401bb3054df9c14fe71991c1f1feafdf54ba4ba22791000b1cfcb476765122c4d9da115de431a948a29939e141c610879ec3342", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4])
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5732.111380][T10486] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
[ 5732.398726][T10486] fuse: Bad value for 'fd'
01:35:31 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2}, 0x10)
pipe2(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r4, 0x0, r3, 0x0, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x65, @local, 0x5}], 0x1c)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000040)={r2, @in={{0x2, 0x4e23, @multicast1}}}, 0x84)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c20000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31393337373136313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4400}, {&(0x7f0000012700)="200000006c84f94f6c84f94f00000000daf4655f00"/32, 0x20, 0x4480}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4800}, {&(0x7f0000012900)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x4880}, {&(0x7f0000012a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4c00}, {&(0x7f0000012b00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x4c80}, {&(0x7f0000012c00)="c041000000300000daf4655fdaf4655fdaf4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x6800}, {&(0x7f0000012d00)="20000000000000000000000000000000daf4655f000000000000000000000000000002ea00"/64, 0x40, 0x6880}, {&(0x7f0000012e00)="ed4100003c000000dbf4655fdbf4655fdbf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000008224fd7000000000000000000000000000000000000000000000000200000006c84f94f6c84f94f6c84f94fdbf4655f6c84f94f0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x7}, {&(0x7f0000012f00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000303a62f7000000000000000000000000000000000000000000000000200000006c84f94f6c84f94f6c84f94fdbf4655f6c84f94f0000000000000000", 0xa0, 0x7000}, {&(0x7f0000013000)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3139333737313631382f66696c65302f66696c653000000000000000000000000000000000000000000000cb5c36a8000000000000000000000000000000000000000000000000200000006c84f94f6c84f94f6c84f94fdbf4655f6c84f94f0000000000000000", 0xa0, 0x7400}, {&(0x7f0000013100)="ed8100000a000000dbf4655fdbf4655fdbf4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c413993000000000000000000000000000000000000000000000000200000006c84f94f6c84f94f6c84f94fdbf4655f6c84f94f0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x7800}, {&(0x7f0000013200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800010000000af30100040000000000000000000000030000006000000002000000010000006200000002000000018000006200000000000000000000000000000015f2e0ab000000000000000000000000000000000000000000000000200000006c84f94f6c84f94f6c84f94fdbf4655f6c84f94f0000000000000000", 0xc0, 0x7be0}, {&(0x7f0000013300)="ed81000064000000dbf4655fdbf4655fdbf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c704a6689000000000000000000000000000000000000000000000000200000006c84f94f6c84f94f6c84f94fdbf4655f6c84f94f0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x8000}, {&(0x7f0000013400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x83c2}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x20000}, {&(0x7f0000013700)="0000000000140000000000000000f11000"/32, 0x20, 0x21000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x2}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000400"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000400"/96, 0x60, 0x41400}, {&(0x7f0000014500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000014a00)=ANY=[@ANYBLOB='\x00'])

01:35:33 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
getuid()
getgid()
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5736.092794][T10489] loop1: detected capacity change from 0 to 4096
[ 5736.466612][T10489] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 5736.880684][T10494] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:35:37 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
getuid()
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5741.897169][T10597] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:35:41 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x2}, 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'veth0\x00', {}, 0x7f})
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
pipe2(&(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r4, 0x0, 0x4, 0x0)
getsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x4)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x3}, 0x4)

01:35:42 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5746.418984][T10603] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:35:48 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5752.153770][T10708] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:35:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
getuid()
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:35:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5755.227993][T10711] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
[ 5756.685510][T10714] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:35:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
getuid()
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:35:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5761.236495][T10717] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
[ 5761.986863][T10720] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:36:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
getuid()
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:02 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:14 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:14 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5779.450993][T10936] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:36:20 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:24 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/fuse\x00', 0x2, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:24 executing program 0:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5787.819773][T11042] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:36:28 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:29 executing program 0:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5792.877522][T11049] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:36:32 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:33 executing program 0:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5796.946081][T11056] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:36:36 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:37 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5801.649083][T11063] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 15 (only 8 groups)
01:36:40 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:45 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:53 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:56 executing program 1:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:36:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:00 executing program 1:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:01 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:04 executing program 1:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:05 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:08 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:10 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:14 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:16 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:19 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:21 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:23 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:25 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:30 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:32 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5854.379387][T11132] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:37:34 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:36 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5859.030454][T11138] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:37:38 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:39 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5862.563480][T11143] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:37:43 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:43 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5866.689929][T11150] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:37:47 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5871.795850][T11154] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:37:52 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5876.737090][T11160] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:37:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:37:56 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5881.009902][T11166] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:01 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:38:01 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5885.036632][T11169] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5885.598612][T11170] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:38:06 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5890.040970][T11175] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5890.765957][T11176] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:12 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5896.247085][T11280] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:15 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:38:16 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5899.311107][T11283] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5900.087089][T11285] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:38:20 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100))

[ 5903.660019][T11288] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5904.798432][T11290] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:24 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:38:26 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100))

[ 5908.365289][T11293] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5910.767538][T11295] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:29 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:38:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100))

[ 5913.398093][T11298] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5915.659612][T11300] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5917.386242][T11303] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:36 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0)

01:38:37 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5920.120161][T11305] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5921.541159][T11308] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:40 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0)

01:38:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5924.681267][T11311] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5926.637289][T11314] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0)

01:38:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5929.289313][T11317] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5931.730062][T11321] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:38:53 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5935.180060][T11324] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5937.495993][T11327] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:38:56 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:38:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100))

[ 5941.967841][T11333] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:39:00 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:39:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100))

[ 5946.019198][T11339] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:39:04 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf})
syz_io_uring_setup(0x2783, &(0x7f0000000080)={0x0, 0x887e, 0x0, 0x2, 0x3b5, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

01:39:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000100))

[ 5950.499293][T11345] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:39:08 executing program 0 (fault-call:2 fault-nth:0):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5952.776310][T11348] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:39:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0)

[ 5953.515804][T11348] FAULT_INJECTION: forcing a failure.
[ 5953.515804][T11348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 5953.518182][T11348] CPU: 0 PID: 11348 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 5953.519909][T11348] Hardware name: riscv-virtio,qemu (DT)
[ 5953.520921][T11348] Call Trace:
[ 5953.522208][T11348] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 5953.523720][T11348] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 5953.525186][T11348] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 5953.526623][T11348] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 5953.528086][T11348] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 5953.529647][T11348] [<ffffffe000a37532>] should_fail_usercopy+0x1e/0x26
[ 5953.531334][T11348] [<ffffffe000974dc2>] _copy_from_user+0x34/0x110
[ 5953.532781][T11348] [<ffffffe0004e309c>] io_uring_setup+0x4c/0x1c10
[ 5953.534231][T11348] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 5953.535674][T11348] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
01:39:13 executing program 0 (fault-call:2 fault-nth:1):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5956.200094][T11351] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5959.151198][T11354] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5959.825912][T11354] FAULT_INJECTION: forcing a failure.
[ 5959.825912][T11354] name failslab, interval 1, probability 0, space 0, times 0
[ 5959.827879][T11354] CPU: 1 PID: 11354 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 5959.829233][T11354] Hardware name: riscv-virtio,qemu (DT)
[ 5959.830110][T11354] Call Trace:
[ 5959.830902][T11354] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 5959.833762][T11354] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 5959.835302][T11354] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 5959.836813][T11354] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 5959.838218][T11354] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 5959.839830][T11354] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 5959.841287][T11354] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 5959.843610][T11354] [<ffffffe0003b8ab0>] kmem_cache_alloc_trace+0x5e/0x2bc
[ 5959.845153][T11354] [<ffffffe0004e3206>] io_uring_setup+0x1b6/0x1c10
[ 5959.846944][T11354] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 5959.848375][T11354] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
01:39:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0)

01:39:20 executing program 0 (fault-call:2 fault-nth:2):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5962.885226][T11356] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5964.903951][T11359] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:39:23 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), 0x0)

[ 5965.516956][T11359] FAULT_INJECTION: forcing a failure.
[ 5965.516956][T11359] name failslab, interval 1, probability 0, space 0, times 0
[ 5965.551211][T11359] CPU: 1 PID: 11359 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 5965.554295][T11359] Hardware name: riscv-virtio,qemu (DT)
[ 5965.555407][T11359] Call Trace:
[ 5965.556310][T11359] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 5965.557826][T11359] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 5965.559233][T11359] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 5965.560593][T11359] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 5965.562564][T11359] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 5965.564729][T11359] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 5965.566216][T11359] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 5965.568065][T11359] [<ffffffe0003b8086>] __kmalloc+0x6e/0x332
[ 5965.569596][T11359] [<ffffffe0004e33ac>] io_uring_setup+0x35c/0x1c10
[ 5965.571103][T11359] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 5965.573572][T11359] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 5967.468707][T11361] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:39:25 executing program 0 (fault-call:2 fault-nth:3):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5970.555293][T11364] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
[ 5971.267137][T11364] FAULT_INJECTION: forcing a failure.
[ 5971.267137][T11364] name failslab, interval 1, probability 0, space 0, times 0
[ 5971.269442][T11364] CPU: 0 PID: 11364 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 5971.271089][T11364] Hardware name: riscv-virtio,qemu (DT)
[ 5971.272785][T11364] Call Trace:
[ 5971.274014][T11364] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 5971.275613][T11364] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 5971.277146][T11364] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 5971.278504][T11364] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 5971.279790][T11364] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 5971.281267][T11364] [<ffffffe0003be93e>] __should_failslab+0x62/0x82
[ 5971.283106][T11364] [<ffffffe000312314>] should_failslab+0xc/0x1c
[ 5971.284471][T11364] [<ffffffe0003b8ab0>] kmem_cache_alloc_trace+0x5e/0x2bc
[ 5971.285889][T11364] [<ffffffe00096c73a>] percpu_ref_init+0x8e/0x220
[ 5971.287280][T11364] [<ffffffe0004e3414>] io_uring_setup+0x3c4/0x1c10
[ 5971.288739][T11364] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 5971.290472][T11364] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
01:39:30 executing program 1 (fault-call:2 fault-nth:0):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5973.588379][T11366] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:39:32 executing program 0 (fault-call:2 fault-nth:4):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5974.240046][T11366] FAULT_INJECTION: forcing a failure.
[ 5974.240046][T11366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 5974.246169][T11366] CPU: 1 PID: 11366 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 5974.248007][T11366] Hardware name: riscv-virtio,qemu (DT)
[ 5974.248989][T11366] Call Trace:
[ 5974.249834][T11366] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 5974.250836][T11366] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 5974.251962][T11366] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 5974.253562][T11366] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 5974.255460][T11366] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 5974.256948][T11366] [<ffffffe000a37532>] should_fail_usercopy+0x1e/0x26
[ 5974.258461][T11366] [<ffffffe000974dc2>] _copy_from_user+0x34/0x110
[ 5974.259908][T11366] [<ffffffe0004e309c>] io_uring_setup+0x4c/0x1c10
[ 5974.261952][T11366] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 5974.264004][T11366] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 5976.409249][T11368] EXT4-fs warning (device vda): verify_group_input:131: Cannot add at group 0 (only 8 groups)
01:39:34 executing program 1 (fault-call:2 fault-nth:1):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80040, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040))
syz_io_uring_setup(0x2783, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100))

[ 5976.980765][T11368] FAULT_INJECTION: forcing a failure.
[ 5976.980765][T11368] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 5976.988517][T11368] CPU: 0 PID: 11368 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 5976.989965][T11368] Hardware name: riscv-virtio,qemu (DT)
[ 5976.990965][T11368] Call Trace:
[ 5976.991962][T11368] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 5976.994610][T11368] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 5976.996224][T11368] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 5976.997686][T11368] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 5976.999088][T11368] [<ffffffe000a37512>] should_fail+0x250/0x252
[ 5977.000694][T11368] [<ffffffe00036c530>] should_fail_alloc_page+0x54/0x62
[ 5977.003162][T11368] [<ffffffe00036f654>] __alloc_pages_nodemask+0xf6/0x480
[ 5977.004900][T11368] [<ffffffe0003a273c>] alloc_pages_current+0x114/0x234
[ 5977.006544][T11368] [<ffffffe000366d58>] __get_free_pages+0xe/0x38
[ 5977.007969][T11368] [<ffffffe0004ceaf0>] io_mem_alloc+0x114/0x180
[ 5977.009451][T11368] [<ffffffe0004e3894>] io_uring_setup+0x844/0x1c10
[ 5977.010931][T11368] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 5977.013371][T11368] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 5977.153094][T11368] ==================================================================
[ 5977.160408][T11368] BUG: KASAN: null-ptr-deref in io_commit_cqring+0x3ea/0x8f6
[ 5977.163075][T11368] Write of size 4 at addr 00000000000000c0 by task syz-executor.0/11368
[ 5977.166009][T11368] 
[ 5977.167297][T11368] CPU: 0 PID: 11368 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 5977.168959][T11368] Hardware name: riscv-virtio,qemu (DT)
[ 5977.170074][T11368] Call Trace:
[ 5977.170939][T11368] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 5977.173055][T11368] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 5977.174648][T11368] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 5977.175999][T11368] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 5977.177328][T11368] [<ffffffe0003bccfc>] kasan_report+0x146/0x18c
[ 5977.178785][T11368] [<ffffffe0003bd4e4>] __asan_store4+0x4a/0x80
[ 5977.180230][T11368] [<ffffffe0004d1950>] io_commit_cqring+0x3ea/0x8f6
[ 5977.181748][T11368] [<ffffffe0004d3044>] io_kill_timeouts+0x412/0x420
[ 5977.183710][T11368] [<ffffffe0004e2eea>] io_ring_ctx_wait_and_kill+0x172/0x2a0
[ 5977.185352][T11368] [<ffffffe0004e3dee>] io_uring_setup+0xd9e/0x1c10
[ 5977.186769][T11368] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 5977.188381][T11368] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 5977.190120][T11368] ==================================================================
[ 5977.192977][T11368] Disabling lock debugging due to kernel taint
[ 5977.195229][T11368] Kernel panic - not syncing: panic_on_warn set ...
[ 5977.196444][T11368] CPU: 0 PID: 11368 Comm: syz-executor.0 Tainted: G    B             5.12.0-rc5-syzkaller-00721-gb2b3d18fc20e #0
[ 5977.197951][T11368] Hardware name: riscv-virtio,qemu (DT)
[ 5977.198753][T11368] Call Trace:
[ 5977.199341][T11368] [<ffffffe000009706>] walk_stackframe+0x0/0x23c
[ 5977.200511][T11368] [<ffffffe002a5f182>] dump_backtrace+0x40/0x4e
[ 5977.201975][T11368] [<ffffffe002a5f1b2>] show_stack+0x22/0x2e
[ 5977.203623][T11368] [<ffffffe002a68a3e>] dump_stack+0x148/0x1d8
[ 5977.204742][T11368] [<ffffffe002a5f57a>] panic+0x20a/0x5cc
[ 5977.205868][T11368] [<ffffffe0003bc7b0>] print_address_description.constprop.0+0x0/0x31e
[ 5977.207337][T11368] [<ffffffe0003bcd06>] kasan_report+0x150/0x18c
[ 5977.208844][T11368] [<ffffffe0003bd4e4>] __asan_store4+0x4a/0x80
[ 5977.210089][T11368] [<ffffffe0004d1950>] io_commit_cqring+0x3ea/0x8f6
[ 5977.211286][T11368] [<ffffffe0004d3044>] io_kill_timeouts+0x412/0x420
[ 5977.213117][T11368] [<ffffffe0004e2eea>] io_ring_ctx_wait_and_kill+0x172/0x2a0
[ 5977.214652][T11368] [<ffffffe0004e3dee>] io_uring_setup+0xd9e/0x1c10
[ 5977.215986][T11368] [<ffffffe0004e8670>] sys_io_uring_setup+0x22/0x2e
[ 5977.217226][T11368] [<ffffffe000005572>] ret_from_syscall+0x0/0x2
[ 5977.218772][T11368] SMP: stopping secondary CPUs
[ 5977.221009][T11368] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:11:49  Registers:
info registers vcpu 0
 pc       ffffffe0000d30b0
 mhartid  0000000000000000
 mstatus  00000000000000a0
 mip      00000000000000a0
 mie      000000000000022a
 mideleg  0000000000000222
 medeleg  000000000000b109
 mtvec    0000000080000540
 stvec    ffffffe00000542c
 mepc     ffffffe0003bd28a
 sepc     ffffffe0004e4ad4
 mcause   8000000000000007
 scause   8000000000000005
 mtval  0000000000000000
 stval  0000000000000000
 x0/zero 0000000000000000 x1/ra ffffffe0000d30a0 x2/sp ffffffe0218e78f0 x3/gp ffffffe004588b08
 x4/tp ffffffe008fd2f80 x5/t0 ffffffe004ffdbb7 x6/t1 0000000000000001 x7/t2 0000000000000000
 x8/s0 ffffffe0218e7970 x9/s1 ffffffe067d43840 x10/a0 ffffffe067d43840 x11/a1 0000000000000003
 x12/a2 1ffffffc0cfa8708 x13/a3 ffffffe0000d30a0 x14/a4 0000000000000000 x15/a5 0000000000000020
 x16/a6 0000000000f00000 x17/a7 ffffffe0000dd7d6 x18/s2 0000000000001000 x19/s3 0000000000000003
 x20/s4 ffffffe00458c0d0 x21/s5 ffffffe002e27840 x22/s6 ffffffe008fd2f80 x23/s7 0000000000000004
 x24/s8 0000000000000020 x25/s9 ffffffe0050495a8 x26/s10 ffffffe008fd3920 x27/s11 ffffffe008fd3f80
 x28/t3 2e4d6ca62c7a2800 x29/t4 ffffffc4009ffb74 x30/t5 ffffffc4009ffb77 x31/t6 ffffffe004ffdbb7
 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000
info registers vcpu 1
 pc       ffffffe0003bd41a
 mhartid  0000000000000001
 mstatus  00000000000000a0
 mip      0000000000000000
 mie      00000000000002aa
 mideleg  0000000000000222
 medeleg  000000000000b109
 mtvec    0000000080000540
 stvec    ffffffe00000542c
 mepc     ffffffe00000e9d4
 sepc     ffffffe0001008c0
 mcause   0000000000000009
 scause   8000000000000005
 mtval  0000000000000000
 stval  0000000000000000
 x0/zero 0000000000000000 x1/ra ffffffe0000c2e5c x2/sp ffffffe024bc37d0 x3/gp ffffffe004588b08
 x4/tp ffffffe006040000 x5/t0 ffffffc404ec00ca x6/t1 0000000000000001 x7/t2 0000003fffacb215
 x8/s0 ffffffe024bc3840 x9/s1 ffffffe00363a078 x10/a0 0000000000000000 x11/a1 00000000000f0000
 x12/a2 0000000000000002 x13/a3 ffffffe0000c3016 x14/a4 0000000000000000 x15/a5 ffffffe067d72d48
 x16/a6 0000000000f00000 x17/a7 ffffffe0000c2e32 x18/s2 ffffffe0044c02f6 x19/s3 ffffffe00432b268
 x20/s4 ffffffe003697a18 x21/s5 ffffffe002e27840 x22/s6 ffffffffffffffff x23/s7 0000000000000020
 x24/s8 ffffffe006040210 x25/s9 ffffffe00cdce110 x26/s10 ffffffe00cdcdf00 x27/s11 ffffffe00383dc88
 x28/t3 2e4d6ca62c7a2800 x29/t4 ffffffc40163956e x30/t5 ffffffc401639570 x31/t6 ffffffe024bc3ab5
 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000