fffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x20000, 0x0, 0x0) 09:27:47 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1) 09:27:47 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x9000000) 09:27:47 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0xf000000, 0x0, 0x0) 09:27:47 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1) 09:27:47 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0xc26f0000, 0x0, 0x0) 09:27:48 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x4000000, 0x0, 0x0) 09:27:48 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x204) 09:27:48 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xa000000) 09:27:48 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x12, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:48 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:48 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x2000000000000, 0x0, 0x0) 09:27:48 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:48 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0xf00000000000000, 0x0, 0x0) 09:27:48 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:48 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xb000000) 09:27:48 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0xc26f000000000000, 0x0, 0x0) 09:27:48 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) (fail_nth: 1) [ 634.541184][T32437] FAULT_INJECTION: forcing a failure. [ 634.541184][T32437] name failslab, interval 1, probability 0, space 0, times 0 [ 634.553874][T32437] CPU: 1 PID: 32437 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 634.562617][T32437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.572659][T32437] Call Trace: [ 634.575917][T32437] dump_stack_lvl+0xd6/0x122 [ 634.580534][T32437] dump_stack+0x11/0x1b [ 634.584671][T32437] should_fail+0x23c/0x250 [ 634.589073][T32437] __should_failslab+0x81/0x90 [ 634.593815][T32437] ? io_sqe_buffers_register+0x127/0x920 [ 634.599446][T32437] should_failslab+0x5/0x20 [ 634.604007][T32437] kmem_cache_alloc_trace+0x52/0x320 [ 634.609271][T32437] ? 0xffffffff81000000 [ 634.613463][T32437] io_sqe_buffers_register+0x127/0x920 [ 634.618916][T32437] ? __fget_light+0xd0/0x260 [ 634.623487][T32437] __do_sys_io_uring_register+0x513/0x21a0 [ 634.629324][T32437] ? ksys_write+0x153/0x190 [ 634.633809][T32437] ? fpregs_assert_state_consistent+0x7d/0x90 [ 634.639854][T32437] __x64_sys_io_uring_register+0x4f/0x60 [ 634.645499][T32437] do_syscall_64+0x44/0xa0 [ 634.649910][T32437] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 634.655804][T32437] RIP: 0033:0x7fef81430a39 [ 634.660198][T32437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 634.679866][T32437] RSP: 002b:00007fef7f1a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 634.688264][T32437] RAX: ffffffffffffffda RBX: 00007fef81533f60 RCX: 00007fef81430a39 [ 634.696233][T32437] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 634.704706][T32437] RBP: 00007fef7f1a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.712664][T32437] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 634.720630][T32437] R13: 00007ffefba0e18f R14: 00007fef7f1a7300 R15: 0000000000022000 09:27:48 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xc000000) 09:27:49 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) (fail_nth: 2) 09:27:49 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x300) 09:27:49 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0xffffffff00000000, 0x0, 0x0) 09:27:49 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x5000000, 0x0, 0x0) 09:27:49 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x13, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:49 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xd000000) [ 635.321642][T32447] FAULT_INJECTION: forcing a failure. [ 635.321642][T32447] name failslab, interval 1, probability 0, space 0, times 0 [ 635.334973][T32447] CPU: 1 PID: 32447 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 635.343741][T32447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.353793][T32447] Call Trace: [ 635.357061][T32447] dump_stack_lvl+0xd6/0x122 [ 635.361662][T32447] dump_stack+0x11/0x1b [ 635.365916][T32447] should_fail+0x23c/0x250 09:27:49 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2) [ 635.370318][T32447] ? kzalloc+0x30/0x30 [ 635.374381][T32447] __should_failslab+0x81/0x90 [ 635.379219][T32447] ? percpu_ref_init+0x96/0x250 [ 635.384073][T32447] should_failslab+0x5/0x20 [ 635.388559][T32447] kmem_cache_alloc_trace+0x52/0x320 [ 635.393830][T32447] ? kzalloc+0x30/0x30 [ 635.397885][T32447] percpu_ref_init+0x96/0x250 [ 635.402572][T32447] io_sqe_buffers_register+0x149/0x920 [ 635.408086][T32447] ? __fget_light+0xd0/0x260 [ 635.412723][T32447] __do_sys_io_uring_register+0x513/0x21a0 [ 635.418510][T32447] ? ksys_write+0x153/0x190 [ 635.423029][T32447] ? fpregs_assert_state_consistent+0x7d/0x90 [ 635.429083][T32447] __x64_sys_io_uring_register+0x4f/0x60 [ 635.434739][T32447] do_syscall_64+0x44/0xa0 [ 635.439180][T32447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 635.445064][T32447] RIP: 0033:0x7fef81430a39 [ 635.449455][T32447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:27:49 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) (fail_nth: 3) 09:27:49 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xe000000) [ 635.469053][T32447] RSP: 002b:00007fef7f1a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 635.477464][T32447] RAX: ffffffffffffffda RBX: 00007fef81533f60 RCX: 00007fef81430a39 [ 635.485425][T32447] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.493389][T32447] RBP: 00007fef7f1a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.501337][T32447] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 635.509285][T32447] R13: 00007ffefba0e18f R14: 00007fef7f1a7300 R15: 0000000000022000 09:27:49 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf) 09:27:49 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x14, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 635.581152][T32469] FAULT_INJECTION: forcing a failure. [ 635.581152][T32469] name failslab, interval 1, probability 0, space 0, times 0 [ 635.593779][T32469] CPU: 1 PID: 32469 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 635.602543][T32469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.612798][T32469] Call Trace: [ 635.616067][T32469] dump_stack_lvl+0xd6/0x122 [ 635.620643][T32469] dump_stack+0x11/0x1b [ 635.624907][T32469] should_fail+0x23c/0x250 [ 635.629338][T32469] __should_failslab+0x81/0x90 [ 635.634097][T32469] ? io_rsrc_data_alloc+0x44/0x3e0 [ 635.639541][T32469] should_failslab+0x5/0x20 [ 635.644034][T32469] kmem_cache_alloc_trace+0x52/0x320 [ 635.649302][T32469] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 635.654545][T32469] io_rsrc_data_alloc+0x44/0x3e0 [ 635.659466][T32469] ? kzalloc+0x30/0x30 [ 635.663543][T32469] ? percpu_ref_init+0x1f2/0x250 [ 635.668465][T32469] ? kzalloc+0x30/0x30 [ 635.672521][T32469] io_sqe_buffers_register+0xe3/0x920 [ 635.677911][T32469] ? __fget_light+0xd0/0x260 [ 635.682568][T32469] __do_sys_io_uring_register+0x513/0x21a0 [ 635.688560][T32469] ? ksys_write+0x153/0x190 [ 635.693232][T32469] ? fpregs_assert_state_consistent+0x7d/0x90 [ 635.699586][T32469] __x64_sys_io_uring_register+0x4f/0x60 [ 635.705417][T32469] do_syscall_64+0x44/0xa0 [ 635.709827][T32469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 635.715831][T32469] RIP: 0033:0x7fef81430a39 [ 635.720243][T32469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.740726][T32469] RSP: 002b:00007fef7f1a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 635.749267][T32469] RAX: ffffffffffffffda RBX: 00007fef81533f60 RCX: 00007fef81430a39 [ 635.757334][T32469] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.765302][T32469] RBP: 00007fef7f1a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.773437][T32469] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 09:27:49 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) (fail_nth: 4) 09:27:49 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf000000) [ 635.781414][T32469] R13: 00007ffefba0e18f R14: 00007fef7f1a7300 R15: 0000000000022000 [ 635.851374][T32481] FAULT_INJECTION: forcing a failure. [ 635.851374][T32481] name failslab, interval 1, probability 0, space 0, times 0 [ 635.864008][T32481] CPU: 1 PID: 32481 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 635.872778][T32481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.882976][T32481] Call Trace: [ 635.886239][T32481] dump_stack_lvl+0xd6/0x122 [ 635.890857][T32481] dump_stack+0x11/0x1b [ 635.895176][T32481] should_fail+0x23c/0x250 [ 635.901007][T32481] ? kcalloc+0x32/0x40 [ 635.905244][T32481] __should_failslab+0x81/0x90 [ 635.910172][T32481] should_failslab+0x5/0x20 [ 635.914850][T32481] __kmalloc+0x6f/0x350 [ 635.918995][T32481] ? io_rsrc_data_alloc+0x44/0x3e0 [ 635.924153][T32481] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 635.929631][T32481] kcalloc+0x32/0x40 [ 635.933509][T32481] io_rsrc_data_alloc+0x80/0x3e0 [ 635.938696][T32481] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 635.944001][T32481] ? percpu_ref_init+0x1f2/0x250 [ 635.948936][T32481] io_sqe_buffers_register+0xe3/0x920 [ 635.954440][T32481] ? __fget_light+0xd0/0x260 [ 635.959028][T32481] __do_sys_io_uring_register+0x513/0x21a0 [ 635.964892][T32481] ? ksys_write+0x153/0x190 [ 635.969381][T32481] ? fpregs_assert_state_consistent+0x7d/0x90 [ 635.975457][T32481] __x64_sys_io_uring_register+0x4f/0x60 [ 635.981074][T32481] do_syscall_64+0x44/0xa0 [ 635.985545][T32481] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 635.991455][T32481] RIP: 0033:0x7fef81430a39 [ 635.995890][T32481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 636.015843][T32481] RSP: 002b:00007fef7f1a7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 636.024263][T32481] RAX: ffffffffffffffda RBX: 00007fef81533f60 RCX: 00007fef81430a39 [ 636.032226][T32481] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 636.040202][T32481] RBP: 00007fef7f1a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 636.048238][T32481] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 636.056231][T32481] R13: 00007ffefba0e18f R14: 00007fef7f1a7300 R15: 0000000000022000 09:27:49 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x402) 09:27:49 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf00) 09:27:49 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x15, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:49 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) (fail_nth: 5) 09:27:49 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x10000000) 09:27:49 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x6000000, 0x0, 0x0) 09:27:50 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:50 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x11000000) 09:27:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x6fc2) 09:27:50 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:50 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x16, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:50 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x12000000) 09:27:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xc26f) 09:27:50 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x13000000) 09:27:50 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x406) 09:27:50 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:50 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x17, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:50 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x6040000, 0x0, 0x0) 09:27:50 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x20000) 09:27:50 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x14000000) 09:27:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf000000) 09:27:51 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:51 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x15000000) 09:27:51 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xc26f0000) 09:27:51 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x18, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:51 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x500) 09:27:51 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:51 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2000000000000) 09:27:51 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x16000000) 09:27:51 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x19, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:51 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x7000000, 0x0, 0x0) 09:27:51 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:51 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf00000000000000) 09:27:51 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x17000000) 09:27:51 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xc26f000000000000) 09:27:51 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x18000000) 09:27:51 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:52 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x600) 09:27:52 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:52 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xffffffff00000000) 09:27:52 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:52 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x19000000) 09:27:52 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x8000000, 0x0, 0x0) 09:27:52 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:52 executing program 1: io_uring_enter(0xffffffffffffffff, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(0xffffffffffffffff, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:52 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000040)=""/52, 0x34}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000380)=""/167, 0xa7}], 0x6) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:52 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1a000000) 09:27:52 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:52 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xa7ed, 0x20, 0x0, 0x1000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.pending_reads\x00', 0x80000, 0x81) syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x3, {}, 0x0, 0x6}, 0x10001) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0xa0}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x12) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4, 0x3, &(0x7f0000000500)=[{&(0x7f0000000340)="28e974ffba98d0f33d18edb5aeb990bf436c29e1819db53f1cda5887723ecae59b33b07b83f8bc5fe230ae29b20713d0ff185e4e35ac66bcef5cc9485c72810b45d8e6a669de774daf3ceef575a291a0c132bfba7d1da5fb65d3fa5a23e3bffea3458e0d42b52c63d69ec790c0144f9c3b700584b879200310170a3515", 0x7d, 0x703}, {&(0x7f00000003c0)="157c47feb36318b39ec8b896127e9a66df7572d4b6d55afe9d75aeecc079350492771b35a088e908c6e9c513e25e0fd2711956c46d44943ff92c03857d034286e4bdf20ec9a7830bb124e595f52e527164358712722c72d8fb4f1d336c5dfedaad302b203411098e88249327c4e60e1f3afb584716060627173c0726fae9c75073cd5ea77ed86ece708dcfb69aaee1b4811cd9c071ebc0ad897a56af487955fd74edaac1e39ddf7d18", 0xa9, 0x40}, {&(0x7f0000000480)="6e411943607ec778e2e5d9794a9d144b42fe2d052ce74b93a419b20df7044fd74399e2c16184a8e6fa5cbdd2795024ea5754c0db538d42f89c99a4807c32875269a60c5b6d1ad42c0f32b2f848b40d39d7d263a6ac3f862170d517e66acbcc1ce1af8292127e48954f24b56cfcb1b533f2a9287967240045b5", 0x79, 0x8}], 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f74732c7375626a5f747970653d032c7775626a5f757365723d7b21813a2a28c4d82f3a3a2c00"]) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7509, 0xdc47, 0x2, &(0x7f0000000000)={[0x3ff]}, 0x8) [ 639.090682][T32646] loop1: detected capacity change from 0 to 7 [ 639.097799][T32646] FAT-fs (loop1): Unrecognized mount option "subj_type=" or missing value [ 639.125265][T32650] loop1: detected capacity change from 0 to 7 [ 639.136456][T32650] FAT-fs (loop1): Unrecognized mount option "subj_type=" or missing value 09:27:53 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x604) 09:27:53 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1b000000) 09:27:53 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:53 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_setup(0x94c, &(0x7f0000000000)={0x0, 0x4b9a, 0x0, 0x0, 0x36d, 0x0, r1}) 09:27:53 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x9000000, 0x0, 0x0) 09:27:53 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x18}], 0x1}, 0x8000) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r0 = syz_io_uring_setup(0x233f, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000005d050000000000000000000000800800df7a190318ce9e97af0538e37ba372cc44c81f3ded28b80b00000000000000000000000000000000000000000efcd9857f2fcf79c88c497ce944361946673d53b333db6943142830d14f7542681e710bc2d3c19d8a30cb141520c0e2da510cab8d011be4a38f265a57343fb51eb773469fa0968b442e4bf29e5677c0badc7be7605a482e93e7ac48588a41627f1bc8ff306245fe2a129d69bd1feae03b356267b133e0fd4542bca5ff4c2e50beaf"], 0x1c}}, 0x0) setsockopt(r1, 0x0, 0x5f44, &(0x7f00000005c0)="a1f3ae7e8280dfe8144421efe751a1e1fbe805f30740b93e5a26298342e3397c2b4c5f0b15eb5a1e5f18111730daf9fa9d8cd1b368e43a7d007cf897010000e5487ad7b72c6665f8733bcac8c694c6109fefae5848675d94f4d17f580686b64f64140713c8e44e3fda3b07534782edc59f921ede0dcfe060730a66e23b2a6fc88bfcb6974d84953fc97d66a433d0ad3b17c0e90841e7df6140165d001e6bed42d855d74adf505a1970e65d15eb04484cc900c5df86d273aad19eb7c9f3d1970f271679c03db5548fbc2e66eb19856d3f", 0xd0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000480), 0xc, &(0x7f0000000900)={&(0x7f0000000000)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0xb}, {0x6c, 0x1}, {0x6c}, {0x18}, {0x6c, 0x1}, {0x12, 0x1}, {0x4, 0x1}, {0x9}, {0xc, 0x1}, {0x48}, {0x2}, {0x36}, {0x48}, {0x12, 0x1}, {0x1}, {0x0, 0x1}, {0x6}, {0x0, 0x1}, {0x60}, {0xb, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0xc, 0x1}, {0x5, 0x1}, {0x48, 0x1}, {0x36}, {0x3, 0x1}, {0x1b}, {0x18}, {0x24}, {0x30, 0x1}, {0x1, 0x1}]}, @NL80211_ATTR_STA_AID={0xffffffffffffffee, 0x10, 0x44}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5ed}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0x3}}]}, 0x5c}}, 0x4000844) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = syz_io_uring_setup(0x480a, &(0x7f00000006c0)={0x0, 0x997f, 0x20, 0x2, 0x2f7, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x2, 0xfa, 0xff, 0x5, 0x0, 0x4, 0x21101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_bp={&(0x7f00000001c0), 0x2}, 0x34, 0xef7, 0x67, 0x0, 0x8, 0x5, 0x2, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r3, 0x3) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000440)={&(0x7f0000000500)=""/147, 0x93}) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:53 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1c000000) 09:27:53 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17, 0x1}, 0x9) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) io_uring_enter(r4, 0x4a8b, 0x6cfe, 0x0, &(0x7f0000000140)={[0x8]}, 0x8) io_uring_enter(r3, 0x77da, 0x10f9, 0x0, &(0x7f0000000040)={[0x7f]}, 0x8) 09:27:53 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:53 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:54 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x700) 09:27:54 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1d000000) 09:27:54 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x181, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:54 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:54 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:54 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xa000000, 0x0, 0x0) 09:27:54 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:54 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1e000000) 09:27:54 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:54 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0xbc802, 0x4, 0x3e}, 0x18) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001400)=[{&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000000)=""/114, 0x72}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000001380)=""/93, 0x5d}], 0x5) io_uring_enter(r1, 0x1bac, 0x0, 0x0, 0x0, 0xfffffffffffffea7) 09:27:54 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:54 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1f000000) 09:27:55 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x900) 09:27:55 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:55 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:55 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0xb89f, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/149, 0x95}], 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffeffff]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r1, 0x8000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:55 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x20000000) 09:27:55 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xb000000, 0x0, 0x0) 09:27:55 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8e, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:55 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x21000000) 09:27:55 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x10000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000040)=[{r2, 0x1100}, {r3, 0x8112}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:55 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:55 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x21, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:55 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x8000, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x2000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:56 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xa00) 09:27:56 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x22000000) 09:27:56 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20013, r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000010001050000000000000000050200"/28], 0x1c}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000140)="42d51d1c613948572eae4d", 0xb, 0x2}, 0x3) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r4, 0x5d, 0xffff, 0x10000, 0x2, 0x1}, 0x9) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x7b4f, 0x272, 0x0, &(0x7f0000000000)={[0x100000001]}, 0x8) 09:27:56 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:56 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xc000000, 0x0, 0x0) 09:27:56 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x10, r0, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x110, r0, 0x10000000) r3 = io_uring_setup(0x6053, &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x11, 0x14ac000, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r4}}, 0x4a0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:56 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x23000000) 09:27:56 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x23, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:56 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x24000000) 09:27:56 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:57 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xb00) 09:27:57 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r4}}, 0x4) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r0, 0x10000000) r9 = io_uring_setup(0x6053, &(0x7f0000000080)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r11 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x11, 0x14ac000, r10) syz_io_uring_submit(r5, r8, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x200000, 0x20, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r10}}, 0x0) 09:27:57 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x25000000) 09:27:57 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:57 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x24, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:57 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xd000000, 0x0, 0x0) 09:27:57 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:57 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x26000000) 09:27:57 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FIOCLEX(r0, 0x5451) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:57 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) syz_io_uring_setup(0x7d4a, &(0x7f0000000000)={0x0, 0x6363, 0x8, 0x1, 0x1d1, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x8dc7c954f507d400) r4 = epoll_create1(0x80000) io_submit(0x0, 0x3, &(0x7f0000000600)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f0000000240)="18d940aca2c502f840fbaa9a1abe653f063e1a459d9b5f9d471743031fa3dcbf9b73c896e84584a07bbff2e71a35152a17481e452ffe7c6492663367f2f36856661f3fd44da9a6a565fcccec008178c51c5a492096aeaa02e1751065281bf8853641a8b0249f6f77cea55e1d76304d4710cc912ee26b75b5ceefae8d635f68e623fcfc3afd3eedbe61bb04753f366cc45171d9012a44439c53c36b954cbae1c567728f1c49247f13443df16ed7ac4df0ab58212cb954c63b0a701fe29e397a1be801950ae5474d3309da19", 0xcb, 0x8, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x54, r4, &(0x7f00000003c0)="0d96f4b6192d945d85e885a94440d0da868e88ccd9e2bb4629c2d492ce2680abc880ad8b79a945314ff3f1de5144b1e08da7069737500a9859cb2354a74b7b5605e65de262c40aa0e4d526a99855680a08bf40448e95079647b468d07d062c499942383b9597bcf51bc15beb04402d449672e6ddfae284d001af4b2a1068554406736d0f56b7a79a41ca8e44", 0x8c, 0x101, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, &(0x7f00000004c0)="da86a2f4f08e27a3040c5a2ab4ff66c78d366f9c68413b71c973b95ca1aac2c213e9f8568c7ecba9cb607e68b513339dbed4e14ed42e1a8c3747daefa8ab73c93dad6146526adf6149e4cd9096f0a30f5c5812ad27f040c2153fd8c868e46eabe64a74cbdd9be61b810e20a46c5876570b317c4c4771478a2ec9d69bd08b07884a9ee413db841ff3b3efd8e1819114c637eccb69a5e3f91e5ef68909e14574612ebf358f7637121fa8c3c7071846196d2505bb0d6a655b127b413982f8140256969e5becaad57825f8407f202f9ff7626e1387f821c50fe1d8eca0ed1fe246", 0xdf, 0x1, 0x0, 0x1}]) 09:27:57 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:57 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x27000000) 09:27:58 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xc00) 09:27:58 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:58 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000), 0x1) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:58 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x40000000) 09:27:58 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:58 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xe000000, 0x0, 0x0) 09:27:58 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x42000000) 09:27:58 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:58 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5a}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x10000) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:58 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x26, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:58 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x5b000000) 09:27:58 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x8000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000140)="5e800239c8c3fc2a7da5ea56f2ead80c4e42f8168ac299b024a3e0a05ead227e2d087adea5ddd91ca941b165f44af0572bb2a4f0d98f10e2054a1da32e521b5867e66600f9aa438dee9e0744287b7f16d514db8a1d57a586c98f77bb93626610c049e07bdf8e5877be7a31ecd2038a36e9d72784cb630b86a8e8eed78a64f1955a58de4836e6e43e2cc56238220ada662094779626cbb90be78730460985ef6e67e74597c5aeb396394c55cebb738218679419d170135bb43cbf7d54cc1ddc19a44a273ab8b17fd5102f34e3daf837c03f1db2e8a83b52c99f35", 0xda}, 0x6) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:59 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xd00) 09:27:59 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:59 executing program 1: r0 = syz_io_uring_setup(0x183, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:59 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf5ffffff) 09:27:59 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x27, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:59 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xf000000, 0x0, 0x0) 09:27:59 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xfffffff5) 09:27:59 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:59 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2000000000000) 09:27:59 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x28, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:27:59 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:27:59 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x100000000000000) 09:28:00 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x200000000000000) 09:28:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000008c0)={0x0, 0x0, "43b2ac750eab322d2b8b4438914ad9aeeac9f13d2f2069c06a00d56619887bdb46eaefd4c49e68cff416c63d18d7d4502963fc0ed6aee29b3039bb712bf24309b1f3ab57259c323823942d60df101bccee8a59c97f34acb6646b8fbe6384aea4ae908a5ebbb1916068ba2493a41f3e06f8db9f666f0e69735f681bf1deab65b73443cd2937bba5c76db6e00d8d79f41587c779129d8a903bf4a7d1cb8f5106999d109678266410981840018c7d92ba131ed38ca38dd1698fe183d7c9dc6a337383e8f79af088c72fe49c1b8906f849fe6caf4a6b692fd5debb914d42f918232371a5ac652bd55aa402a0f9e019e5cb3fcc7f4453d0d531c20c150891b63ad685", "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"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{0x0, r8}, {0x0, r8}, {r7}, {r7}, {r7, r8}, {}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {r3, r8}, {r3, r8}, {}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7, r5}, {0x0, r8}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r3, r8}, {}, {0x0, r8}, {}, {r7}, {r6, r8}, {}, {}, {}, {r4}, {0x0, r8}, {}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r3, r8}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {r7, r8}, {}, {r6}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {}, {}, {r6, r8}, {}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {r7, r8}, {r7}, {}, {r6, r8}, {r3}, {0x0, r8}, {r7}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7, r8}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {}, {}, {r6}, {r6}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {r4}, {r6}, {}, {r7}, {0x0, r8}, {r6}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {r6}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {}, {}, {r7}, {r6, r8}, {r7}, {0x0, r8}, {}, {}, {r6}, {}, {r6}, {r7}, {}, {r6, r8}, {}, {}, {}, {r7}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {0x0, r8}, {}, {r7, r8}, {}, {0x0, r8}, {r6}, {r7, r8}, {r7}, {r7}, {0x0, r8}, {r6, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {r6, r8}, {}, {r7}, {r7}, {r6}, {}, {r7}, {r7}, {}, {}, {}, {r7, r8}, {0x0, r8}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000056740)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000057740)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057940)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r9}, {}, {}, {r10}], 0x20, "64812c1d3415e3"}) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r11, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r11, 0x7488, 0x9665, 0x1, &(0x7f0000000000)={[0x100000000]}, 0x8) 09:28:00 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:00 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xe00) 09:28:00 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x29, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:00 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x10000000, 0x0, 0x0) 09:28:00 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x204000000000000) 09:28:00 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) [ 646.311207][ C0] sd 0:0:1:0: tag#3553 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 646.321095][ C0] sd 0:0:1:0: tag#3553 CDB: opcode=0xe5 (vendor) [ 646.327407][ C0] sd 0:0:1:0: tag#3553 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 646.336450][ C0] sd 0:0:1:0: tag#3553 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 646.345523][ C0] sd 0:0:1:0: tag#3553 CDB[20]: ba 09:28:00 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x300000000000000) 09:28:00 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8e00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:00 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x80000000, 0x2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004a40)={&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000004940)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/169, 0xa9}, {&(0x7f0000004600)=""/45, 0x2d}, {&(0x7f0000004640)=""/166, 0xa6}, {&(0x7f0000004700)=""/20, 0x14}, {&(0x7f0000004740)=""/229, 0xe5}, {&(0x7f0000004840)=""/233, 0xe9}], 0x7, &(0x7f00000049c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x342) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004a80), 0x2, 0x0) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000004ac0), &(0x7f0000004b40)=0x6e, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r7 = pidfd_open(0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004d00)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="2111416211cf2c6158c2298cabadb4ca9d4d5dbc800b7de209a873237b838027986d3714fbc41f049eb65fe788be118d237e6c5b64f55a163786ea0ce676c81a8f428eb2998ba08a4c04a650c071cdf31bbdbe63c355a244d22c5b00dd58523aa3287f79fe62ab", 0x67}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x98}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)="c9260f27d39b734f14c18477d36cc25876c64d2ee778b995e3b7567267eb2377a01ef2fb3931e1fcdc4b682c39c43dfe32afe18e27197ccb34c3970ebe719133bf7f7dbe025023043d8ba1f937b14d0ac603745eb49c38c42ef403dd2806a69e74e04d1e12338133e18f94af6b87a4e5da97137c5bd765827bf2f6873f24505c3f6e097b729251799259e38b5022de33e72c6fee66e0420779479fcf3a98921bf7737c7f849b327aed723ee9a064dcf317c253545688e26bda9f63", 0xbb}, {&(0x7f0000000440)="4c7dbfd901249ef95f3fd96ee8e39a89770849a4c57534b3b6ef997e0e2e2ed862e091990825d51ed850505c5ac799225fdece1d38ae4fb6fb694d926f252b2ed703ee867bb9bb2cb157fbe11123091dd117997bc0c855fc439575d4aa22202c8ea3dfaf57b4c399fb155b04910fd47deb952bd3e5bdb535af2119bc1f3b2aef4809b603def269ada8a8d1a0d0be32aa28c1a251d19f0562afac488860c57a21128a112e9855089004d66770cc5cb06701c93dc49612862ef6d31c8ec102b765a41e62", 0xc3}, {&(0x7f0000000540)="8410a935da61e5d349f2f0610258c8aeeb60243a230826d12e43d2f26d424ad87342c2573e356c97861fcd7e241209acbb67e3a55330a93e791f57d743847b5d7873957deb941428e96ea4258d9e012aac945606c180710e37e66915d3bda5ba2909c9d1573d196e486b59c9357c0164b701bfc0b8148b40785c1fd53f126105df7016694eb2c173472bd8927d547b0c251fc7a33ef860c194b28fa05cb02db00c7e99500f1610d68971a0ed0ed0767c", 0xb0}, {&(0x7f0000000300)="9b7a55209475db8b77730c538b350f6bdd58074d4ce4", 0x16}], 0x4, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x58, 0x20000880}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000740)="ea239475f1bddc6a9f34cb3adaacc8d8351e", 0x12}, {&(0x7f0000000780)="ffd592c3", 0x4}, {&(0x7f00000007c0)="ccff540c76d46ec9c7d4ea845b1133655b3b7ae1463e7af868d0f5305b6f2fc52607ac67992adbd8a6182bbc128ee0ff43710bb08d34503d3e9ba0911ea669cddabdcfd0a24d220df4b2d68b42322241b2f1569e3544c67659ba55f69fd632bfad95c29ff40f359bb125e902f059d5df4d78219164d79995c607a641333de7f999523b6c8f331bb6f8fcaeb83cd663ddfe4ae307efc168271aa6583423fbe66b83d7afc77bc99726224db7452625ab5f2569101c59c83b2a1a3052ed4e8c3b85", 0xc0}], 0x3, &(0x7f0000002f40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x110}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003080)="b5aed6c442f535f940515f7518a299e3a0c3ab4cacc3a0e84993f9658523791ffd48e22c6e0f27e0149f0ff0853c6c9e1b2fd538da014b04eb32e9834231ffb797486634680093d7fed80d5aaf008873f91eb9a7393c13106eb9b075ac07c72e1b89f7752575fa22ed57543edd3d457bf24092b1ef5abd3e9a15cf778fb56c29377a1b4ad863429a15f147713a5f4c57891a7dffe61b03a55d39b0b6789975c520faa43ba1d617c4afa60a7e9f69fa02571f4fe4e34c63a1e9de6e2d5956c04e123ab2e3190fd11292cd9cf1d026465bf1d1b3481260d3", 0xd7}, {&(0x7f0000003180)="874fd954e198c4d717ee79b52e2a0b963bc95bf5cc1725d71edfaf08995a3bcfe894ffab61f5ef3151d18d8641c2d9006a0790679d2c210b2c246d5e326dc2c55fc23297554e519575bd53c9445fb5865406173c9dd08e140dbd28156e0b4ffea6d7453946874c5a8763a96dfafc0a7f846f615bd3c956abc38c222077a4b605b04ffe73fac6c471835307e7f57a96967d836592c58f69a3643f5827c00a6b", 0x9f}, {&(0x7f0000003240)="fa43cfb202616b", 0x7}, {&(0x7f0000003280)="6aa323370674bf808d7a6b02f86b02f065ca2a9715bf8c8c592eab48c17aca833a939b36311d59aec4c03bae0ff035e0b8bfc83445ba5a", 0x37}], 0x4, &(0x7f0000004b80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r3}}}, @rights={{0x30, 0x1, 0x1, [r0, r4, r0, r0, r0, r5, r6, r7]}}], 0x158, 0x4811}}], 0x4, 0x0) 09:28:00 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:00 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x434382, 0x0) io_uring_enter(r1, 0x6633, 0x8b8d, 0x0, &(0x7f0000000040)={[0x1b3e]}, 0x8) 09:28:00 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf00) 09:28:00 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x400000000000000) 09:28:00 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:00 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r5 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x24000, 0x20, 0x2}, 0x18) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r5, &(0x7f0000000180)={0x7800000a}, r0, 0x1, 0x0, 0x0, {0x0, r7}}, 0xfffffff9) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:00 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x11000000, 0x0, 0x0) 09:28:00 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:01 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x500000000000000) 09:28:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x10d4, 0x1892, 0x1, &(0x7f0000000040)={[0x1]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4e2, 0x4aff, 0x0, &(0x7f0000000000), 0x8) 09:28:01 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:01 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x600000000000000) 09:28:01 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x3, 0x100000001, 0x0, 0x80000001, 0x0, 0x1}, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:01 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1100) 09:28:01 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2000, @fd_index=0x6, 0x8, 0xc8, 0x8, 0x3, 0x0, {0x2, r5}}, 0x2) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:01 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x604000000000000) 09:28:01 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x12000000, 0x0, 0x0) 09:28:01 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x39c}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:01 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x700000000000000) 09:28:01 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8c3, &(0x7f0000000000)={0x0, 0x3f41, 0x8, 0x1, 0x39d, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 09:28:02 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x800000000000000) 09:28:02 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:02 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:02 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1200) 09:28:02 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101400, 0x101) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x301800, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r1, 0x1) 09:28:02 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x900000000000000) 09:28:02 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x13000000, 0x0, 0x0) 09:28:02 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:02 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xa00000000000000) 09:28:02 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:02 executing program 1: io_uring_enter(0xffffffffffffffff, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x155b, 0x8f98, 0x1, &(0x7f0000000000)={[0x2]}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:02 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/236, 0xec}, {&(0x7f0000000300)=""/6, 0x6}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/229, 0xe5}, {&(0x7f0000001540)=""/140, 0x8c}, {&(0x7f0000001600)=""/95, 0x5f}, {&(0x7f0000001680)=""/49, 0x31}, {&(0x7f00000016c0)=""/232, 0xe8}], 0xa, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000001b80)=[{&(0x7f00000019c0)=""/3, 0x3}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/34, 0x22}, {&(0x7f0000001b00)=""/67, 0x43}], 0x4, &(0x7f0000001bc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}], 0x2, 0x2020, &(0x7f0000001d40)={0x0, 0x989680}) dup3(r1, r2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:02 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xb00000000000000) 09:28:02 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2f, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:02 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x6, 0x1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 649.191152][ T22] audit: type=1400 audit(1634549282.941:3480): avc: denied { ioctl } for pid=686 comm="syz-executor.1" path="/dev/snapshot" dev="devtmpfs" ino=89 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 09:28:03 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1300) 09:28:03 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:03 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xc00000000000000) 09:28:03 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x14000000, 0x0, 0x0) 09:28:03 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) fchdir(r1) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:03 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x30, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:03 executing program 1: r0 = syz_io_uring_setup(0xffffffff, &(0x7f0000000000)={0x0, 0x1ffffffe, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:03 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r7, 0xfffffffeffffffff, 0x0, 0x200, 0x4, 0x0, {0x0, r5}}, 0xfffffffb) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r5) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x9) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:03 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xd00000000000000) 09:28:03 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:03 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:03 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x31, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:04 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1400) 09:28:04 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xe00000000000000) 09:28:04 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:04 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x15000000, 0x0, 0x0) 09:28:04 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x32, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:04 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf00000000000000) 09:28:04 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_complete(r1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x50000000000, 0x10000}) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 09:28:04 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:04 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000000)='./file0\x00', 0xc71ee8d6e6fea3ed, 0x80) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:04 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1000000000000000) 09:28:04 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:05 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x40011, r1, 0x10000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0xd819, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$incfs(r3, &(0x7f0000000280)='.pending_reads\x00', 0x400000, 0x40) syz_io_uring_setup(0x34f4, &(0x7f00000002c0)={0x0, 0xcfb0, 0x2, 0x0, 0x1f2, 0x0, r4}, &(0x7f00002f0000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000000096361e25090000"], 0x1c}}, 0x0) write$binfmt_misc(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a31249b3a17e73a59ccb4232eab44170534980618341e723ad8e86411c8a67ee434dc3406112e9f1524e7e49ebd19b9304a22705647add7440485150aa4764ae99b0cc50ecb50841c25a2f8f755bb4998a164a30c348dea20e8708a0c2b1f0c308352aec0e730a0ffb2bd33dd2b325ab9ab3ce59e733f04fd86568d7d6c8a576f1c3a8ad8378ada00"/148], 0xa2) r6 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r6, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r7, 0x2, &(0x7f0000000580)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)='\x00', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r3, &(0x7f0000000180)}]) r8 = fsmount(r2, 0x0, 0x4) io_cancel(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r8, &(0x7f0000000040)="ce", 0x1, 0x400, 0x0, 0x3, r2}, &(0x7f0000000180)) io_setup(0x0, &(0x7f0000000440)) 09:28:05 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:05 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1500) 09:28:05 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x16000000, 0x0, 0x0) 09:28:05 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1100000000000000) 09:28:05 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x33, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:05 executing program 1: r0 = syz_io_uring_setup(0x1c78, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x160}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/182, 0xb6}], 0x1) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/151, 0x97}], 0x1) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:05 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1200000000000000) 09:28:05 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:05 executing program 1: r0 = syz_io_uring_setup(0x2ad2, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000240)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{}], 0x1, 0x7, 0x3) syz_io_uring_setup(0xc02, &(0x7f0000000140)={0x0, 0x1736, 0x4, 0x2, 0x3b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2004, @fd_index=0x4, 0x480000000000, 0x5, 0x8, 0x0, 0x0, {0x2}}, 0xfffffffd) 09:28:05 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:05 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000100000000000000000000060012400000000000000000"], 0x1c}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)=0x1) 09:28:05 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1300000000000000) 09:28:06 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1600) 09:28:06 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x34, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:06 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x17000000, 0x0, 0x0) 09:28:06 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:06 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1400000000000000) 09:28:06 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:06 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x402c0, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x10}, {r0, 0x410}, {r2, 0x41a}, {r3, 0x34b2}, {r4, 0x629}, {r5, 0x3000}, {r6, 0x400}], 0x7, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0xfffffffffffffff7]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:06 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1500000000000000) 09:28:06 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:06 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x35, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:06 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1600000000000000) 09:28:06 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xc7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 09:28:07 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1700) 09:28:07 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:07 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x18000000, 0x0, 0x0) 09:28:07 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000140)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) io_uring_enter(r1, 0x275b, 0x6a6, 0x2, &(0x7f0000000040)={[0x4]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4211, &(0x7f0000000180)={0x0, 0x8f9f, 0x4, 0x1, 0xef, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r1}, 0x3628) openat(r1, &(0x7f0000000100)='./file0\x00', 0x4800, 0x101) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:07 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1700000000000000) 09:28:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x36, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:07 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x4, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x74e8, 0xb8e9, 0x3, &(0x7f0000000000)={[0x5]}, 0x8) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:07 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1800000000000000) 09:28:07 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:07 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)) close_range(r0, r0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:07 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1900000000000000) 09:28:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x37, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:08 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1800) 09:28:08 executing program 1: r0 = syz_io_uring_setup(0x67bc, &(0x7f0000000080)={0x0, 0x8479, 0x2bb94d9ebdeeb4a, 0x1000002, 0x2000000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) connect(r1, &(0x7f0000000240)=@ax25={{0x3, @null, 0x5}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/120, 0x78}], 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:08 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x19000000, 0x0, 0x0) 09:28:08 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:08 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1a00000000000000) 09:28:08 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x38, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:08 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x348}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x20, 0x100, 0x1}, 0xfff) 09:28:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x54a7}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x14) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x1d78, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000100)) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000280)=0x28) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:08 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1b00000000000000) 09:28:08 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0xd21a, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/233, 0xe9}, {&(0x7f0000002380)=""/84, 0x54}, {&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000002400)=""/48, 0x30}, {&(0x7f0000002440)=""/205, 0xcd}, {&(0x7f0000002540)=""/23, 0x17}], 0x9) 09:28:08 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8e000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:08 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x39, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:09 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1900) 09:28:09 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) close_range(r2, r1, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:09 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1a000000, 0x0, 0x0) 09:28:09 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1c00000000000000) 09:28:09 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:09 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:09 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1aba, 0xf65f, 0x1, &(0x7f0000000000)={[0x5]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:09 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:09 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1d00000000000000) 09:28:09 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:09 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:09 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x623058f18c601ec5, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x2}, {r1, 0x1004}, {r0, 0xa0}, {r2, 0x8020}, {r0, 0x4000}, {r0, 0x4000}], 0x6, &(0x7f0000000200), &(0x7f0000000240)={[0x40]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380)) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:09 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1a00) 09:28:09 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1e00000000000000) 09:28:10 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1b000000, 0x0, 0x0) 09:28:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:10 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:10 executing program 1: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x4}, 0x18) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x20) open(&(0x7f0000000300)='./file1\x00', 0x400000, 0x140) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) r1 = syz_io_uring_setup(0x182, &(0x7f00000001c0)={0x0, 0xd5bf, 0x10, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000180)) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) acct(&(0x7f00000002c0)='./file1\x00') r2 = syz_io_uring_setup(0x55ee, &(0x7f00000000c0)={0x0, 0x72a6, 0x0, 0x3, 0x114}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = signalfd4(r2, &(0x7f0000000380)={[0x8000000]}, 0x8, 0x80000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/108, 0x6c}], 0x2) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:10 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1f00000000000000) 09:28:10 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x400000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:10 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2000000000000000) 09:28:10 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="7818b3d57b8866d55c40256c97f97ad5d00d8e1355568023c47156fa1d284e86dae662c3cd731525ee4f1633c9da646ac2dfb24201d4f44da46638db3c38ca9cce0083b888c279a3aec740e97f4b06a2f528aa5967162abad0207e52d4901c31fd5e2cbed524f24b2be228bf41f5e56bef7fba9c935b8e25a32c3c29b82338d22eeb080398e825a8cba00f1117438f23182f559b3af2dce91ee627d3a314e81577216f03c263de7c1f1b4e0936aaa4a89f5ea3f4e2b6ee97e28340116335fe", 0xbf}, {&(0x7f0000000200)="b9db18f2095e4ad8cd545e22540520d0f79cfbc50e38aa4861ea42d9cd0fba3ed7652cf03529bb369a87760caf7f59688cfe4513f8a61ca3b73c73b315ddff7d34d9bf537e457a384c4fbe1f427cd8abb9072fc3062c395fd718c7dcc7d1f3c48f44d3dac741877be4ac0a90d4d836fc3cf41949a4ead51445fc537d25d3b5521f63324ed04956fd", 0x88}], 0x2) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5219, 0xcd17, 0x0, &(0x7f00000002c0)={[0x81]}, 0x8) 09:28:10 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:10 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6c56, 0xfefffffd, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000000)=""/103, 0x67}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000480)=""/12, 0xc}], 0x9) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:10 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1b00) 09:28:10 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2100000000000000) 09:28:10 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1c000000, 0x0, 0x0) 09:28:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:10 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:10 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:10 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2200000000000000) 09:28:11 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:11 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2300000000000000) 09:28:11 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x800000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:11 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x2, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r1, 0x402, 0xb1c661d318500c51) fcntl$setownex(r1, 0xf, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x1114, 0x1b, 0x1, 0x70bd2c, 0x25dfdbff, {0x1}, [@nested={0x10ff, 0x5f, 0x0, 0x1, [@generic="f9d5f744eb0c92f0311d0bc7d2dd6d889a17f13769d1b533dc42b279b1127a25765e29a1ad5a85a97dc4c0568b5505e7cdaadf71c15682be36781e0256685d8b43470ad0e25f181b9681ddab6c7b787da096b5951ffc8f9fc8cde99babde75cf2bee67b3a3d7417a1f8309a7ba1c4bc500c3f685c3cae3b8ebf0132c7ae7e08b45d6eeeec853cda4795e7ccbc7d110cc32e347a8c34a213e431af250b91610d1230cec793afa5715b72ff221525405ed84be46d52d4bed742ada186f12d4ff60fb2df5eac3b5b3ec9dbb7fa6de7674b9adf5ca64f7af25ade0701cd4f1ef662bd9ede50e4854e7a7aeaf74ad0f170e8be33c05", @typed={0x8, 0x17, 0x0, 0x0, @u32=0x77f64918}, @generic="737cd121675a540f59072858d4fd32fe8e6e9983adb59050b38d04c26ee5c2a72523ee308156a9b65845a446417a5a3052d8555979871d1fc2737ab3153ec8f0519fdc20d0ae188ed3f433adaa0e19f9ae3c7dd9bdb0bed48aa4169decdefb9be2d1ffc45dfe07ca480ac73dbd96118875b79792cb6b180ccac94ba7ec9aac10afe4507374cb554201b9fdd310f9d9d29b2ffcb327e6e61d070626e41f9aea320a492db66a93e1b6d105c6f2a38f80cd20ae34d273b43559f860abf7ee29da4c535fa71451ba7eae72455f43f68435ecbb291939be03d54bb27495062271bf584a65ec3a631695efedc0abc8407040e0c58d7b3d3a072bca0ff6b7af15e4b2b7182978128799ffded875abd38c0834909d3bc9a31a0f12ace9346f31c43d6affb8f64c7cf6422bfcf0b00843b5bf4d997ad69b2d17a525e8ca79b057c999dc62d49da175657e762f12ff5b979a1d440edd509bcf1aa6a55d79df8623dfc71ae0cc8ba90674d5a2f63d5b5a497a2f90754cf54c243abc27a878a38f70bb82576714cabc7f60764b8acd214c09dd64b8ae671741dbb6bbd6252560d1186a91d6853e17a77954bd9b7b3c0496c6acec8386dde8bffce258fa9559a8474111269927883dfaf9d236abba1cc24364e2de3c06c63a3f325927a86c77c51204bd540001b48d3ae56ca14b7d0ffc96d34a3c6310116076bd5d70020f2ae718c1806f6261321a9368c1f94d01f75ae42cdaf0fd21c9ec29d80db58ee9a28e2997704787db6f14b0825110da76a4995a1c12355a3ff0a75d7855e4283a444597b0f16434fba991e5261054abb632e102d21e30a9736d9563c42c9878a8bfc452a8c2a89cb78aaf7103296eb5fe64a2375b2111c6a84f660e57bc04255583421ec82f3cd6b6983a25cd7be37280ee1ce9d0eb15b3a93f6a2336077d950efd47d46148a655094e4338128ace49a91a580e7c27838a84c2bcf065291292262052a182a5a8876657dcac1cfbe923439f21e605d822af0ede20cfc565eb427584676a2ffe8eefeceb17adb3fdaf69a925749923fd97269c30b04062cb52be528435e1b56d346e6d593f16e0503f27d314f0dabc50003d830f67ec071df7524661a352d255b43c508170007a938b64002f02d11f1ca6334204884d6e86265c8ceb399f7c8ed18da4a5dce2c18eebd315fbf00dd8213245fa8924cf202e3b1fbbade99017b7d0e7c19de5a7eb5d2c77501e6a97deb0f6383af354528c123c1b9f33d4d3fc998b117e9f9ce20599e80116058c85d4887cd5518c34683d73a0cb3dfa9f73b26ac7778847e1df89b47daca70e58df6e7e8cb43359e91352b82f2bc288a17bed444164570f6cc3653acc08cf827a9c1cb1351dd45ba401e7d823929be62f91a1872f8ac4d89b9f303bb1751096d0714894b63d56042df2636fd3d58f0af78d04b4d41d65b3d829951f67cefb561afc8da2f1ba4c56183cf8394bd5817c5c32ece2ea28c5c00a61bf3dc8b16f09a40734b092bb038bc1a25aa13bf7dbc642068f741ca7e8d03f6dba0fd1a46b89810ceab8f2e29f051b9a3f3291fbfefc14b18e48839378141c8c91197b3c161691166b07b4f2b0aec6beb4a1eb151ade4802082538d1a74ea3d7a49cecb2bf388df1e531f3cb0126fd1438e9c123455b9d3d7738bd787ee3725b79911e56fe1efd7192e3133be51eaba50c222d266c6c6001a1161a443fe2cbec3dc16d2d9065c0fd9dff0aeab3bd1ec37f6a60218c12a043cc5988ecb60f80717cca4ba381b8cfff7cb73bd8ca2efcd1a6add1c072586b31b9eeeac08c9a3c3f7c32b97defe71873b4873f58df21a43d53a7b18eee4ef89da1362a571228033538e25c8e74a263610a0f92f806e590cfc6aa803d35d774d405c3a07ea61a3975a00a0be51c50606504279bb9d79810a1390cce2428a16b377a1e26603bde1cfceb7f5a650fefd7d0028e8607a2df0124aa886cc29eb968636b2044057321af40513f05ec451cb0681eae597bd62f9c125dcaf8799df9d8097fb7bf9870de08bfa224bcd71e3569755ea97eb701a3b2928ab5b0d904e8af142862cad5d8cac69602389a7d44d6033eb2984f5538943557ff79dc0d616538bd962810888a4fa0235d686b7727199874cc492ed979eb78bee41d96889d202c8269442fc320ab0e8586245a79cecb37d9af46a31d1a75ad8ff7ac5e7c05916306b7f6eb96684ce509781fb0811069eb154fd753ffb2b62aea0d5b74f775a43405e9399956d1a185c00b781f90d40548bc69bc01f782d40d9ce474df9aef13dd641ad844016dafc1a6c1a1daca7a429df8da6bd972b6541b15353754dbe16c21c3b3ecb64bc7ac40c0617239dbcb43c09c14fedb479134c30ae28d37e0b3872240dd3b56414b159d56222e6e64031f05c2c271995e9e8b7948f1331fbbd333e6f7bee23df6cc1e3044ab05f2c7ef95fe1a1cdd557b849f897b37ee4eb45c8cd90c63ea6af6a3dc6bd9f4ec2b9c45ee561def8af312ae8763d90c1f8bb0d3c45710ad89c1adbdeb47f150037495a69a91be657d8014e1cb501aa7b34ac6e52eccd9f0ca8be300e662ea5065daeee1c68e0105c1e09e5486106474d9413d94b0adb76ed7c30a0e3328a7b558fef5b045a4b1bc24126385cd732c6ddd3892e93f3702ab537d8d91bf138acf9df1cf82088791eb5a31242311ed154e732fc91873df3f2f04c2ec9bb98953f792c6c97e44cd2bd345e5bd31587c076ae2b06fb23f17c660b47c8261caaa6414ed72533113ed276778f52dd95cb7d663f15396066e577fe1e9d1d53dba8864c74c982faaab04e98644eae0d6cd42dacc17c8908158f86a3a61e3c99c33dfdbbb3dda93d00df4f7bbbd65402640eec9a4ed65c9951ef8d6d5ae2363f0b64706fec9f6aae63d3ab6ba2b40c3506f7dd1a701dd787d56afba21305359dfa862535341318f9de96c7f723f1fc377363e61642d723b5319842529164a6beef5aa6dccdf5068572c2579009db13cf587f10cc44ce09c16dcc70df6ebe8320e9352f950c856065d2119e6494f7197033f4e0b362d19f761e60e3f87d7f19970081b6535fef43f3304892e16820374a2c6a496ae6c8a3b6db349b6646c9cb65fb718887f8a738474fbfc818261abff566e678ed8f48861670e7808ffab7962dd9b0278783ebbced9a36731ebba5b882959cfbe9b1b277a9bcb6fb7d53d90b28c168da44c06f393d341f40d6816a874fe603dc268f21e8d1bf34ed13311feb156c39610f8125169e99be0ba486e0dc2ef69fe39391e84caddcd34f899f7220ce280b329d799c8cd0d7c71cc9876abd7f868239a41a1f68e1b76f5d06adc36c3a0e30f324d90cab82aaa3774b01d28f8f252ceb78d588f242dae3cd203c24b6e283c79411038e18736a79a2d8b7600cafe5faefaad9b8f3b352afa09b1d432717d652a9f70101bfabeefe7130068764520816c8f3e763c88f0e1bbf706d98d12a7ca6d59efad623a80116406db77d02183d2e38666b81d5cc4abfda7d4ffef3dbe6af8362cc9c30b6aeea0646231d09c73cab150eba707d441b8e29636ada6f742b3acc75062e5a6bf69f642fdbafac20a091ef887fc75a5d3eb0755c1e4990a3fa8c451b0db454fa1091bb54a283ed80d0d9af9014ba957d7401bc1a319434b7c78cec685d24d2e75e1b6bb3d83d7f8d9255b80419f2a492506e6ac2d7b40480bd844ded71c35c79c106eb18dd01d5c038eacb420b35960d622800c22d38118af3a58cc80830276616864f6fe43859cdea60e2042edb05fdde662bb5edfcfdf7260b3023cde2a2c25a1aa6d49d198aaa7bcc68ecde34b6f144215112a4bd3643bcaef396e8fdf93b5155abb95b716839a99d732a6cf497816481f5bf2c4aadfb5d6cc334fbcbf7a7ddd9246f64596f27c0d752f6445c124f2782e273b54ca41a48f2fe64fe0e73bd8cae7f9193a2249bde64a5b33da9d525909205baf9971597923929e83fb81eaa0cf6c8ab76de4f079a6369c45383dad5d19111a61c48b1b740f851337bd1982fb3f72067bffa26da44c366ae2ac4ce9fae5988cf8cd35640f67caa7863433fe8b1a134ec2d6f03ea8489aacd0f5aa51baeae2a2c28c8173209a9fa4c6721c43fcb7ddc87b30957182ae7392ea054edf439660feee2150671c92cfe5ba0bbabedb4fb3fa3209b6c84895faf5a4326d45a31b72144a8095388db7ef141e989b76194bb6c52f5243c6b609827c91feb30c41f1e85d7ee0263fc013dae76b87578020b176abd1f28ea83e64d079cfdef8f4a578e7441b29b61457a6ade63f80407f14d98c2e90b19aebc2111f6e5d8b68d71c94c2edd3a64dca142b40390896141e64be0ffbd27fbbf52c5ca9f856a05746969d774189a6aba35a72dd62660944a79cfd7d744c3161ffe6266070ba3f915a3bded5a9b422f7e420511387ccc7530c53f0279547f28f3f6e2d6051a4fbd906e9936fd5335ce12fe66d9a4a8816454b5ad69f2dcb01658e80bb93a1ef70caf483187881e2be7b12e95074f8643834c4c1fa519e81c51a2a8d78121084e554dfc4c1fbe1757251c2a08c74d111daf9095611cc00e467dc98c73a6b0fc778f872989a58d999b06bf2000fd6020093741574a6e8e7a1037c04e5ce341dd41ce63567826dd48aa1d10108f2660d58f90a1d9650e63115b3d35ed11e357bc98bef54c22aebb6796316d5b6b14b8dfd3c1e1eed775057a5e929e763ec5ee608520e2b67831901bf7d5e70cbf890f8b5161bd52329e46e86209828b0d0a142a8272e361fca25b9c81672068e150daf51a27b6a2522d8eee3d76cb4ca6bac47616a1aac15734cd72fb84c086200cce34c26e67ad6551d2642174c5bd61d0ae083c5c4a2656cf101f1561cda9e06cecb5e09f2c633f61ff481842c205e20bb56a4b1222ea95986496bb7292a92571f9845b7e3e0f9d70fbeb866b1fa0a3b3945c7bb2bb4f339b38e8d65dafd3366de3281e3bbf5297662d30a2e21eda073a1c1074f73b8abd5a5d609f16b9997b4b3ef288fdac2841a7c9fde41691a9703e70a3fc63fad38096430b1aaeb6115c0325313650109a078ef1a08bd2acdde382edd8cb149600fd6d5ce37cb29e9fb3ed3c96e60d22edcdd2feaf34e259dd49c725fd7ad0ac04e0b6dff983d35efce5eb6e1c2e8a64310abf9b56b62023518ad846a3ab97a97fee810ab9530a180e00ba4b4dd76887e6a246e1f56eaad78650cf92284a46c7c184d96a7cceebaa6cdb48070eac86c60a0e2e13d3253550300fe77890bf0632da4089fd31778684d7172a7871ef8be751ed1efce3cfaf69858f2a8c4941ebecc7368ad421a99969767a585c15b0c07868a93667e8ff2f45bb9c708cea24cd73f0da1f8459285410b3e156b06f93b1334b3fc73269b241cf811a9c538d47d6e9f837ffbf21230030aa70bd5f8e439cf95bf040948978e43b29b80cff9cc0cd79aa3f95288cb73b02adcb43a2f7101c6bd07f8be76d1b4d00eb72f5ba8e5559539b149b1b98cc54f2e8f3aa9cb58e1caa111343c82b36b9b060d04d9806db23d686dfc6173198137b8e7633b81a759d8670f4e3fb695be18056c3ef1ad06eca2ef0283252e9cb55a7971f505ae389f7990a5fcbc1dc864166b766ff6289818fe8b2ac69ca953a559e3180dadc82c865a89507df782aa832d33b81db909f138a4d3e86ba81f878803599924d6f5ea7b989422918fef5a66f46db5718509861faf6cf37b9558d5accd9262889266d795120a352c9679c9bea6a02bf96b10b81c6abd8e3a45dfddc54eae50"]}]}, 0x1114}, 0x1, 0x0, 0x0, 0x1}, 0x800) preadv(r2, 0x0, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x74, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x61}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x20}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}]}, 0x74}}, 0x4000000) 09:28:11 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) [ 657.331133][ T22] audit: type=1400 audit(1634549291.081:3481): avc: denied { watch watch_reads } for pid=1053 comm="syz-executor.1" path="/proc/1053" dev="proc" ino=89715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 09:28:11 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1c00) 09:28:11 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r3, r8, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, &(0x7f0000000180)={r9, r10+60000000}, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x4, 0x57ecc6, {0x0, r0}, 0x800000, 0x8, 0x1, {0x0, 0x0, r0}}, 0x4) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r11, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r11, 0x222b, 0x5efc, 0x2, &(0x7f0000000040)={[0x7fff]}, 0x8) 09:28:11 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:11 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2400000000000000) 09:28:11 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:11 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x7d84, 0x0, 0x4000, 0x141}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000140)="11e24dccbf8d747b940c45cf504aa67914da5c0a55a1fa152fd4e296894a702049c1efc09160b005d44e28718e5170790074941da5d441bd5c19dede2cf46f93dd857c0fdc9db3c3fe500026e24cc9b63e8bd4088dbcb097d0b6da3b6169d42d7f64030bb195f6f5bcfdb4b4d1b589fcaa5673841824c70597b1580145f40909116705efed1faf5af039590df8a34fc8a9806a8250b2c8a608f365f03f9b4e46c5cfdb36dd743e6681817f60813cf222eb6c97133e48b44ae7c5083d1d7b9112f3dbe62e4f2019a846b9086aadf162450ded958775", 0xd5, 0x1}, 0xcb) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:11 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1d000000, 0x0, 0x0) 09:28:11 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:11 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x3d1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x280b, 0x0, 0x0, 0x0) 09:28:11 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2500000000000000) 09:28:11 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:11 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5b66, 0x20, 0x1f}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:12 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1d00) 09:28:12 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2600000000000000) 09:28:12 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:12 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:12 executing program 1: r0 = syz_io_uring_setup(0x17e, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x1000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x20010, r0, 0x8000000) r2 = syz_io_uring_setup(0x1a88, &(0x7f0000000080)={0x0, 0xd7e6, 0x2, 0x1, 0x2d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_enter(r4, 0x6ed2, 0xb3e7, 0x0, &(0x7f00000002c0)={[0x4]}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r0, 0x7ff, 0x7, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x10000000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000200)={r6, r7+60000000}, 0x1, 0x1}, 0x1ff) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:12 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:12 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1e000000, 0x0, 0x0) 09:28:12 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2700000000000000) 09:28:12 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:12 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x7405, 0xa, 0x1, {0x0, 0x0, r0}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:12 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:12 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x1, 0x0, 0x0) 09:28:13 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1e00) 09:28:13 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x41, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:13 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x4000000000000000) 09:28:13 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:13 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x6, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1}, 0x80) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:13 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:13 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1f000000, 0x0, 0x0) 09:28:13 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x2aa}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:13 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x4200000000000000) 09:28:13 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:13 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8e00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:13 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xc640, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:14 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1f00) 09:28:14 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x5b00000000000000) 09:28:14 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x42, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:14 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x8e}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:14 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x766, &(0x7f0000000180)={0x0, 0x401c, 0x8, 0x49800000, 0x392, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000003, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000840)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x2, 0x8, 0x0, 0xffff911d, 0x1}, 0x2) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000200)={0x2, 0x1, {0x2, 0x0, 0x1, 0x3, 0x4}, 0x8000}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r4 = dup2(0xffffffffffffffff, r0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/125, 0x7d}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000900)=""/140, 0x8c}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f00000006c0)=""/73, 0x49}], 0x7) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:14 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0xc2}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:14 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x20000000, 0x0, 0x0) 09:28:14 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 09:28:14 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0xe0, &(0x7f0000000000)={0x0, 0x7029, 0x0, 0x0, 0x30d, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000180)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x400}, 0x3}, 0x5) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x420b, 0x138f, 0x1, &(0x7f0000000140)={[0xb486]}, 0x8) 09:28:14 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0xec0}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:14 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x43, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:14 executing program 1: r0 = syz_io_uring_setup(0x4153, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1f) sendfile(0xffffffffffffffff, r2, &(0x7f0000000140)=0x9, 0xd667) 09:28:15 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2000) 09:28:15 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x26}], 0x2) 09:28:15 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xffffffff00000000) 09:28:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x9, 0x7c001) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x10040, 0x0) io_uring_enter(r2, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x810, r1, 0xb5990000) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) preadv(r2, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/182, 0xb6}], 0x6, 0x8, 0x101) io_uring_enter(r3, 0x6173, 0x4000, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) 09:28:15 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x44, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:15 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000400)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xfb5, 0x2, &(0x7f0000000500)="3f6be73115f0a0314f26a7ba6962b94e5846c0877b111f2a99057afce30e4e982f17bb43001410e088a9e3b9129000074f6250f89c75856db1443c7e59dc183c843866209a3fafc34d607730c5cf4a453c34dfdb385077a4c1e0945a56d17c84bdb198c1833beed536c74cf44c2d2f06cb0849ab35da8c90f1c611ed9f0a54381405678ceb2f124fbc78e32e5b6c2c0a43146645e81b3af8b2723fd160f41f112063dc0f4996d7e7b31dc0cef9b3597475e0e3fb6360b1d5d7f4a775b4894eca6d95c4d228e15db97eceed2049c0e7a9eecbde5be6a38e93fcd953b1c6726a926ef88e73bfc7f22e88b421671abec3fe5c9aa21f40edf9649085e79d898a4b698f31ac25a212c65b3fd45902fca2ce3d8f5b7765b7f4a7d5cfb9bccb6301b8310391e08eacbd4f1ea37ca697764590cf58e8db1955cb1678850f3339d154bfa22813b2b832acf809df8ee1e4a71ce66de0fb737cf1c6fd348af9f9c9b8a8e3f46e9d27d363ad1bfb38a283b6ae216ca5000006548665246b9320c594cb84ffa5ce6ba18c829d0531d9538fb3941a3d2c28ece8df45d29798d8d4cb37965a6f3cdc812b68a2fbb6020a0550ccfad39462a0d4d8aaba0fb133fce1e6bf7249124b822befe1b123a02e2e56bbb5c467cb0036f01aed8edca6b9c559e296daa32830b3df4481dd07f5e1dd9c00d252531e5683919c2de0c3d78323c9bb2565c98e90ac3e9e6ac65691b517c6d5c5a5dde8e0f9cddcf974fa359d66dd088f8ac755b76ffd39c0e2fd956f93bd65cbca9c189b80fb5ce0c68885c282c4b4350687ff353818745495e1a1f6e6d5585edff0d86b49a604a92131ca15527761e2bf5e8025d9c72c886d91f84c5b32b4622c71f73c3a2e24a2e583d7b400b39f66c5fcba9cbcbc4407689745ad1577dad725cc8b4f071f633e01080ab67615d2e890ac57c1658e0d821ef495e4f850059007e1a0ac70bc5c64b919a077e39f60a79d7657511338955be6a9e5e8fb49d633eca24fde53cbd725bc3eb492f43f445bbf18a0e0069d7c061ca12c6231a8873d0307ae6c451a252d9c18ffa7531c6d61c671643eb960a1e5c4b7aa8aa1e497b5d9bf3e03718f3902ca782b69aabe3c894ff3a75676bd9f05dbd1b3b36b54fe514f717143824d58206371919249e76f2c3e342e87940e6e1ba8b8b60d76a42bcef3ca865cd0da38b5428f46317cce72e2e92b59679cf5cba7bce78d0aeaab7a5d858e9c1081502de47d1467c70617fe1763e5a2fbcd1bbcd16034a27a31a74b15ab56cc128498d699d27f0fcabc48b0ab2ce56eb363bad896eafa11ea4558fa7a05761a38bdd80bff491c2920def219bd39ebd50e4a988fc011d414d91a66550ec90a1c58521a8d1cc00b147909c1dea1b7ec471e49f5575ac2c1708de683f2d876fd44c8cdee7cc2d9b4390437fce01e9872438aed7082c728531a0aada4e868345bd40512910a5cf575eba76c88a409feec0ac02f6171eb256ba659bf667400f11bf4de4691aa2ee2818a790c4eebd8f577a22523c7cf362759526e2e4abac17f5c8bb219303c4fde7f3cdad732ca9198825a329a6e45ff0bd4455df8519317bfd10b533579ee3fa1f184f3e7f23b0525db450b0dbb1110e21384fb856be3c8b37c8123f629fb8259e6f6243fe5dc529dab8c042bf9ec6b7b7475f5a015a7909b0450b85a6864f9c7b4106461a63bbad9859cf3ffea617891416985539254452f3027103c6e3b7444e988158cb9cc1a0b83a7d9149621f5b406b829f0e399036e433c4f3ead335962cd78e6a3b96c8384cdbfaa57da719bb66f9832543d8de7ff391fb4464ad53ce0c9cafda90e4b86de8cace83ea8ecf105db5ee7f042bb90ac4eca5e8c06872d2adafe9a9903c1341892fbfa7bc397c7cf0fe3bc22948beedfa3e3e83f48f46c4e2701a68b9bab8033e49a4412bb150006890addbe6ee8a350d786ccc2d4701077373def1c34dbe30a67278110d57fc91155a5f047e5448b76961ec85966db748173a5cde2f49721fde20415326444a43b10f46dc86ab4d01c23075cdf63ae2ffac1a5f2c413f791bbf56cedad250f20e054befa10dc04c04875961d442dcfde8df8096f9c51a9b72ad22bf52bf9409ba9e663babcd8cf7871d7962c71eb30f474c3d17572a18ec5e8ddf79f0916431e5374b7be3e9e3371fa9e067d8262d9bab7e09077246efac6d3d548694cd60be610f5a2e564ff1c1491fbe4fe02cbc5adfc1a5467a9cee4727df36c1454e36149ef9a68e41e8cdb37315d5ac8e9f885707b09131ab903b32461222dd159c20f1dbf6932ae4a7304dfdc07eaadd61d170b76f23176666278e7905b98b52e33bf967b1d91fd559035cdfefe456e12bb03614a9bcfb23e33be390319bc4190289c02ced4e2d4179cb5177d88941e456eb4232478eacba093fc4d527756a2cb2462ba033f1f9e43572ab762c648a1679c65b1116447a6ed4be1299b8e81a3d8553db1f211f48edb801a5d34acf5211e277c9a829f0aa39f982a6d23fddcc1265e56ab68eab9718a1a312aca399551086e100bd263d8196479580df796910667e3db6afb2165e30978b32af6fae585d8874a4fd0990a2f9f301a289839d4f99524c179b3b444454a43d252b6ba42abc2873dc31768800b9e8a0f6005f108b1a35a933ce0143b685746ebb25d80d6741c2efef0e68a67dbbd95fae26c88f02856c20e1ce6d4d921b821f324355aba24bcb561e9717ab82a0016c44e5ffaf9c132aa82d2712e58f247c9219edde701fb8a8494eb2acf7a6d70c21de9fb18cca7d95b6fbaac2e56a93a88374d24d94318763c34daf2402f3bd21f3b351e8a485976e6657607b7558f8c32d758c0ba57db09b3cabf2598ded68273a1174038c1278663ccb7aa760cd30e546946912b59bb25d48d516d0edc7d8581abec2036264277178ef05f915ee9f6693aa1838db3d53337c2686305900235b330defc22ef117e1823f4363453c7076fa88b002e6545e4c519353d8429b7e6d909bb2fad594cc105a59137cf26bea9d2fc09fe0b6e8a147d144b1c708b5fd6520cbe88a6e9234a27150fe5896fcbdbdaaa8cde5087f2f41b6f0b373a3c83f09c947118a26f0e081dff5084d95fd6b6dc4ef6acbac2e2b9b81bfedb844911f5faee82c00bb85bbe99a254545c7ec4e174a2f9f1e6c5a2c5f066e6addda5bc0cb26fc7a9bd8e724c36d2b0f7833d84cc07ec393464f95b147948b012d66993c24a6bda717dfce703a6b69893086cf673388a1f9fd45706963a86f0309541ad670aa1bbbde7ce24e0888f90908dac1fd5af380eb369d88ddedcc8a055a7384c35d793d62f04318c2b70e8b57957936c824f11658af2440e39fab2a69341d7f35f31dccc88dcf08ca33b71821ff7f6b3d11803d3f4c4ff61bad11178f410e88b3802dff39f9011d66eefe8106c825494d88a7d03b86e2bc2ab9577e5a8f0b80ffbf60242c5b24a1c17b59523bf7b8086c6c3ef4a2b5a4d319545e116b804e5fd60c63c53e7b46c663d4df5fb1217eda158e0ad4c02977fd589bd8a89debc383b5adc570e82e10e1b65d30d4dba87ff5dddffd7a52163e14b27ad20442ab0ae3e9b91564c332e262b05964cb9df6ac8b05de4e849c17379866c9891e0670e75dcb9912286376c7c306205f5331e863f7b359e58c69401004461146281d1bfc97f3f10e55798fbc24e744453cf57aa37c47e0c30549087df3b40f52f0e4d582e16df2467519e4c19cb7105b25d1ca014e547c8786df8e2981560308cdf90fc757b357d04240a1a07767949c2700a53f9def472a362815365450d31574c15fd84894809697926a87faadacf89ad19fcb7c07ea48102712bf82fe230ead3a8e932665fcf7e1ef785a70e363bd618e6dfc38ecf5ccf3b5f563f80e45299126b9d76c4f4649e35f2ecbacafd9fcc70124e8713150468355f09d40337d5df4588f70af0fa7171ef479071e96826fea41d8986651bea870206f611dfe42094283e287cbeab4b66a9557ace371f0fede63ce6d257505c8b136cfc0f4121c8eba311c3424b2ea565018323734d7b33c55a040e4495872b4a1abc9257d6c8bcf565a6c13dfa0feae6a1d18c6ee3e1f68dc316b94ea24f69430625f553af06f8f5e3f35e4d7cefe8843655c607799defc11d6d3d1c4b2b6e8bb88de2a8e55342e91718429f2fb68748d367b3e090b5f6e6d1a3a96906d9596ef46c6ab6b8a58d751ceef1ef17f15a700adf61b79c6b54b20acb9f9d037e63a273e2f6e762e048b4cb29ce6afb90af506fcb712cad6fcc620594bf324f4f716857a31eae655f75847460cb5d830917462ee7aa25ebb9ccf89fc0087dd1b3e9bb9c4a94c1072f493db7a90287e72b573d6fb6725d4e2dd91ca63f2cc9d49e58986941d44f58f4aa98cba275212c33a76a0df47b1874152f15a62a1021204a064a8764656e9bfb9b77ef0ab34de026dd777e49e2be5c6c1576d4d06f729bdef733a7154a13db7c73d7f5d18c96083471f07b73a225b5b5fb2b146932da831a47af1937560a688eff7092dd36bd5b5c11c524b44f311c2aa61241c24f061d3be6dbd95a46ee2085e5043329d2c0492b40aa0c41853528bd58eb91bd03d636e06ac869ec787618cdf7334306401bd3818388ad8de96d60aba2b8be1e23ad5e6e3411d2c330b63adfc718780318497b58b9eb8eff23c98934e8229e71188bdb278b1ab75ae0d9081ca4a0a188f26edda03207b321f2a3f843066223966c915644fb929dc5f5f241a0c6eb8744b6f0be393d8d8a56fb9e4df7c11aab192a8836319bddca17c87e4f4af4749e9d35011c92bbf59117d54fd7c2f93f9579911868caaedf7e745ac2a27d013eb4fc4c2d1de745a18821e48233ea695a14dba4e3e664bf845c7882e3467ea19e3cd8ac7d08287f49333daba3859c535a75a121cc4486a62c81b60b25fad91f0bb802004a15072188ad66c92ad01713a91bed78740fb36e47d00194353c20b33bdfef0b7fc61f64a01e2ff3f113088e15a181228b46410c3b159036cfc0a395bad101be5264e6b7077885a3c16c30c598bc226d1f23d4c7ae57f9b6dc6e17aa05118f602f7d369895fa18117c455ccfae6b4026f6ed4143a5eaaa09548340f7d18cf200682205956a5d0ef2a3620e03cc80477706402fa19431a90561fec27b367a7676ad924e77cac4743db4371c439334a61b06b4054d584025d9dd7e2100b1e898007843c0081d96f1d2a9ef7c99a77ee0c621cc757faee25d703c77dd8234fc89fcd1178ecfcd78d890f7f8769448c94df9ccc80e7206ad98ab479e2113436429ee01f322fe247563746792104ff3dc27749b280d3bc89ef879a4a643ee097aa88381a881a3eaba722749eb374cc7a411c98e9a0ece7ed8743a5b7f137920f2d73e7ee7580630f064c253f966b5d67c2007dc8d4bc29161bf73c3475235f9c28ee2b64a637fd4efdd2fde99c7033bc21565960fe7ff0182728f2a493d9013b5ab5bf97870c9f033d4176a0026f9b6f0afa05fd65617672d8ec52c822a277cd09991f25ef91b2f9455728f96e6e51aa7930152d51d692f24a54e45d1dbbce41c2714f9a6e60d017a32c9d22084842447552957bc3f52a5e38be3134ab66821ec35d1845a09030905defcbd3339f72d4e27123302b26b99e54156e042ecea32e6fe4e155e8404041e83e7830a9861a9bcf54157cba1017c99d02516e5934f04f0295591826dafc4ea827bac8e109e03e41f8c6ae5680500623d556ec78cd6889f518fd2b6195701bb8417bff7", 0x10000, 0x0, 0x0, {0x2, r3}}, 0xf2cd) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x27a0, 0xb4a2, 0x2, &(0x7f0000000000)={[0x81]}, 0x8) syz_io_uring_setup(0x61b8, &(0x7f0000000140)={0x0, 0x991a, 0x0, 0x2, 0x1f, 0x0, r0}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x7062, 0x48ed, 0x2, &(0x7f00000002c0)={[0x2]}, 0x8) clock_nanosleep(0x7, 0x0, &(0x7f0000000380), &(0x7f00000003c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000056c0)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000001500)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1, &(0x7f0000001540)=""/2, 0x2}, 0xdde0}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001580)=""/158, 0x9e}, {&(0x7f0000001640)=""/180, 0xb4}, {&(0x7f0000001700)=""/168, 0xa8}, {&(0x7f00000017c0)=""/74, 0x4a}, {&(0x7f0000001840)=""/166, 0xa6}, {&(0x7f0000001900)=""/246, 0xf6}, {&(0x7f0000001a00)=""/194, 0xc2}, {&(0x7f0000001b00)=""/109, 0x6d}], 0x8, &(0x7f0000001c00)=""/54, 0x36}, 0x7ff}, {{&(0x7f0000001c40)=@ieee802154, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001cc0)=""/76, 0x4c}, {&(0x7f0000002d80)=""/86, 0x56}, {&(0x7f0000002e00)=""/72, 0x48}, {&(0x7f0000002e80)=""/93, 0x5d}, {&(0x7f0000002f00)=""/176, 0xb0}], 0x5, &(0x7f0000003040)=""/70, 0x46}, 0x3}, {{&(0x7f00000030c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000003140)=""/10, 0xa}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/114, 0x72}, {&(0x7f0000004200)=""/212, 0xd4}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/13, 0xd}], 0x6}, 0xe8}, {{&(0x7f00000053c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005680)=[{&(0x7f0000005440)=""/248, 0xf8}, {&(0x7f0000005540)=""/164, 0xa4}, {&(0x7f0000005600)=""/74, 0x4a}], 0x3}, 0x2}], 0x5, 0x0, &(0x7f0000005800)={0x0, 0x989680}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={r5, r6+60000000}, 0x1, 0x0, 0x1}, 0x6fe6) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r7, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r8, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000300)=r8, 0x1) 09:28:15 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x21000000, 0x0, 0x0) 09:28:15 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0xe00}], 0x2) 09:28:15 executing program 1: r0 = syz_io_uring_setup(0x17e, &(0x7f0000000080)={0x0, 0x3f30}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x4000010, r0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r2, r1, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040)={r3, r4+10000000}, 0x1, 0x1}, 0x7a15) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:15 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_enter(r2, 0xffffffff, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:15 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6fb8, 0xeb00, 0x1, &(0x7f0000000000)={[0x1]}, 0x8) 09:28:15 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x3) 09:28:16 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2100) 09:28:16 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x45, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:16 executing program 1: r0 = syz_io_uring_setup(0x10000182, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:16 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x4) 09:28:16 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x98a, &(0x7f0000000000)={0x0, 0x8b01, 0x8, 0x2, 0x3bb, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x5003, @fd=r0, 0x2307, 0x4, 0x2, 0x18, 0x1, {0x1}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(r3, r7, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x3, 0x6, 0x101, 0x4, 0x0, 0x0, {0x0, r9}}, 0x1ff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:16 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) syz_io_uring_setup(0xf4, &(0x7f0000000000)={0x0, 0xe3f5, 0x10, 0x3, 0xdd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2004, @fd_index=0x2, 0xdbf, 0x0, 0x0, 0x1f, 0x0, {0x1, r3}}, 0x28000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000280)={0x2, 0x48, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:16 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x22000000, 0x0, 0x0) 09:28:16 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x7) 09:28:16 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x45080) r5 = io_uring_setup(0x6053, &(0x7f0000000080)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x11, 0x14ac000, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x10000, 0x2, 0x0, {0x0, r6, r0}}, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x1, 0x0, 0x4) 09:28:16 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x5e61, &(0x7f0000000000)={0x0, 0xe0be, 0x0, 0x3, 0x327, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/sg', 0x20000, 0x10) syz_io_uring_submit(0x0, r3, &(0x7f0000000a80)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r6, 0x0, &(0x7f0000000a40)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x101, 0x3}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)="52460126fa5c60ce8d0205239d2b6d0c3e1217ea9213ffa8315013c5ac03f7a05d479bc6371b38c0b05e9fd1b97feb5079d81ea9903852635bcdcc8c59ab7dd8193bf1574ba9dcccc91f4769337c7eca6028d1c94de57124126a3746ee8b36b1280baf00dce401af0547e6636861f5dcc5c3bc692221b5e77b66f2595e6e1ccd9cc1ce9c5823a19a4c8f77df1ea8c40346bb98796aac15af0d923b127be9cdd1ccda0af07480e72949c20a6f13192bb26a7dbf77ceb73c1878c23c71715b5b", 0xbf}, {&(0x7f0000000540)="cb36af7e74cb7a5ea06d14db92c16f70d2e1cdc2ade00170b620e95d2cb98a3af56c0910b024f6e704f1fa8f63916c2a76826a2757515da87e5d494645ce210d9603a93853eb583f47137c085bd40d08b758845336bdcd3e9d7f6abef6d858486ad1d658209886724f32414546603a952f049ff939537451809143a32bab08a8814ce22b60f4974f92a3633a5df64842fceda24f42f07024a8cc52b44a069f09736fb3d1f37a44698e56ee2230dd", 0xae}, {&(0x7f0000000600)="2bb6d77c0fad6919d61d51cf4df387a1c896a33b0b517ff72cba0ad461c897847674e3b9ac698ef1b67150d1be20e441a6b8f2d3c5428090b117fcc8d5a9333adbe45579f823e435615e7557bb57a6963880ccc2f4c48fd78527cd683a3043b22878eb1c4191eb57237d5fe5fef5", 0x6e}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="0001598a8a5bcc02527198a4ae8ca400000000000016010000010000002f3c207b05837f70d9c2794360d75d5cb563934e89b4cc0a0b17b28305e4aaed412eedf6e4dde84aaeba548619bb3a40cc7b585f976a0387fc612138a6379699ee6cc8fa1db7b8c0e7c5f5370f86f58075fee7a0acb5667201cdbe5b4bb0d8b2ef8c7a9bb7e5524d949e53ddadd1f9af3c4968f649031dcff3764845f8bfc08819b7f40683b27924ca582e3a5ae5c38d25b161a647ef982d6d4d3bd35509a2492511303101e80796d91d0c51d737e3ed9dbaeed02051b083ccb1f82532ef1a31e6f1ad8f8c2917e62f7ac77f3d4eadf0e0593416bfe5047f400a489dc354511d7f130fb85a35b43e5ab7000000000000200000000000000011010000020000004c1a8669d008ca75cb42620000000000280000000000000029000000030016010000a5c9f0aa19c5392c95fcedadc833e3328c5c8b89c8d99800000000000000000000002a00000023df61feb7031ace9c0d649c7558a862a84f286962ac7da9b09f5d4421444a05f8b3820b95d3f120d4e3d8d10bcddbafa7ecb7efc7731761abec8051c80406c31b802b089e907ff9c0858f23d40ad0aa8cdbb1cfe608a507b8f4a2ed4a7fc0eb0d90f6b203ee9818d18389cb5fa34b00971a8a7080a146fd2355b500a081420c7eedde7e7781b4aaf1a65ea0000000000000000600020007000000342e2b2f9aa7911f624221a8747e4ad97cf6ba3b5a6161607fa35b4fbdd0b5a16e2bc38b4f84ebed3bf5b2e959e066ef92a145a421dca55c964105bd51e3a340c7a5629c807654ee05c6f0f8c2be3bc69c018210fb34f0945e6d99b7a9e029a292c5534dff1411ea75e6d0ac68459102b447e06e6fae5a2ec8ba91d4a3cdb0f0489b2efa4e36dc88929a390000000000000100000000000008010000010000007df0eb4bca3e052294a5e4e2bd205df55fde558a3eb472212f18c725cfcdc43e3a0a06940e12dacd0330ec4c7ec127ad7c7300bc547e65e162cb8b204972822e5339574d07bd4d2fc89ce99a888784997ea682186333c58d519af67521bbfc0bf562b606f38378b1a2292f4f33a3366b4215f8afaf723d394a6d4184e46a759890f0943d323597f0b9760a99050f713061e414daa46eb37ef82b9a65fc5174edf5ccda866862ff242d356f91dcc757d552dd8e632c1b22caa2bada23b5431d8b5096a69f8892a1f0e8f12ae0cee774be8ac119ac449d137e281d784f82a5ad81"], 0x380}, 0x0, 0x4000}, 0xffff) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r7 = io_uring_setup(0x6053, &(0x7f0000000080)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000000200)="e632d32a065cd275c6e4d9cb8cdc74657057aa878187130962dffa48c10dc7f7007ecafc153a3c081765c6e067eff1cced6854f335eb3b9e907ce678cc2d5f67aef8e0020390bfb72b011d870785fbc03e7b9effcfe6dde4459747d50df7102f8ca1fbf725307ba0bcc6deccddbd5b481882a8a1b0e9980138b17378962deaad12f5c40eb7e26c2f3b972c0a4d05963f7e91e4ecac556a773e69e48db81c9540a810e1735af260f589380e0929e1e32de9f745b05fa4", 0xb6}], 0x1, 0xf) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x11, 0x14ac000, r8) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r4, 0x2, 0x0, 0x0, {0x0, r8}}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:16 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:16 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 09:28:17 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2200) 09:28:17 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x46, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:17 executing program 1: r0 = syz_io_uring_setup(0xd3, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x8a80, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x3403, 0x11f2, 0x2, &(0x7f0000000000)={[0x3bc2]}, 0x8) 09:28:17 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2e000) 09:28:17 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1, 0xe1cdb5a62454ffba, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x100, 0x208040, 0x12345}, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x5cbb, &(0x7f0000000400)={0x0, 0xc2bd, 0x8, 0x0, 0x6c, 0x0, r0}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x8) syz_io_uring_setup(0x5237, &(0x7f00000001c0)={0x0, 0x2bf2, 0x1, 0x3, 0x294, 0x0, r0}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r8, r6, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f00000003c0), 0x1, 0x1, 0x1}, 0x103) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x4167, 0xa952, 0x1, &(0x7f0000000000)={[0x210001]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r0, 0x726b6000) syz_io_uring_setup(0x21d0, &(0x7f0000000540)={0x0, 0xed15, 0x1, 0x3, 0x155, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 09:28:17 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/119, 0x77}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/31, 0x1f}], 0x7) 09:28:17 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x23000000, 0x0, 0x0) 09:28:17 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x2c9b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x34640a94, 0x0, 0x0, 0x0, 0x0, 0x1, {0x6, r7}}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:17 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x4fec, 0x27a2, 0x2, &(0x7f0000000000)={[0x7f]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:17 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) r7 = fsmount(0xffffffffffffffff, 0x0, 0xc5) recvmsg(r7, &(0x7f0000000c00)={&(0x7f00000005c0)=@rc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/219, 0xdb}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f0000000800)=""/131, 0x83}, {&(0x7f00000008c0)=""/167, 0xa7}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f0000000a80)=""/223, 0xdf}], 0x6}, 0x10101) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x72dc, 0x0, 0x0, 0x1}, 0xe90) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:17 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x80000000, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002b80)={'wg1\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{&(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000000a00)="9b718b9aa4cc74ea1ebf6ae4463188e10c3ca2b5c43324be69dfc07702619b68e157f7dd24aa43191792", 0x2a}, {&(0x7f0000000a40)="50a5c40640f82889ff5837b0963ec0e14fd90d56cdec990c57b6127294f53229a10f68f741a2b49d633dd06a05633a67d6e0d7f58a9aa90d3ad91702d3d030e97b9cb0d995dcbfe1d7d74ef19a533545902b2cd3caef4aec76ce03468f45bcc3eda978b3b2161d84a37208188335c4c6884c39518bf58075eac38995e72bc815b19d2e62fba6f4ef277c0e25a571c872c0c460673b8110c290778fb0e2d103bc7fc6ffd2fb298785588aa0f8f706d36364a9b8e019a03d0dcfd4271c48b0fb10701803e790ca5f664abf314c4ef1ae5102d3f1c19f985978e49819447ea2dcde8af417840dc3d3009511078865c27dbeb112209dbd9e9cd3f7", 0xf9}, {&(0x7f0000000b40)="219d8f02eaf1648b3b89884f05477807b255a3621952a4697808ebe589a7c7ce1044c98da0b8bb342266615348338803d9b44b495a80aa9452699aa573ff7172495946168dd533b0a0cb28d891fad47bcf7929cbb12853f1bb6ce6e348d9ebdf329acc1580e831da9259a39107b6e0035fec37df47bda44109c98150e320f11904c605736b90d93472031bd8f20927121269c87c178a2db31bd582527aa240070ea6d3765099eb823106807e0c56cb327edebc976fd676d59caa169318b5fe885422ac714070851b08c37df5d6b3699d51d2c11d5c19c76d31cf03f3204885a3e4a50c2de9d462575a901574f2e3131e328a04bc35b82315304acdc87ce7899cded06faab22ffeaa1453ec42f9d71eb9beafa0bf1307d5f11e71b4c19d8572d82142225efec6ee036f4c9a53cdca8ad4441e102240cb542dc0bd0b2ec83352476ebefa7dd13c8ce636072ecec932685133c15ba8b2f5b68ba87defd31baa116739ea737970762e93eae4f6e63b808a821df37b1cee8e3effc62c66fa48192875f89216d8eeafb5e6e4be67e58eb38af77d3f2edc53438664cf1c1155b20a0bfbe343524318c764c38fdbb65a29c893db5a44ec64a27c6cb5727bf3f74c109d5b783ba2aa41e88929ecb92eba0520cd82bd19e935be7ac11110883867b85f4951c919e873bb8a7cc21325be2b6f2e6d2a15ad18ccf1493c9dd86b53a6eb8294f5ef35478482358b1e3fb8cf26531de080a2b233d4546b10174a5260bc1721f4666ab9bf10d716ef65bb7ed7ff80cfd2c0cacf942432ef878e9cc9c57fece70e087620fd9b16574f62f093bea040d0bbb709ec7cac8ff2d94985d3db2598d4f08aeec2c3469a1681f21530cdf41a94b1c3bddd4d8ccc15dfa79cd6c9808d034e9ac6e6801bd4aac26165287faf2ed01d022944db7158994307507e63dae50026d451c355bbb287f42730f7f4a24f8785db750c0e036c6bb9203076bffe3315a8c57527596c4cd357ff0f150dfaad2c13fd47af1aea67e52a93f36e0a11daf73ad248c38c55c598ae34152c612b70df715cba9295fffee83d9797967838cdb0367cd1e8236865dccc6da359e960fdb6b512d4accdb65af90b28c9564be8db51a534a34e237344da8718dbc847376f80bf45392cd71b2a9e842035bf71f7480573b765d6fc7df89446e21fb23db762ff0640937bdd3254396d7facbe5c3a87c96c9a8779962fdc8e9dee9d7215d5fdb68dae398e81d64d6f07a063caf16b7a8c6dd306df3c4b52bb184ff43729974b17d793b8d608c0e629d7821e705647e280178bc024c2adade4807a0f7e4c2d0c4d515995ac6b08b168139ca520cb104d61eebfc5e8867f799bffa304265cfa7ebe97c6b8f04348fa8bd21e2b76105514d6a10c8f5e88099a1ccc0e515a5398c465eeb711769fe0994cfd7d50278113357cdb559f0cd6aec663accd724df0a201618b90c0bd4dc5e4d2923fe8965036709a122d4d77560e9ee422f7e1f7105109a9d3634e8d84e1ed06ec97a1142f0096b9d2895f21a092a5a6609746f4ebe026b53088647ea3edc735321f4d7358293af6f5f676da006068e058ac377ce4af58684a0e4cbb4eeb9beca5e840fe2e2df6f11df867f89f59ed3dd5c31e3bc9723a4d4d38a39a036e3bda4ab518b9b6167f59204eb4b6721f17358bc816dc1097179e3721783dd052a0862e064deaa4e401fcd8401c59f3051e325b28cd7314e5a5ff24ac9d1375529459429c7acea6e9fecd585dad390c18f3bded3746aa253e2532d9cb516bcfe0a2de241c8cb5343999eb3a407b673251688d732d7545cad19abb575061ae10421a7f83dc43314c24b8a92601b71a2a9a993cd2a254f691fe63849759dd6861bdf4c8781566eb09ea48447b1c26dae24a799c3a01c3033fa0e008158c1bf5209e7be33df72ebe2cb9915c32017188e609ca94a3d57937d355e0ef09c9a244905a59730822028264bf01fd9dee5d6f2e92c5220580b088359eaeb63656243f14caf7715d0b838f331278ad04b30e9f18fc0382bd696756711915859ab3c991e8c65985b53886731698618439bf9b0f6dace03d75cc7863c0a19b8fab11cf9e30417526d3bef2bede8f7212d22a8cd95fc70dada837d3a465f101d5601134b6f9f341ca3f0ba89df208be3dbe9aef13197dc52258339ad8e24087ea44d0ede66fe3ba7b2a194d40551732897b1d38e72e8add19238802a02ccbe24f70dff1fb6224266c5afd18654ba6d5049127b86571fcdac0d7c96fba84ce5037fc8d93c5bb7b96761a8b294517751dbb5db599f2a4e70227b1b0451e612e1a1cedf2bfbe4ecbdb5dd38b6cca6d44eff21d5741f9522f3f7c6bea1913d36e69d561eb7be1501c98b1baa794e088cb5780409677c4d1ba705709a3ff6e705ac7a8366931b28ddf3235a10bddbf80ac100a7c118dc9f251a7b232ecb46a236e01ab92857ae9fa08998525b5caa790b792b887130a6ff71e7e4beaf1fabc3118dcc04a76c590489aa25863c1f18abae54b212315c7a6d51129cd9356e7b9340aa7f65f36d7c065b903f328a51e3ebde43d5f2b6129e0ec8e1615a4f78c6226fa1757361831ad3ac3e320b59d56a9892a983bad1d19fe1355e213a4a1a83da471d8aed0e292874514dafedc637fa3f31db98a7777f4c61623090aa38fd0f316b131750bbf63a934be668503f4e2924319d8411da40ce958e707adff2882fec8d1c8874cfabfa2b746f8b791d2d623fd1cb2e4f287c55e2bcab9d3b37eaad48069d46d0c5c8b98634c9eae4f38622b2801b6faaaa7f217bb5873d50a1b43b015619c1ad41f551e244cc5afd4356f192a246c9e9af0f4a97cc02b9f06d63e00463e6dc90eac521f39ee90db566d812dcea9c6e1735915dd8c4b1c60c2ca1863a4cf6be6d4eda6b06d2e96de0519c9fe51968ee0b5fa45456d45f679c0a109dee05874e970faff5a2162b4ead497b66af1990de981c2f2907548718b578941bc9a8a00f94ce2d312f15420221e4c3e9b4662ae9748c0f5ab040b363232773c61e47a08fe5a645e63aad19f3423f1d0250b493bac9244a7923411d88a0e05950f5d256948210f9f6f0e7e5461ab188dcda49dd55aae045f319e9107cf81008c5af14e53ae71864d81d9c241d35edcc3c14a9d243122a54e2f7f65734f5e9557c45a431ea4ec696640e396b5466177e5b1f40553b9711518a84e63c8309aee48438793facd8915d145c61571e5469ab6c6cc9ebead60867123d9a9469a7f55dcf2879652fc4aa50ba3bcbe80be6c9f8a980fb4dae7f862b7990115e1c8cbb983ec6d5241216530e3404e06cb1c2e8a4999957311fcfc7a69f7799fad9fdbce54e883ce59575f47533a2b18a0d44d4913fca1e6ac230f1489a8241b22b378050573a5ed590dcd20805b6408ff5fd850b6f94622d9335f84444bf1c0e6432baf53f62022a072c5c4f1e15517328e2864ae1f3af66117653a0db3c4f091f8035456313e7d4ca63c418ca5457990e33300a47f78abd8cb25664c64a4e3cce4622fd0da737b1230f1864f82eee6eb764441279add32843c49f953be28ea44b56ee375ae82bd8ca0b431b8cfef461b59037011455f3a78ed554f73fd107fe82563f06f372fa00bcb0aec1ed570775796d2e28105f43e91fca43dbdc6fc30948bd9af4f9ff9abceaf064d80dbe5c6c4b5fd3ad3ae11d9f1dc115ad95f0079a5d1f26d8b8fd8033c1fa94e99a2e60a7b030c5dfc229149afcdb17525df854779629e65acb7cc0ccd8011b6c4f7d7baf927cc4203570a33ce0f071365eda15b82bf01e12e9652ba0b4a2e5edf66ada6aabbdae21a458f2d0c2235b754672ac6a389176a2149aa3aefadf9384dff08e413af4442ef9c94ed14946632ed91b07cabc25b6f6289fa81a9333084c9f6354317efd63254db23af28a57498188394c670f97cd95084c0477aa64be868623d7c4cf0cdfcb01a4c58173ba413635761f6169c5a8fcb0394b3e8ea73a2d04dbf5152470126b2b9d554d12d70581c9d3be3c6b62c2aa6db4812e27e660a7da05db176f502bf6143a54d6540c51ef5ce3fadf75ea4457d5a410ca77af2e2a09f74725eeb6ca833572d96b19da51a72734c2ca4fb58e95084b9e446fa73bc19e29e0506e50129febb6ca6f4c5e2c84fc60cb983c5e0502f70aa4c55333feb53b3f46c77b14a4a7bc40963b707c4985659055a4686892fca9d13e9856c6988f17f80ca9af0d22b66c230565efec282e1711a2a988cb54ab6948aeefbe2b4e78d529aafdc83131169a8acd3b408b874cfbbb71b86439f292974fdc321ed69667a6e9bc654985e2bf88a7a215ee0e0599c2d53cf754f44232def9898fe537c31b8a8d0f1da499cff0e43af6c7f0e50c00674308b36b476d1012535e884c2b3c0db0a83275a0af753c4840dcd4e2b77bac9a68ba266e5d8786de30032ed19727deee4155a07facfb68bdd95baf9fcc965e0b01e5d97c1dcdbdf63f73861bb89c4f0e2eba4c377ded9ee44c24ae1eb37308315123291e09551c8f8673b56fb1363a3348cd16e81ffb3fe414a9b28668e184b542c993d6a1ed5da53c7468360565e3a3c63815d52e486515ce7c3b736e18e6777c7f92d39567ee232cffdd76fb48679b92c145165ceb9a1c0c858fd03f519d42ead1c6ede6542a7bc63b71de36798db7c6262d66125b96eb9a209e556a4becda4343e506c027f75a2c56acf58192d59a412667fba9233bfc2dcac2c65866ac369257cb435b8fe8808c458a0af9219b73cb8487b0ce7cbad24d45d8df85bcc446fd1f420d7e447d885cc88739a14e01c0723d89233e18893ba3b186d922cd5d54fdb2bf661899aba1f907ea46d9f9ab39f0270a599e88e95b4b8c966d213a5622bc6b15aefa184b43656a5c848f6b5d0e0c78927949ff6956e45cc7b1b190832e2e2842f13c77d0e404df1151a492eb8c0c68a85a912522c08e978e3297bc8d28768087cb63c340a0b412ebd2af3fb70067dcedf2f62543a4fd9c3c2b937044d8572afd932b5fe294b0c1d8c3dee49ccc99a25cdb828e006b01f1abfe27bbdf1e0d7a8e96090f05682a227754ede963e4e6fcf2f23976842a5f9236991dafa9f73ceaaf2340448c849b0d88fe04c13bc5e180200c84622a734dc7961592462d56f583e8b1a361040aae8f54af75fd53adf36258c7f02dcd253a72b6854f3b10e6fd79828d7560f782b523a6beac4e57ea641b574926098dd698c0f8cf42ea60fe42b38251c6ae9b4cb9c3c8c1a93eeafe65220bc51436609c204a5d14002c05c5c832d6e000d0dd996a033e5ed9908ed483dea7fffc9535aa3fa47eedf8029dfd71d5d4c6285f2b524414b346ced6baabd2b2c7f5a8f2a78cd562219f55a761183390eae74812b4ca18a2fbfd51ddb39da57e131d9e6b43f74e634841a553a9df963d88feb8e0333cef6a27b1641b6f9546234fbcde7e24d3d455a5e57dd460e05479d0985a27a9b12a2d0931e1854b4cb882010c1eda50891a2aedb85fa2142697a87e0650aedde0aecfa5cc8f1ffde38d22fa0b1d3a5c9e2b4cd4cefb62d7a6f1d87928fff777f97be768381824c5520d55652ba0a16d255d87e9ff154874ea422f5ea2d91e9a1a2c12dbe1f0ee6e2c72ca6440de7180e89282a35e7e6d75e81da73f7a0991becd64a773fe5201ec87f3416615088a0c715ae0dc512c36e57c974334b09998373ea219eb58e7a33c9e148c3f635f11ba76deda71e47125097716f851b21df4461cf721e6a10ab2b57d80c61a24e6b169a926d054bd9de50", 0x1000}, {&(0x7f0000001b40)="87f4f856f5f58d65fc4ecd490efa6384e881a23dbb0b1d47daccf6de133d625cdfeb3702f1ee8e6b038451534e4d8bd326cc6cd9dcc974d6658aca2266da267a6253c6bf17f114ae2eebcacec7eadd8f483f0946119efd25acdcd886e2e0", 0x5e}, {&(0x7f0000001bc0)="9031a22a276c0a2a1c2a86f47be93e4cab29f8411c78bb27085d7c21c024cbc78b5602d360832d685fec0510e567a622bd304f381d7e1c2386e281e3553a06b8c17a1e27c2f67e732294bd21b695a667f3fa7d6b6f9301b2cc33962f8d9f175cedb86001cc1a4f19f88af74115987ee8c6aca277ed00faae93e3348917f5196ddf611fa6e644aa7ac1b136c236ea912bd75f88e9066574445e6dd00787da067b61b05c44ac3ac552f3e4e1cc98fb05de86be4cb098f0d554dccff6", 0xbb}, {&(0x7f0000001c80)="c1d04b0694f3df4c697b47ba6289d1698fdc397b627abf44", 0x18}, {&(0x7f0000001cc0)="dfc764d1869a829b4e97267e53a3953ba7a65c403107ac3c397aff8bd849324841046cc04db51e34ce0c7adf95a0a1c21e8e803642eadc897714ef676cc76882fa7194fac38647d24da39353bf484e4621b130ec4945db8978fc0b64023108ed590d487a60ee8688c81e2d430a7878eb77e2601c276aa6699420e70a77c4cb62d9c13790d41d38f7f271fd032d0984344f7fec4f63f56a16f8cf3256a599ef0b4d1146e5378e691658964319ae2db9cea1ca1750449b5e7bc6792d2f0e6fdf61a8899543115e89cc707b74bf50ddb4297f8b9886bbf068ccea50245a5b488b65b65338950c2f51e71f41bf9bba8f8be25602c00a2ddbb706", 0xf8}, {&(0x7f0000001dc0)="61cdf387c3590afafa40eeabfe19bfc34a32631b96a30a1f3ddee73dd0066431b8eb59ee6e19f864779fb8fca5922e708df1d59800924ffecf4436", 0x3b}, {&(0x7f0000001e00)="891797276f6c97a032cce39321d6148b68037dd36f4bb9d648be20cee953b3ab2a6d082a24d21968878c5767ac98a14890ee1f13301cd3bb20f82609a92e90ced9bc2b68b655517259c216fde3fad80cbe475414a2e0f5e9ce3c21ce21c862ef348e75be5412e1b07040111b2a80c019cb2f", 0x72}], 0x9, &(0x7f0000001f40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x39c7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x62f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x7b, [@multicast2, @broadcast, @local, @remote, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x11, "fe89962fbf9569226e16df1ab5249b"}, {0x5, 0xb, "47b539fa1b40e48c6c"}, {0x0, 0x3, 'v'}, {0x0, 0x8, "5a48ed2d4b11"}, {0x6, 0x11, "90607d7d3ebaf143c7606346b167f7"}, {0x2, 0xb, "5566686401a2b627fa"}, {0x2, 0x12, "760628472e59682b813b1a44bb5085a1"}, {0x7, 0x2}]}]}}}], 0x108}}, {{&(0x7f0000002080)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002480)=[{&(0x7f00000020c0)="46795ed727e146dc28ddfc9c48b951cc0a7873dff3900400d96c71edfb26b41b7c24da677dc8ffa816f3150683884dbe0c9a3393e05d8956f7b3f9bd242f31e78cfa52e959d8589c13e214b893d3be3aaebd2b7eb0a147bcfd66f1f981f8b3e879e46b35565a144823", 0x69}, {&(0x7f0000002140)="47e017114537f967adfe7c2d082ed6f05e41c2d798808d27a3dd9f5f7d0c4e94cdb0ddec4f37c4382e2f5f5183168192531216efeba95ec2905e514215393785fbc2170673a04214ff314eeaab26323e51a56cb40aa30327887c9d8fcf645efcb0de82efee28076ab7c562f2481bbf6090c8355889661031f42544241d6e74103a505aaa4aef0c36a078f92cf8218c067d8b941a9b2d7972243c66765bb97b008dd50e9c01460badd5f7257d13e85085b4e0e1c139a119a5acd62426d6eef8daf078fa246736fb23259e97e9fcca9f40738bb272912603ba2037c536ee99fc89ab444361035fb673e27fe101caa3b0ee75bf3c74", 0xf4}, {&(0x7f0000002240)="8540c69e2bb6d572b041d60d56c86fcd397278293511855f7882bc9f6c2327e869a7be19a6adc948a11f14c5d0cf7492", 0x30}, {&(0x7f0000002280)="69f9ac1772df488fe6afa1eb87495880865cae5caf70cf77c198815fc82802bb49ca949983146f02841ab05a61f12d37cf66c8cc521e5b8f4fe2f42000fb8f59909386cdedf52b7074eb125d3fe7856de9fe", 0x52}, {&(0x7f0000002300)="a36810d47d0ec3602c72d9b2b0ea28f577d7620fd06dd256b7c89bbc5374e64fd718ea09d2676e7c600384bae4b416aabfc7ee38544d693dc6e3ec883bff523eb6", 0x41}, {&(0x7f0000002380)="8378609c44a8e14995812864fe0238a7548c92b7363d6a59e86f9d1671e8343771d20be5c882dd96d91fc0b644a672ad89db6236de54285c0adfc740f9a8c78b46ed02e0231645c7789727c36ed7f5f1897ba3d64b0271204029278be200d07bac0756bbc9c73114115aa6866cd150fb52ca225decc377ee7cdcc0d005b206c9956dcc6938eba03c83c29f56316983603a7cec951f8316046c3ad88ecaf48714c952a9c10eefa964d8959fbcb15f1e66e8628247a4d82fb90e9fd462bba5095dc423d6966d17e4be6c142ff594b67e00c0266c85f08ac41cc7e922adf13aee698271", 0xe2}], 0x6, &(0x7f0000002500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}}, {{&(0x7f0000002540)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000002580)="55d3f58b45dfd157bfb2ce7e24716bea88919169ed066703f6399e4f5ce3f14399c958ae37965209fba494fc7c4fd29e4c7e0a05e953f2929ac0431ab40eaecfe60f0cd67aa56ff22f4df5da8988c4e806a88cfa3b6b9e669001b3e6d11959bf76c6fce9995b1c0ac867ff6db2420cd20b11db018c6703aa573032b014", 0x7d}, {&(0x7f0000002600)="81953f6ba579b91f8daf45c5ef7b59959e52aaff89cbf2593550970776d929aa4a260797ac4c15f19950108693f437f03a1369cc095012a1dd40dcc625ee365cf56d67f64229652511b3aa4a8cb9feafab1feeed9d416cc9c49fc40c77178120ef9588acd38eb0616c361df3be0919ddd2a0148db87d4e35ccc5802fcc6693347766255e6d349b5836073ecb1236f084bc3c586274448c3398621adf52a17f2e4bb4036a1b9df18ff96d10015e2d50c49a", 0xb1}, {&(0x7f00000026c0)="6a8a0b3859d2bc7e064fb6411bac828fc0cd08083c59883153095c170dacf3f95eb5a5c230e63b0ebc0d0125854a516e44d0ecc6ca8e04ec8e26a6ec77ac04664381caba213a5033a5241518b8d394b9986586c3609cd7a55e9d8d61e85fe968c8af58806086580c5036685c75c269efc702631a1ca3278df90054cc80952879b8ec763c7d7b50e1023ffb8eac03da9ae11aaab8284a122dc277b859bae131dee5bf0526f61766b1142127ca19e40a8f2a20040c1ff509476cb1946eb50e189fb040c888ef362ba507875cc29ee08fbdf19113edf17e259e96b4c9157b1c3f55187bd36fbaf1ad4728d759c61a2a533d20e058", 0xf3}, {&(0x7f00000027c0)="1999e012c8ecb43b3fc886e387133deaa8ff6ae19effabf039a879d204b25df950411c1ac621d6208922a34a", 0x2c}, {&(0x7f0000002800)="97f7d20f7a86b1eb023738d82f0c6574ff64607f28f889b616b43e", 0x1b}, {&(0x7f0000002840)="e30069dd61cf7f693fb5cf5b3bfd968bc55eb536cd8377c26196c2d97e0d8af72184a3b68bb40d6d7471f535640e38a288ce5561e195151f6e0402bca45b6668f31bd08af9a752c0cb937d7fc1d4d4f73ea37ce902240e1106a087046702e5c402e95bfa26dfc1283aeefa4dd6589edf93d53bdc562c6eb7c51dc3e3945a1c7a395db7fc7f21955bde94bda6c5ebc53162d800bdbe993f7896d607ad990d0332f02ece454a8ccd11bf83e313827e7da1e423653c3901268705e60918f17e8daa1d5bec3890b16132b7813ce813563744f4495ade", 0xd4}, {&(0x7f0000002940)="be709fbf7df126c807d177dd291ca8af4e3e88fc7ff6563fa24d2359620a0800fe42ee4464ac7d6562a5c88fdfb701ff56433eba81d0dc663bcd50106a3c8e1f43049047c3c5c608cee4981b333d1c3ab8de0e1851994b1592347b0cd50a9410257a2064ee941ab3fad36e09641def963ba5b956700174482d338220bc181f4e3f3777", 0x83}, {&(0x7f0000002a00)="429f8e1979f3b08e273926cada34419ccd89a8259ec00058c46d23119ad8621585b11f3f192d482d8d94ca2d8786b3ab96be3797dd8545f5807562dc74bd365eb26102aedd29e1c0fe94cd259ab1a28fb4b8bc5b3a41fb07c14526cba0b4c2f84184a397fb8a16505b28f1a0e9f19842128299c9136434a54245d0e8c69adb98531fbf342b7500e6ee64465d512f7c6f8239b6f9509d7bc0d172c5ca5ac75197722aaf5d3fd0a18ae162c7196d4281858dd5208bd1e129bfcac9eb0a7e7e8207b46379", 0xc3}], 0x8, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x50}}], 0x3, 0x20040051) syz_io_uring_setup(0x4cef, &(0x7f00000002c0)={0x0, 0xf573, 0x1, 0x0, 0x2c6, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000800)=""/137, 0x89}, {&(0x7f00000008c0)=""/78, 0x4e}], 0xa) io_uring_enter(r0, 0x6bf9, 0xe13b, 0x2, &(0x7f0000000280)={[0xb14d]}, 0x8) 09:28:17 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/192, 0xc0}, {&(0x7f0000000300)}, {&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000700)=""/78, 0x4e}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/85, 0x55}, {&(0x7f00000008c0)=""/102, 0x66}], 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:18 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:18 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:18 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2300) 09:28:18 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x770e, 0x5125, 0x1, &(0x7f0000000000)={[0x1]}, 0x8) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:18 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x3eff, 0x10}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_submit(r1, r4, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x0, 0xe00a, @fd_index=0x9, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000280)="8ab36f9cd6bba3e045cfee49e4bf75df636c253b9bc898cb655239a0a2c382a65209fa7d3ae678ff97350477c0bec2f7a09d886845dd54d5a66b5ea7f02ffd9ae364728a0ab06628ca2ab653ba710bbdde6f7bd6cd37d7d677eeb389c5fb186eb0580052d1b33cf81f45a4dc8d0e1ada4cdc9c43f5427477308b67d0ef4480533a1b9220d388ab3866b7dcd817ff744d92adbf06cb5eb3a72dd9702ca3add2c878331d7cb57a796ce19f806b39b10684b3", 0xb1}, {&(0x7f0000000380)="26684aa1ed32790a55d0adc5112abc07eaa249ab517832d5315aac9b85745270b1729722169a359c6f81", 0x2a}, {&(0x7f00000003c0)="3340592a90255d53d1009e0f2296bd464b9ca9191bf11f5a1f3fe88faa4527ca855f01bd68519530ef4e7e6427ba80d66535a1ee1f873db9112ebde8882fddb4e3b51bf63cfe182601173e34403cdc30283f54bcce52d73d216c2d5f8b896c458981da317e77ec75448034ec0d72a7854061eab2db31d837c80a3a1b2a59f6294f87d83be6e9721a64", 0x89}, {&(0x7f0000000480)="c20fb6734665", 0x6}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f00000005c0)="b24fc5530579e6886862bf6ec39f60eafc6bcd175b1e6c65ba7a7055053c7c6b84befb91e40f74c2741059d17638534cc46b249db140b391e895920a866df431569e47d229bc080338209d09af769787882af0c4a4dd963ee79ece4a4b93c38c651165275ad20c2367464a9214479ceb700f3a7e67482023ed4d63c6fe76dcbddadaf1f50e3a79c7120007e319d6ed7dca488824ac08f273a1a9f76cc542b6de308314f62f33495f27a2b79b5bf9aabf9f73053b9e329e1eb4a5595e5efbc7fa198146c471844141ecc723ec00e73821ce02d4a0", 0xd4}, {&(0x7f00000006c0)="09b70d1a8a346936d415baca1a08bd15f726b0b55b75faf4dc72643d513d0e85916e94618f96cb572d947587d6e3f977286ebea0186a815e9fecd850dc9239ba2264998afec27f6db2c23a8d3a45baa9f6d10003f22f36baf358f9027bc5d01ce669fa51babb29138425fc332ed7cd6a0d8812e419e2c153dda471021ef52f7e17b9ac66028321736b1f9b0e4e7246a16f11b33bc5ea6142db1b994d846c1fac3a17c6327835f9e33de5576dbfc0ed73d7467bfd038358f60316f87ae801fa04e90c1b5dacc66466f728ea0fd9acd01545644fb094eddd3097b8", 0xda}], 0x7, 0x0, 0x1}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:18 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = io_uring_setup(0x6053, &(0x7f0000000080)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x11, 0x14ac000, r8) syz_io_uring_submit(r3, r2, &(0x7f0000001500)=@IORING_OP_RECVMSG={0xa, 0x6, 0x0, r6, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000001380)=""/134, 0x86}], 0x4, &(0x7f0000001440)=""/123, 0x7b}, 0x0, 0x0, 0x0, {0x1, r8}}, 0x6) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001540), 0x200000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) 09:28:18 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x24000000, 0x0, 0x0) 09:28:18 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x4d11, 0x511d, 0x2, &(0x7f0000000300)={[0x9]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x52000, 0x0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000480)=""/182, 0xb6}], 0x2, 0x3, 0x80000001) 09:28:18 executing program 1: r0 = syz_io_uring_setup(0x47c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:18 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x48, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:18 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r5 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x31ef, 0xefc5, 0x1, &(0x7f00000001c0)={[0x4]}, 0x8) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r7, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x32d7, 0x7895, 0x2, &(0x7f0000000180)={[0x2]}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r8, 0x1, &(0x7f0000000000)=""/74, 0x4a, 0x0, 0x1}, 0xd3a) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:18 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003640)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000300)=""/48, 0x30}], 0x6, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000700), 0x0, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c80)=[{&(0x7f00000008c0)=""/40, 0x28}, {&(0x7f0000000900)=""/231, 0xe7}, {&(0x7f0000000a00)=""/199, 0xc7}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000bc0)=""/175, 0xaf}], 0x5, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e00)=""/237, 0xed}, {&(0x7f0000000f00)=""/159, 0x9f}], 0x2, &(0x7f00000036c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001a54b8b3204c95c71c9818969dfa120c17591ab9636af00000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xc8}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000001180)=""/131, 0x83}, {&(0x7f0000001240)=""/115, 0x73}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/25, 0x19}, {&(0x7f0000002300)=""/30, 0x1e}, {&(0x7f0000002340)=""/113, 0x71}, {&(0x7f00000023c0)=""/192, 0xc0}, {&(0x7f0000002480)=""/170, 0xaa}, {&(0x7f0000002540)=""/132, 0x84}], 0x9}}, {{&(0x7f00000026c0), 0x6e, &(0x7f0000002800)=[{&(0x7f0000002740)=""/101, 0x65}, {&(0x7f00000027c0)=""/7, 0x7}], 0x2, &(0x7f0000002840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002940)=""/225, 0xe1}, {&(0x7f0000002a40)=""/89, 0x59}, {&(0x7f0000002ac0)=""/54, 0x36}, {&(0x7f0000002b00)=""/67, 0x43}, {&(0x7f0000002b80)=""/204, 0xcc}, {&(0x7f0000002c80)=""/241, 0xf1}, {&(0x7f0000002d80)=""/10, 0xa}, {&(0x7f0000002dc0)=""/180, 0xb4}, {&(0x7f0000002e80)=""/187, 0xbb}], 0x9, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000030c0)=""/232, 0xe8}, {&(0x7f00000031c0)=""/230, 0xe6}, {&(0x7f00000032c0)=""/121, 0x79}], 0x3, &(0x7f0000003380)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x8, 0x40000000, &(0x7f0000003680)={r1, r2+60000000}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000004, 0x10, r3, 0x10000000) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) close(r4) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:18 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(r3, r2, &(0x7f00000006c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x1, {0x0, r5}}, 0x6) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.events\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/219, 0xdb}, {&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000600)=""/11, 0xb}], 0x5, 0x7, 0x1) r8 = open(&(0x7f0000000280)='./file0\x00', 0x40e82, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:18 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0xc2, &(0x7f0000000000)={0x0, 0x2b3e, 0x4, 0x0, 0x3a1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:19 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2400) 09:28:19 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) close_range(0xffffffffffffffff, r3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x7649, 0x8b53, 0x2, &(0x7f0000000280)={[0x100000000]}, 0x8) 09:28:19 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x1f) 09:28:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x49, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:19 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x25000000, 0x0, 0x0) 09:28:19 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x30, r1, 0x10000000) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:19 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x42}], 0x1, 0x5) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:19 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x3a48, &(0x7f0000000280)={0x0, 0x59e3, 0x10, 0x3, 0x81}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000380)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:19 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0xfffffffffffffefe}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1) io_uring_enter(r0, 0x612e, 0x22a5, 0x2, &(0x7f0000000140)={[0x10001]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000180)={0x0, 0xffffffffffffffc1, [0x8a6, 0x0, 0x8, 0x4, 0x7ff, 0x5]}) 09:28:19 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x3000003, 0x10, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4084}, 0x0, {0x0, r5}}, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000), 0x1) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:19 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r0, r0, r3, r4], 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) signalfd(r5, &(0x7f0000000280)={[0x6]}, 0x8) 09:28:19 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x3) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = socket$inet(0x2, 0x8000b, 0x80000000) syz_io_uring_submit(r7, r2, &(0x7f00000013c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r10, 0x800, &(0x7f00000003c0)=""/4096, 0x1000, 0x2, 0x0, {0x0, r6}}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:19 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x4d3e, 0x84e0, 0x2, &(0x7f0000000080)={[0x800]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x480002, 0x0) 09:28:19 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:19 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2500) 09:28:20 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x26000000, 0x0, 0x0) 09:28:20 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r6 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r6, 0x0) syz_io_uring_submit(r8, r3, &(0x7f0000002780)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002740)={&(0x7f0000002380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002400)=""/250, 0xfa}, {&(0x7f0000002500)=""/245, 0xf5}, {&(0x7f0000002600)=""/78, 0x4e}, {&(0x7f00000027c0)=""/34, 0x22}], 0x4, &(0x7f0000002700)=""/21, 0xa}, 0x0, 0x12003, 0x1, {0x3}}, 0x4) r9 = io_uring_setup(0x6053, &(0x7f0000000080)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r11 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x11, 0x14ac000, r10) syz_io_uring_submit(r1, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@rc={0x1f, @any, 0x9}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)="c50a1578279e9721ce780292951a36416e80a4a2f14ed805160829016160d06b4a2afde8bc778168263ef58b87709d15edeb8231c5bc5003613597f1a9516fbeb5d0671f10a70832cb320880ef8c7e7d105d5b7cd3f0c611a2dbd29ad2f33a023f563760dd12d21a8c867571581e03f9a23ca7735e9995f5892867d8d29eab5a644d8d584749bfb9d1f15a451f6d035badeb1f62c54c49b1c5a2fcc7a67b04b0dec7780763efd044d1b59706433202d813889173526d8b6a1c75692d493f8aab288e8ec19cc6d5ddfc111f2839b9f027e0e27b270841645731935e2e893e4b73a0729689675c22e1dec4e0aed13db3a37a245e222c1d8aecbec4467679b23739e5bee14fedbf00512a7aff8418bcfb657ad0b656d71db64cebb0549cfe958bc3a0699d50381d6711b2d6dc827b0a1c800e97fc6e85d905e464e7e94ce59d4046db1e934db91151abbfb7729a207017254fda96843d0dca7c85f683892df7131c8ea18446f4df55b1b78e0bb4523a028b3fda840e261d6f0b8b4a79036ee4cb211757e6d03a1e1f9d24080012a43416c47e751a584c16ee8273e54b100b8ca1f56948c5c2d43c62d9756ab4daae0dfee075058aacbae242a4941a251f7e9c5ecd9f605e313eb54c24c9dceba98c15e06f7ba946230bd7eef2dc8b6e77f060a406ab2855a1daee975781696f864459f50fd45a613b70b9184a519438180117c3c2483fd38486525774e2d924a164002f9c1e1d55a7122af2019f5fbf8620c5aed2ba1d38a0c39e05126670cbe2daf8ae768b9cf9c8a446fc585328b0e1fdcfd92f59dcf7fcf85db9b39434e4b19036e6d852bb7c13369303464b185d893adbefdd306452bd23d42f98f5888918a36438819d32437594cce56bbae08f6d1523a64db63dc24085a886964a80d500730bfab80c9989ac8c8b2181d2bcfaa96313f3cc94e6952b005448b9b57c663b9d8909b153c5c599b29a4e04b4480586cee90f3e36ad6667bf8cfdcf2a0a8b7e3e8195010946d4bdcbd4aad54d30b4be47376f45bc09028e6dcb90c0e436d08de4f3bc51f1cb8b1aee23a05dfa7e311601490ad4d74d61c42a40fde900e99a7b4a04f0d74bdab225f111bc74ea4c076ee0efac582aaddff26ee708ee12bf88f83f11ed8fb5354440e127f536a5c59e5421256c4ee922266024c728da1d33d7821fb1735453b7fe241a824a7777dbab5d64c76fcb97340b6ad236e42dc14a9c754635416aade7bb29dada201a484a2488ae2f28d9ea3a827b93fcdd984196620b7732a3b5e4b2ab481a8a8deb7d33ccbb9eb452d5d79fe743bede37e13845561a1a7a3943a62a6bd239cad1ceb039059433b0a69752d70cb978074b0593c0fc57c1d0744f18bbbb8d842e988819a40df9630aa2ad59f0170fdbeb72cfde4d4258f25efbeebbd7624fa55b4e04a62f47dc1985e9269ab78d5f5750fd15c7ae59e023002980da61fa1ba76de4920426091817a9d18f38aa0bf1db3d368650d5f59383c15e280271d1eac95cdae47a80367859e41898b70ad71e2f797f77a0144ce2ae163541a94a5e961a3d11796f554cd999e273bb93263b857672f72d519b7d105e93648ee9eddc1d94c537848d80d1bd3bf408fb87e6877fc8e0ec878a132cff815ca6b375e40226c2905531c0f2775fda5161fd92dcafa3a6d33e211f62e45df1848ca49153b31dd6c12482f995cf90f6095769a8f8e88ea76863c7573a51a9f86c3144ca964da0855e7305e5232e117b681d2b8cdbfc40350bc5e208efa581055dc2af46e29ca49bfd6c458bd8f7a56ce62a90d5500262a4ee1503800c6be46623373cec60503ff9a555b25dcc3527c9333f602d40c8b9a8a43c0f9d90a5479aadaadad60c67d7c6861383b605943dcaf3071b3104003fb5591cbe1b4a0e1b6c153609644225c542cfd77af5d22b4d2bb9ea0d8e0b0f89d7182712630ad096de89babf95464c2d9633e6e279580a5eff0bec8f3bc8df4a059db44a43157811ce2883bd31cb2769a6bd17914c29684d25eeab8fd69c4527edea6b7265987497104da5b4b49000ca26f04bb5fdcac04825605024d99dbe8654bbefe6cd950b15c6377305516321c369c783ab117bc300d820451c7e4c12e19d63f6b49b472ea5431e1d02de372317cbc2f64316d5aa43355732994e2d255a82d2dfa58ae1f31120a529d1bb40233b2d76bcc63d86a19f950dbb8a14f819c94745aae8735a24f7f83e82581ce9ce4de8412c56b4ab8a08523d5a04caed1c43c23855f1d0f95e869cc6e1c2f39454a59a045ec2ee622728a1553cd0c0f1a27c163fe59e284eb24f4e553ac46e8826b6f6bcab2c396c23e840af19f269a138276bccb937b86eeb8d1f5e33ee000db2a9a7df822ecb7a8dd2f5e6c13bc809ea57e32635b8a6980c17645a2f54da34326065ff64dac8b1720d79840839dbf015773c1e1d9d517adb1edc89ef3911b5ba534b8c407c669e52470ace33fbebd8e2e9a3564e0ebf3e7b445c7ed4bb018173d472f394b7a613a708f7a51cafdf8edbc9eb09e316a5fb339bc8c2fcc4ed024bfc1ba754d83a5a72e91a780ed1c9a3cfcaa4903d13018f2f990bc751852062999f27ba4b8f0ba16c9f5f16690e3318290358ad233545592c8f6514eca1e66792b7412f7de0cac89fca6cc657b613f5f6f893b008decf5a478e4cd892283110319c216bf2436b5e767b828db668053642cf5a33cc48bcdeb4bd96eb8aefffd178feae7e4f703c4cacb680267a65f3004c6802c39e9d79d995fae72bf0267eedce2d27baa02b8ad2e638d14e67be5fe9be0a788c12c7e49947509734439e7f281eacab230096f65bd8da2ac8182a01f000c0f0ffd68491dfaf21708e8c64c6124289a7bbe79b37288ca033080eab5746a861bfdd66f9501baab8559c59d140e05802ba37bfe1e1654458fc19e6d561ab88a0b70b8d226e467039208e7d6034eb663892273c4f8fc48f08ba51e3d0d2324437031e6fe7d73946b0be7d194846572ff4c54ff13a0bef9d62e798ae3bcf0bc2148a20d408c2bdd9bf6f959812f73631236f5077456571f9dd9b0763a7214ada79e1cb53659e90556fb905e5d251d3842a10878980f346e606faf0ef55dd1b143b370370206a9ad2487d62e96df947a6e66d61868cffa102375024fcb0182069e56c0c59c97a3d21348e0b13d647869fb4c624b84b3407818700b126ad40b8508979655bb805e1e9f8395eb71938b499a7a0722ea2fe1fb1a40831c9546db16925afdd748e33443ff0fb635de8e08aa60d6023b82eaac229243d5ed635c156579520d7d4105bbc8420e1eb52f78b1cfed32cf887f3c0c18d7a085389683817d50a8ee035fb8e0a09ec878f0ce5514607b62a98d616fb7f413d55da2cf8d622211bfea96596353e8b6624e35c9c3d1b07debbdff80f6235a6f4387e6661b6c601d5b4ad6378d4950b05a4ed8d8309baea02332d5b5e060a2fb485231419ea7bd6ddd734bdced920d64c1be692d5bc70d3556ab4e43ae809643f0fd519fc63f0403997754056e6472f4e0fe24d2dc149bc8a505f50c427f1b8a4c14474180d8956fae8926c7529e8c517738aa1257eb8b7fe08c8d69704b198691fb3c3aa1a841d9c6b3e0fa77c941999d0f85848423cde90df5009fe611a7c113f6321bdd19e941f9a72eb9dc7f213c05880fc565ee00303b8206eca6c3396aee9fa1654e88cdceed3037c18d370e3fd0894b8507b7ba17dc5767c6d241aaa3cf4953a642bf9a7c69490922631a63797daafab6dd82e24db52bd8a46fb7996877f0ab9bd47c5bbbfe948016755d26ec783b5de9b4d1dff93fcf0fcf33d639dc55688bd60b64ef1ee20a21432974dbaed319e6b5a701a709c2cc86ec9be7782bee5c92161e17f845d763ebda7f7c2c9d4d5a7e810339414b0890ebaa5c7e024ca5673896e789bc39e56a3c4ee547c6072a9a716c6eb91b46682711360bc10eebf0862df7f4193f4ee0179e94032d7f916cc0820bdf2c06b8afef2cb0f487ecb6abecca97068ab224b9d3819833b824e0a1d5239694471535b4353be1fa5497a13717f2d3c0eae697c6813d973ac552cd00da1134e0882347d6101a57a378415eb2fd2e92602e5a0515b3905afb1640ba69f527d1befd20708ea4cbf3de95aca74f5b0e46dc430c345b326cde603809a7872d10245d94698e7b7703cc228e34d761b0c1e17b323288e7432ec8afd47502454636d0ea6bd041b86f6b910b1d98b0fc85e96417d91356e45925fa30849dda6a141655f7de85d403d6f4d1fdd9eb601523c099ed73469c85ded868e3ad2e5c9b7e4f69328639df6cbb102caf98431e595bdc00141c26e8c9a4040ed81925c09a69b379cef15e95ea3e6b3d24a971709ebe50583ad33fa02ff3e48b25678ccdb4c0bf96bba243672aaeefd4074f426104f916a46f39a6b3beeb0c8e7076a61ed9d13a5acf5c5ac72453eabde2444bf4b83d04c2ed2261f9fbb71a9220f511de5e4881a2c63e07680a1643866c92e754a09c10f4eb983f2a27ad5e9862ffc1b23f5f206434dc7337c6621f13a199a2f84728925ead2b6356ceb34880f320be1560bd45d9a9254a0ee04f09f10a5a88345b98fc899084e8499ac181ceab6e97065bf74cc6f70a26d882bd0d95b1d9ed05cb15bffad2438a846893fd6a3f24b6539b730d856bcd6c866b859e0c4f2d8983c517444ade11a51be99e0e49917b37262840018301bb15e9b540909fe64035141d3c8fd181c73735f9d608dab94136becb0d3f63817c1e38410bae410927b42234ed67a72077dc38d166edd52bdd466d0b7655756d7a700eead011184f8f62a6a507d92e63fe9b4aeeb2f7fdeb61e5b8b54a38d3eee3db01d918780f1a0dabbdcb18ef883d7852c14b9bae774e81839929d422b53bf0cdf36f539f58ed0aa0f8ca3232f15f1b7449b903f959d8f456a3c2686d72e6d0633966d91afc09447f71128f5fa5f7f33a6fb2809a05074b04e239736aab76c0f566ee56b550644815d6516a4e1909f34e720aff9b6dcdbb817432db3a1d9f3bd2060b6c501fe873fc28046d6488b79e4643d98a5e4de0b42fdeda0bf83eb6be636d7b552f09672a2c33bc11a4295c25120a42db4ac114841aaf28339277a0179b3b0ceea806a4a4b15bd28b971ce6d8189407197491fe27844fa07456aa3d5a5748e3e1839d6d6eebafb8e7866991846339b2eedee92175500d105871a81fc284857959f01c975cd27467159273b72e940b05cda39d7696db608e7abf9b2a80ef8d602b6fb5c690f28882307891eed2b48cde7bd21fdf93198ad9f48cf24da9e2989da3c1ebae24f91ed0c72b4a9548ca5ef0716b3be12b12ddb9943215e40f6b3475f60706a7ee9fb58e5a785643a5eb1d144cff285025fa553571de72f58d2b04e42a033d0760a3c89cc539e738f28290c943fd4340a6896ce54a370dae01ad2692d37b589878f87b77c68588b39ef80e2f0d23da77fe30882af8d8ab23830da4b74070fcab0199e5b4e83e64cb2aabf3defa58e73b6af84cdee01102ea536e7429a525b3bf77bb4966f4cf24cbd26630d6f23b2518a49503efca6a8824b76e188a438ec52966897d49902a036f46f88e5b8224a96dde0bad81968923ffd556d506a40ebcc53ac9004df621e002f6b9b0e45df08b831cfe0e0ed7b5e61c6ee19f5cef84219f4249ce82b322f0f0e8e4d15b85a1ad4d83ddae5919ab0a3e705aa377688085399cd8edf6991c7f9e46c0a6c0247d55982b77b989b10fa44711a95a70a395ec23011ec48768632d8", 0x1000}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000140)="75e7051a54351a46ac0fdeb05a75c0dee3a486d55b4586a90c8435a02388d98f252bb215cc72bcd05e8b280fbb1ba53b1e0bd0898b5ba42f67d8ef18f5ca172447ae", 0x42}, {&(0x7f00000001c0)="83f6cce109653fde2402ff82843aef8a1d5b16dc1133093ef032cc3d735b28351f1f335a1816a6621ba156", 0x2b}], 0x4}, 0x0, 0x20000010, 0x0, {0x0, r10}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:20 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0), &(0x7f00000001c0)) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r9, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000eea000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r9, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r7}}, 0x85) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:20 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r4) syz_mount_image$iso9660(&(0x7f0000001b40), &(0x7f0000001b80)='./file0\x00', 0xffffffffffffff39, 0x2, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="b9cb4fd4", 0x4}, {&(0x7f0000002e00)="8f53e938dc6461994e9c6f0ee49adb41ef2cd7eda85a5abf9e2d9f21fa173bb1ed50ad1296206d92c0e36a39fe27007b4e1344d15bcbd72420d41f85f30555d1f2f664e7493ead2fbb271ea806c9a14d181860051ce875e3d061ef0eb922496d5297fae11d9c56ed02a7a8b57509bf6433af0611721777c45bc8cffc7adc2cc4b94ea37da19a7339f5df317019e7c8b59335ce31cca089a84f3d4aec2d50a2c15e03f7ceb35cccf029fd406d83a63f85b0b82ca98a7e30b2c988f7f370ae1235f933b873911e2ba69ce5247dcec85ffb20a4c38482bc91ae05e3147f90c616", 0xdf, 0x3b0964d7}], 0x8000, &(0x7f0000001c40)={[{@utf8}, {@overriderock}, {@map_normal}], [{@subj_role}, {@uid_eq={'uid', 0x3d, r4}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x50, 0xffffffffffffffff, 0x8000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/106, 0x6a}, {&(0x7f0000001480)=""/116, 0x74}], 0x4, &(0x7f0000001500)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/149, 0x95}], 0x1, &(0x7f00000016c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001840)=""/133, 0x85}, {&(0x7f0000001900)=""/255, 0xff}, {&(0x7f0000001a00)=""/197, 0xc5}], 0x3, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="055fcf864460398fab5a306c"], 0x150}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000002200)=[{&(0x7f0000001d40)=""/27, 0x1b}, {&(0x7f0000001d80)=""/254, 0xfe}, {&(0x7f0000001e80)=""/112, 0x70}, {&(0x7f0000001f00)=""/195, 0xc3}, {&(0x7f0000002000)=""/55, 0x37}, {&(0x7f0000002040)=""/39, 0x27}, {&(0x7f0000002080)=""/109, 0x6d}, {&(0x7f0000002100)=""/119, 0x77}, {&(0x7f0000002180)=""/67, 0x43}], 0x9, &(0x7f00000022c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000023c0)=""/82, 0x52}, {&(0x7f0000002440)=""/158, 0x9e}, {&(0x7f0000002500)=""/144, 0x90}, {&(0x7f00000025c0)=""/189, 0xbd}, {&(0x7f0000002680)=""/113, 0x71}, {&(0x7f0000002700)=""/101, 0x65}, {&(0x7f0000002780)=""/151, 0x97}, {&(0x7f0000002840)=""/247, 0xf7}], 0x8}}], 0x5, 0x0, &(0x7f0000002b00)={0x77359400}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000002c40)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4004, @fd=r6, 0xce4, &(0x7f0000002b40)=""/253, 0xfd, 0x4, 0x0, {0x0, r7}}, 0x153) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:20 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:20 executing program 1: r0 = syz_io_uring_setup(0xffff, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = syz_open_pts(0xffffffffffffffff, 0x202) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x1, 0x1f, {0x0, r3}, 0x8, 0xcb4ea6631dee43e2, 0x1, {0x0, 0x0, r4}}, 0x9) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r5, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = dup3(r5, r0, 0x0) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000100)) openat$incfs(r5, &(0x7f0000000180)='.log\x00', 0x40040, 0x32) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f00000001c0)=""/117}, {&(0x7f0000000300)=""/54}, {&(0x7f0000000380)=""/175}], 0x15) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:20 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5dc5, 0x5efb, 0x2, &(0x7f0000000140)={[0x9]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c150000000105000000000000000000000000000600124000000000"], 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(r2, r0, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:20 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r5 = io_uring_setup(0x6053, &(0x7f0000000080)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x11, 0x14ac000, r6) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000002c0)={r3, r4+60000000}, 0x1, 0x0, 0x1, {0x0, r6}}, 0x81) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:20 executing program 0: r0 = syz_io_uring_setup(0x4069, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x2900, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000500)=ANY=[@ANYBLOB="03009c002cb77248b95babbe3bcda625fa72b110367f0d89c6b19625f4d3529a6b4746acca2bf45d5dcef8ce4a3834a1c25d4303d20712741256e4ef657e1e2a7edb6d92fc50b3b9da3aecaca38d215ea1d84c66f838527042c5e704b4a183b6f080f6b7b93708dec2efdc538802b57e3b9a98bbd92301ab9be9a1f575f08f9a50b4d31386b5e90c622bb2d618d581eaba7162083803b6f362f1d466a55dd0631ac6842c4d62525f8cadccad4dd3058ca4517f3a8300000000"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/219, 0xdb}, {&(0x7f00000003c0)=""/133, 0x85}], 0x2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r4, 0xcb8, 0x3072, 0x0, &(0x7f0000000280)={[0xed0e]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000680)) 09:28:20 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2600) 09:28:20 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "e66b549afa8434725c783b8dc1fee1f8"}, 0x11, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) syz_io_uring_submit(0x0, r4, &(0x7f0000000880)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r8, 0xffffffffffffffff], 0x5, 0x0, 0x1, {0x0, r7}}, 0x400) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) io_uring_enter(r2, 0x3dcc, 0x415, 0x2, &(0x7f0000000200)={[0x4]}, 0x8) r9 = socket$netlink(0x10, 0x3, 0x7) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x1, 0x6, {0x0, r0}, 0x1000, 0xa, 0x1, {0x0, r7, r9}}, 0xa8e) io_uring_enter(r0, 0x1213, 0xd1ff, 0x2, &(0x7f0000000140), 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:20 executing program 0: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:20 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x27000000, 0x0, 0x0) 09:28:20 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:20 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0xd5e6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x5, 0x4000, @fd=r5, 0x1, &(0x7f0000000180)="9eab615ccb46128517cac9f558d3d46b44f59dba8711061e23f290f67c0d096f8cccd61b62a41d05f14bbc6a5339e2040ea6b6b95fad9cb522f1133566b9e5b85084991bc09676b79f519dfe2b4dd142a36712ca5368ccb5ee8519a309992719f8f84e1854f688e05c2a5801132196576e0f375dc60aa85f279fee9edb1ef7ef1a0e63a246d354b0937dc79c283b06418589df34181ff458e60174b1691ecfcf6f2f9113da7b63fd80c4d845cabdfb34c4ff8893e1d94bc7f19c3d402edcac992f9dfacd0bc746af58a5d16704acc2ba52556a", 0xd3, 0x5}, 0x83) 09:28:20 executing program 1: r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f00000015c0)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x208000, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000480)={0x5, &(0x7f0000001500)=[{0x2, 0xc5, &(0x7f0000000140)="63fcd2075eb218ef96c542b928d8e82f06468c4b3aa2cf8295dea9816813c06714a7fafeeb0c60ac649ad858705151c50b928696709bf7ca57f79f121e45d4f487dae18a62049ed12894a490a1177f9de3a1ca6f198a9e1feaae494b06bdee4e14ff033865ec896e0cf9b10ad2e777d91ae597018032b073aa31ea4e9034fac7dc0ff277048b4f150a0d6235bb31baee2aea48ec82de3483eaab058d7756363198e3c0096816e0660e56bdf7c08817182288c34bce9f80c73f6706a1901ea41a38cdc6e512", 0x1, 0x1}, {0x6bb, 0x1000, &(0x7f0000000500)="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"}, {0x4, 0xdc, &(0x7f0000000240)="78f2cbd8b60c0e8e08a5ab22ae77ba3515a514482b21b0a422a0ad85aec8863927b9d8734a54bcc37047c413329aff9819fb8c68c09c025ed10aa07914b2408aed47cc2d9a6eb04c47999f307d0a9c230b22e8b0e2aa7a1685de404a72ff25aced420495e3fc4892b76f4d910380c898f0a6e2831ca3d4b5fa1c462376a9a8cc89f0eb3a94eb5bb8bd74406c467865742e48cdc82bf5fef93012f02a8bff9fb93dccbe4a8c14136ad029be8f6e4d57d6664e90e211f894914c1748cb3ecdbd8bbf46f229c55141f63c6b46e40039953c2645fa690029238ac523f60b"}, {0x1000, 0xcd, &(0x7f0000000380)="64588fe4f6f508aa7d0f415ac06276b9793b1ebd842d56e895e3fae2920fa37b236068981fa4b3785273822aeca27e47435f525a090c8e7f1db609bff197ccbeec7f20eb13c9f1308a3b77d6b5f974e209fcd7b83398637a691c9a089186fad9e4e3fd114c7113eed3cc93ebcbcb0b26e982169e7328e06ea7e005c17a2c86ed6720e006e1cfa3ddf8c8002b2fc77cefc08452d557bf5a3b217d33a3decb62863269e8483cc75f154c46bdae88c3805929017701bdf90015af7eb74b16b08aac4fc9ff93739ffe5b6d91d4c2d8", 0x1}, {0x724, 0x1000, &(0x7f0000001d80)="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", 0x1, 0x1}]}) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pwritev2(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000001600)=r4, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00040000000000000052df8c64b43eff1a0000000600124000000000"], 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c005b24b09453143626d10031ed0f15743cb97f920b1a40ffcc400d00"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) close_range(r3, r5, 0x0) 09:28:20 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x5, 0x4000, @fd_index=0x6, 0x3ff, &(0x7f0000000300)=[{&(0x7f0000000280)="070f", 0x2}, {&(0x7f00000002c0)="287b2169c1a5f14bfeb1ebb419f60c44a11ec8dc88752c9e3a37ef68d5", 0x1d}, {&(0x7f0000000380)="ddbcee2b3a823bd008f8cbcfced1bb47e8113aa5852ad37ea5ea4989ea12e04815eaeba5f8a260358c6af2c07928e0ad6949dc2c58d815fa93288495a6922adf38f2ddfacee200d714008db87135bddeabc5652a65c126df9197b9981e197de53a84a7268f1bc26f37027ce22016532a305af7da00f785df7e6c2bca0d3d56a4111671bc4185e0a0bb4399a9f2aaea", 0x8f}, {&(0x7f0000000440)="3d6412d1eb50035fe39e18b36712100a9da9712d93749fc25fbeb95d32f72294f14918c02ca8309c617e7885fe883094759c9b832163049492169315b2cf429ee22cc927c6803b375db6976c4e3f8dcc19d7e683516126cf896f9a09d135d602b50e16653213a9a08a371b112f5eb5e3e3afe13016af552bb8e61f8f58a5c4b82170291358375e663a8b6306d9990ad7ed", 0x91}], 0x4, 0xe}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:21 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x80010, 0xffffffffffffffff, 0x10000000) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="0c2e2f06d61822adf4148305db1303be560cb11814fa3550b7d9fba577767d53d4f9ec95c56aedc3112b81252cb4ca31ce52f2a4f5dd8e63f9bc0d6f610cb36289ae5ad3ef6b9c5dc920c55f2dc3f516dc366a1e515003aa83d980f046d67b2a4d087f5232c1ff3324207ddddfda168232914e6e93b4b845258c7d744b062f706b69f8fcf2cdaee6c42d9a8602e5e24e3858e0035130306148d036980ba2ff7627ba08", 0xa3, 0x9}, {&(0x7f0000000200)="ad6399d11881213374b7e2c07d3eb30c598621ab55e6e65a6d117fde9ff182eee12c1871cd6cb47168dd7fb7a3ea58a61df458661df798758c22fa3925fd532759ee5a4ab0a1e2934a8bbc9d4bb2a706ca7c176ce93ebab159614573b8be2b38969b28a14c35694e1f6fb24e069f7cc18a337f46c554cc577d01a6f58b6f05155fac3d9719ff1f6c1675b31734e6c854102bb9c276d821b338f40e125e21a30e9cd67daa4f87beeb88e8d99bec49", 0xae, 0x6}, {&(0x7f00000002c0)="9e87c96f8289bcda70bf649d1635532f579f680a7b082c1b715107e5e4c987210f4259f17dae297008c554b6cbeb7c4b", 0x30, 0x2}], 0x33dc1522a8dd9c38, &(0x7f0000000400)={[{@barrier_val={'barrier', 0x3d, 0x7fffffff}}, {@usrjquota}, {@nodiscard}, {@dioread_lock}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x8000000, 0x6, 0x0, {0x0, 0x0, r4}}, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:21 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x80000000, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000024c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/178, 0xb2}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/12, 0xc}], 0x4) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd_index=0x8, 0x100, 0xa7, 0x8, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f0000eeb000/0x1000)=nil, 0x1000, 0x7, 0x10010, r3, 0x10000000) r11 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002500), 0x40000, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000002540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd=r11, 0x7, 0x0, 0x6, 0x1, 0x0, {0x0, r12}}, 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:21 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x710c, 0xd2b, 0x2, &(0x7f0000000200)={[0x8]}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000280)=""/47, 0x2f}], 0x2) 09:28:21 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:21 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2700) 09:28:21 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x471d, &(0x7f0000000000)={0x0, 0x8cc3, 0x2, 0x3, 0xaa, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r1, 0x10000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:21 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x180, &(0x7f0000000080)={0x0, 0x2395, 0x20, 0x2, 0x2b6, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r1, 0x10000000) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x1, {0x0, r7}}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:21 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x40000000, 0x0, 0x0) 09:28:21 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4f, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:21 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000380)="a4f597a3cdafbd2ffe2c030e1ae8f5bdc04ca963e5786d7208688cf0ece4305cb9b3455bdc5042e5467c615e3b73afe8e225dd2a0c9578fa92f742f37645007a138937ce1f94d64d5ae14a0d674dc2aaffa45256cd3b7dbbc44dde0ce37f3813619b7f27c2361e9e4c01a41c3ce3d3dfca3c17acd057cd1f9b3954c35555ce699d43da8d3c47db13aa92d54ff8ea2763cdc795759ba734d24e957888080b00d88c9414fd5820907792be4c58d8d887f16c19ca4eabb51ae676f0119fedca6874c06e1563d00f5c53e3b8af6a0b84228dc0a19fee", 0xd4}, {&(0x7f0000000480)="82e926af9ded52b91a9f766cd4f3f566e3d4a40955e48010d6fe3da4ca436ed037d7faa68b10d8a44eb83f8d9710e81499ea3f667286fe6c12c1ac4fd3d5ba755d68d05f1e8bbe70baca7fb001879353608f68ceebfb9ac5d547e9d40f0c477c808679665a294343c5e03139ce6ae038cd86423f8160a047b81d881296243579ad4f52549466056147bd2c277b8fd395d2fd00d2f8738c7cb4ee3cd0de4e742642ba2a813e657f93f08bd15b70aede89f67f9ac7018ede132283964247dcf7ff61d6ceaab25711553a1b157fa82e7ca6185ec6be15a363ac6a91", 0xda}], 0x2) r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:21 executing program 1: r0 = syz_io_uring_setup(0x11, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2e000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000540)=""/61, 0x3d}], 0x7) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:21 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000004c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0), &(0x7f0000000200)='./file0\x00', 0x800, 0x0, 0x1, {0x0, r9}}, 0x400) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x0, 0x6, 0x27, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x1f, 0x9}}) syz_io_uring_submit(r3, r10, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r11, 0x80, &(0x7f0000000180)=@can={0x1d, r12}}, 0x9) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:21 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) kcmp(0x0, 0xffffffffffffffff, 0x6, r0, r0) 09:28:21 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:21 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:21 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:22 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x4000) 09:28:22 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x1010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3000002, 0x40010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd=r0, 0x8000, 0xd0, 0x98, 0x4, 0x1, {0x2, r4}}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x120e, 0x0, 0x0, 0x0, 0xfffffffffffffdb7) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x1}, 0x10001) io_submit(0x0, 0x2, &(0x7f0000000580)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000180)}]) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r8, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x5, r0, &(0x7f00000003c0)="25165ecd2bd7ce5b9848676476ba8f93af909dfd0199904338aba3f216c90764d2d7e43e5a5f5cdd8fe6b41ee45c241795d4652f581bfb6c60daeca5a49a7a8549a7ac46bcb4c6219470c27129cc33f9f452effa1097a94ee48e03e8071de4e38307f5e39d270965ae62dd3f696f74237821ab10c343430855f97d980740de450ebdc14ba9e70d0ab0fc5f3ee158cafd95e144fb68ed38d4d82fd165e112f664a9f47befdb69c67565d472728f614590436817f69a8450e00af577bbd2d754c8fafa0bfd8eb1056286233790b61912f854e0366f171c3c54cb3a3d46ff13aca7", 0xe0, 0x100000000, 0x0, 0x1, r8}, &(0x7f0000000180)) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_complete(r6) 09:28:22 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x50, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:22 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x42000000, 0x0, 0x0) 09:28:22 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x9bdc, 0x0, 0x0, 0x2a1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:22 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:22 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e, r4}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000001}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/122, 0x7a}, {&(0x7f0000000600)=""/126, 0x7e}], 0x6) 09:28:22 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:22 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x51, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:22 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:22 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:22 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:23 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x10000000) r4 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x4, 0xff, 0x7, 0x2, 0x0, 0xfffffffffffffff8, 0x100, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x40020, 0xdd42, 0x10001, 0x9, 0x0, 0x200, 0x1, 0x0, 0x7, 0x0, 0xff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4001}, 0x0, {0x0, r5}}, 0x1) 09:28:23 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x4200) 09:28:23 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:23 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x64000000, 0x0, 0x0) 09:28:23 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x52, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:23 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:23 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r0, r0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, r3, &(0x7f0000000000)={0x2}, r4}, 0x401) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:23 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:23 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:23 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:23 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:23 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:23 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:24 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x4300) 09:28:24 executing program 1: r0 = syz_io_uring_setup(0x182, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:24 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xf5ffffff, 0x0, 0x0) 09:28:24 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x53, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:24 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x2010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x8, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2007, @fd=r0, 0x4, &(0x7f0000000000)=""/9, 0x9, 0x11}, 0x4) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:24 executing program 1: r0 = syz_io_uring_setup(0x182, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:24 executing program 1: r0 = syz_io_uring_setup(0x182, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:24 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:24 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:24 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:24 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:24 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1f8}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x810, r0, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4007, @fd=r0, 0x1ff, 0x40, 0x0, 0x10, 0x0, {0x2}}, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x4000)=nil, 0x4000, 0x2000007, 0x13, r2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x800) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x43f7, 0x413d, 0x1, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8) 09:28:25 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:25 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x54, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:25 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xfffffff5, 0x0, 0x0) 09:28:25 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x20000) 09:28:25 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:25 executing program 0: sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000008000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404005d}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000008000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000008000)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404001d}, 0x8000) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:25 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:25 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:25 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x55, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:25 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:25 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:25 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x41110, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x1}}, 0x1) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:25 executing program 1: syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:25 executing program 1: syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:26 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2000000000000, 0x0, 0x0) 09:28:26 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x40000) 09:28:26 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r3 = io_uring_setup(0x6053, &(0x7f0000000080)) syz_io_uring_setup(0x7fd2, &(0x7f00000002c0)={0x0, 0x7353, 0x1, 0x0, 0x29, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001380)=0x0, &(0x7f00000013c0)) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000001400)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1, {0x0, r7}}, 0xffffffff) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x11, 0x14ac000, r8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x4007, @fd=r0, 0x800080000000, &(0x7f0000000380)="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", 0x1000, 0x15, 0x1, {0x0, r8}}, 0x6) 09:28:26 executing program 1: syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:26 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x3) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:26 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x56, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:26 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 09:28:26 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 09:28:26 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 09:28:26 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2160, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 09:28:26 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}], 0x1) 09:28:26 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x2, &(0x7f0000ffe000/0x1000)=nil, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x3, 0xfffffffd, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000000)=r3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x7ff, 0xd8da, 0x7, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r2, 0x0) io_uring_enter(r0, 0x1006c56, 0xe6c7, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) 09:28:27 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x4000000000000, 0x0, 0x0) 09:28:27 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1000000) 09:28:27 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}], 0x1) 09:28:27 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x4000)=nil) r0 = syz_io_uring_setup(0x7a5f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x256}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000280)='./file0\x00', 0xc00, 0x18) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:27 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x57, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:27 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}], 0x1) 09:28:27 executing program 0: r0 = syz_io_uring_setup(0x7283, &(0x7f0000000080)={0x0, 0xfffffffd, 0x4, 0x2, 0x40000000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x44ef, &(0x7f0000000280)={0x0, 0xaee4, 0x8, 0x3, 0x48, 0x0, r3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) splice(r0, &(0x7f0000000400)=0xfff, r6, &(0x7f0000000440)=0x100000001, 0x445e2712, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x110, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000003c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x2, 0x1, 0x0, 0x4, 0x0, 0x1}, 0x0) 09:28:27 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {0x0}], 0x2) 09:28:27 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {0x0}], 0x2) 09:28:27 executing program 0: init_module(&(0x7f00000002c0)='{.\x00', 0x3, &(0x7f0000000300)='\x00') r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:27 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000105000000000000000000000000000600124000010000"], 0x1c}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0xa, 0x1, {0x0, 0x0, r0}}, 0x8001) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:27 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {0x0}], 0x2) 09:28:28 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x100000000000000, 0x0, 0x0) 09:28:28 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2000000) 09:28:28 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1) 09:28:28 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x58, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:28 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x330}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00dc0351e6cf1c14df5cc4075df743947e00008001050000000000bcb8e90648280300e4ff110016fc18f432ec0ecd24f58747f60d9d802778f129"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="498fb912922a4b8b0000000000000000000000000600120600000000"], 0x1c}}, 0x0) syz_io_uring_submit(r11, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd, 0x1f, 0x0, 0x0, 0x8, 0x0, {0x3, r9}}, 0x6) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x1}, 0x10001) syz_io_uring_submit(r3, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x6fe6c30220b752d0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0xffffffffffffffff, r0], 0x2}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:28 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x8000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000001780)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r6, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)="74b041c3e16a7a1a1b9d9f92ccc704555c0805d54a0901a2ba1a2d8fcfb8e900a67b8537d3b200dc6c119d5ef02c0ae089725c84a8b80b99b0e2bffaee365507c27d622a1a5a4f005d93b7a06b9bdd7f4565ab1d60522eae60ee363cae2290d575fc18d78e6b2a31f9c327ea6e8f88fae21e733fbe157a22f1bebc0861", 0x7d}, {&(0x7f0000000380)="461ca1638fa580da327e102519d89760af72fcd2718c6065ec988d07ed8309dad0a3a7f94d63333fe77450a186a2d111aa503a8e75952c6ac2befb2885159dce393e1605212775f64a5925b9e1e89286b59a03b038b77939565d20a47aa310ce821d3f3875b43f4f7e165b441c1edb7136fe74c955ad4d14618d35f7e0c977edf4d5e663733f1de6b324dc663f59192f16b2e4e00fc2329633fd0e88a3dc69488430449077def7e0a85931e4e083fc92e7b5d270438a19d9bd889ba7ef21b7658baf9c4ef4b1c1fa62dea1bc81bff917d3dbcf4fd2486bbf868ade80c8b8129abddc2de4e0307df996cac2997c76f22727b90452d645dafb2f229fdd5548459fbb470cf1de3b93d599340250aa269f92375ec0ab0b696370c84d32b515c8398d67a7ec8bbd3a174b9b40fb25b1fc3e01d991ff2967658c85e4aa0fd1d52c0da956ae1d40257b2c2fff200e2bb886f520775e7f841900b97f9ed44c76277cf04f6725a4d383b7d78486b4860bc9fba57f44b82939179af0ec845def6811d27a5f1793650957fda8a19563dd8da9f0944a2a2d2f4ad465d5dfa24a5b7b87007f5dad4c574f4e1c2a280b0fbcb2b3d7622a63cf257cc4763e56fa7226d44c962b6cdf0a8f9b27c972a25febdfcaf9c71110fed064f3945f4a00dc47c11c5dec3d6dc7159fb0b94d62875c251dab48cd0e6ea3c2b177eee1d23713c35a9252667799a3adf0d805d722460dcc80900a6029cf1117ccb5aae9d544b8592ff086ff2d61109989da065a69c1047fed9d51f2477ff313c54dddece87839d27caa4742d2b3fdf1698d95919785480c957d605e27efc8c9eedc56a09e1deebb29708cccb33b3d19c20e2a99dbecfdaffa654ebedc9fc163f81660e41dc31d13bb748ed3d67622ecb1779c4bdad861d4ff760be2e424af5222da9e83676b5f908b62a246bfcd8841335172495c1f39c8043d63198734f8b0fd9007c75580862cb43755c3a5e547a2089b3104c6bd6d56b742f32807616a54d4e44875ddd33095e2bf9471b506e6e534d832b146fd24b8ad0176761c5320abf5ae73ece396846aaec087b115929fe8532856e6c27a9044a73b164ef85e4f751d33631fb1e0cfa87370b2c1c5b47fad66c0676be438225915b0b07f17003ddfe95b23721af04be300b656638d045b21f8a57e5ae57f43fc6cf9213a6af96c024440d36f8dc7a8e8eaeac5a5fde237d5bbcd18ea753852f00cd4962b5feb99fdc5cd778d0aa4392f65102e884c4446aeeeb651782fb90319396d70cdd4af08221618dd29d1bf8270a5d4a3188c3bd3cd924756cab3678b6ebc44e99867362c08c64d512cc8faf4853e2bb95369ee5a9c848047de4cdc350c377e32fb43ea9d71db203622f14a1a5dbec8156d871ff5cf5e2be2f01673360d228bb028bbdf341630083e0790e8487f343502f5d3c99f78fb43cb9e15eea5411d6198eadb7862c464189e943cbcedb619f4d141bbd869de1145fdd5c110cbae736d38c3d2c385e4a0fa1fb26bc07fe476739dededdf15dc90a3a985f97716688e488364d131c70c99e6875092f8429d8ebe5f99d30da75cdb4917f6b59a932878f44bef750ffa038b66b7ed2e2e9181e193d4c38d6f8523d8cc27e14f0f2427cdb602750740570cfccca23af0688b80c480af4280d2a071afabaa75af1acb18ed0533cb075504c2a9e9e8f4e8a123b5de48119dd3a450ee16f0e62d18c5aaefeb8dea95f32b5252b3e46564a269f0f080c651087166d64ee8776c10fa521e1ad4c9abf992377117a9fcaf495c7504c270c5d26ff544216767a2519a27cab14cbd974e8a2acb7a9c08020a211e9b1a597873253dcf231b6b60961c6451aa12a4f80c1cd9a3252d3ec359badba9f1a5ad6d07deedc9b9a8b9bcd3ab65b08f792ce5ece9b9410e8b0a8b04908d1c7ee2c42915f999f771191b34efcc49cb223dead8a50d57f82283c4903e69c9d6854307982ab610a4f4bc60c3f2d19b265088a7329213ebc4ca4f6e7ffb3e42d19af224de2319907a626150b17a2788b93365f779e6ba193cecd5e5b2831b373c5702b603b3ab31ad3f2ac08fc2d35e2d3b922f89747470886da216bb8e7ef1d152f50fff191537da3ada4109045d941da583295df19326b77988ed67c5a03dd07dc2c4ee77e138346504045fffc762b0e8e4c006595d39a6224ce7b5b9ce1a951b50f07876ebb8798568fe1d4fe057fe53a752d8aa6e69276d94f68c96b80daf6c07d16c0d79a3f998f58b6aa54ad14ee0ffc8381e2f9acdfdd0d9c1fbda3c4ef80fad61e8e2bd82e086864e56a2a57bc1bfff26c1ffd51259357e33d3840905b9d857deaae6c8306101940a8d142bd9a133b675d0ee89d429d85d5be3a43d5ba535fe1acf7f00cad9a6df11288138b9e803806c6288ebc2416ffb3639cbb981fcd1f4b6d87f8e27e349b02fca7ad1d1d07f7baa4ea32140a743b52646af018cbfbd74c25d3801e00d907be2e36fcd00f57ac2c5018f1d783246d60dab3f4efda92547aa0c3413f958eb3898123b4f579c95b0ca2242e98d3928aeee47f4b003d49dc30817f631def61162d79be7e7e03f0a3b7d630cdfe3cbd71ce382b482c0ee44281829b2e0cffebb7d6ef8a7b25fce86db9a18070bda6baf9f8819efa64652a26f8e0a8d25deee65387b139501070045cc45b0720d89fd7d8e885978c141961b37734bffcff82dc596145038d6b3185dd163fb8489ee5ea0c4eec568be1d7f4fa1be53beb7437de29530074955cdd5d21aeb0488c00e55e431e4a1b59db69bac2d9665fb7f5cdb5ca3ea038297dbbfe7aa99c33077b0aba8daef9893505614d718a6615e4715fc0806a8f8e2d6521467ef06d549fccc2f7c0f7620264168f31a59e5df920980da82f7513534f88162a09f2d65267000ce3d9ebcb34977a75a5298647653f029b8f9b770c1a522eb960326377c887f9e800cccf1558db93ad54e0955939be619bd0de1214017d2284418a119ab506a5a58eb23430f367830229275527c503b71df6f0e9f507ba08e2b12a9c8eb4434482ad51af2492d2b1d57f0be433168eb92f2fb9ade68b07615e8e8f3e2e2b4273c8d24512ccd5de743bae9cadfdd9f7d22e3e90a693896b79e1c4887bfeeee8bb51456a3900b44984ddd823403cdc20ba195db33888647315f769bd2ee963b0ed9925990776f0c8850b416c655808c61d9b240b36803c36cf289cb4de994ea3370ee5a64ea4d363d7b871282be85d614d6730e8d38f859df296b7386bb6ecb544befd5b8311ceeb5f553565777acf34e544a7f6c6836841b4726d6fce6079793986c6e20fe20c231e2a90ac684707e688c2efbefb061228eafb597140be4b013185f941b8d608f157c4e8bc2ae4dbe4ac2469084357e5f8e14c5d35d979566de74998d5d5693007f742cee1bc1bf1c222b598dacb6da300d6a27936e224f104cb76a0edf1d92eb71645910001d95c38426f80a9249d480bdb5c99684e2e6e979e8d182722359dfdd09418bd6924d13cc791b4cd1b6260d4b9893aac7e575da4b081e23638c004788c77bae0e1eee66333c9e286ee0af45bfa0ad857ac1d9097abf79762e79d0c1e0ec412a89a0a84c2eb153848b6b33a203134ea2fd864746e56abaa5f22fed96107bd6980aecb7ed2830a893bfbbb3b3c974dcfef01ba723a4fafd246e05fb87da301f3f7c5e454fad90a0731719e0f614464998109bce6c4b97083e720fd6a28b81c90e7df49eee31ed9a57e550c15810781dedb927d5bebf1900e44d387ff506e9665d37d4eb858f976e51fe1ffbb6ec1577532698493ebba337257e0244936be2b931e801bd36290ac44b2f20356513b57dfa2aab6e001ddc111c4da17f4cb0e0483fe80033215a5958e022c29ff96e081cea54c2d7815cf74f363f1be4512aa38952edf84e606c3d04b901cc3d765c71b06f91f1d315a2c060ef553b3e97887a8a78645760572b5ea984e0660f8760fd34c9e9788e33024207f61496b0ccf0e19582a5cb4853e87a45ee2d79771ff68616a887a127c6c6ba8a380a2ec83c047d8aa25370a708fd563ab18c72c8687964fc6c29114979c09cea055d644f1e729c59cb579672e242bea696766b69b5ccf6f54fcaebbff23920c25388023e764d64cf7464651b231209986c4d83bc9b3d2dbf63443f6b7e1dfb068f501ee12d9895203dd89616b2cbe99f27d6df25d243207ace3dcdb2d04f889fdfd88faf4ae161403fa9776ab8c3636d9651cb010e6075b3a6d77e671295f4e6b636b6c31e6d9af737ab13dff9acb584fced194cf1bc5236f7743d089a17d64be3d794b7aedbb681b08d26b4573b9bcbf2382abbfb4d52100e5b4a41da40fde11ba73a45ed91a1880a5c378c5bac1d8ed9ad3ba3fc64838b5d681aa6945b079ea97a2ec1ffe7713525c675075b0264e3f819ba7488dcb10305632d7a22c876cd682a5d34a954bb8e850dd15d772a1320757191075331c03e57529fdd574cfd6499c664017931a28fff3b81d9e723e2b3820f3bb607eb2a62bf8f0c89bf1e102d0671480a97cb5c6c3bc18a8e190ebe6e1ea83015f673e22e31d9a6036149d3281137ac82b0530c2ef8c2dbbbe3bde9df842f99e8c0c3fe4efa677e3529d1c348baced1c107f7c7d3eb7ac204f6aa0446e5d5326caf34e4ed1dcff5519a9de4db03fe31adb7d475841ff9317332a5dc217b040cf9cb6358b1ab5cfb26d1344db71894b8776cdc9591f90f8f6c9c3398dd03dd4733b4f6ae8cddcc33b8e852fb54cef4918cce9fedd57956b67b12d25fc19f76b7a51e7097e1c616998aaa1b625339345751fc02672a685cc484a58171faaecf39e594a6888478fe9c0560b93209340b215df735c743e3229bf2c6d292eb92133d83f7ff474b16a06347a0a1ad1abeb1d777ba8575ccb6303715871658c1b9793ab184fbc7c9964d0a034fb5f8c3cc82f84f8792cdae85c74b894620f06a9e7da0624fa7485cf8e481cef504803d67876d1036249373b36083a247326a30953e8b6cfe34b62a182be64122f2b1939603b76005455522c5b4e6a71c843c0bb1e22403f0d74e44c1ecab01c3ba44bbfa0ab357db2da4985a23c7b4e935a2e309e496c6d8e2903c697776a102901a4f14b9a165a04eede638f0ab2d649dd7f841e741834820d6e54ab75f5193e91e4398332e6680d4f2486eeccbf1c645e7558c63f0539f4f137585b39e9ec5a3628ca2e8152676352f93e0af8af8b17e480bb76faf1dc27bc124acfec8304ecd703c66c0d43c6a69346d118ca8be490485a534792560546c897a2fe3aa59ddfde4c0eb16ade4053f8a4dd668ab812d62d56e355d8a4c8048d1240025a5a3d643848a30027e1993f23648987abd68f1d7b8034da33d75fb60875202c0ea43c0586071a2de4922375ba1f2eba2baff4fe060cf3cc718add3e77386fb6cb748f1f0ac4e425e65d457fc0647069ca88fbfad9ac9eb93f3731bda7c9effd958f186ad7e5db2daa69dbd9fb57bb72c7c6c4c06d7ff244625509a853b0ab62d4246cb4878daf67294f857bea4f6de7b2b91f66f0b9947a52df9cad8859ea56a139d2513fd00ea45da5c2f35e10c85141f3ad25d81656aea1cc91c25c20c601468724aadd2170049fc7dbdaf513b7a627adb02ae8e0fb21e65f2ad024bfa84ab1652daac58bed98bcb2262bc96f2d7f36850da4ef8938f24fb418a8ec3034b736d0b3b5f6c0a7956bb8181478cb5469c176b75682f179d6e857619db3d4de9fbc25d0a9ef276b4251bf7fb712c3d8239d57159191919", 0x1000}, {&(0x7f0000000180)="cd1eff24383ff5a509b448a42d523416a040a195f94e47f5fd69e25b4acbe2c0b47c9f58ff2b876a9d9340ea015058a32998ae4d2ffe837ba024f1dd149b3d47a4d273c9cda69d6d9e5ffd9a6d03dba62b96efa701bf9cd55eca07542abd1b7584d0a60366e2897dee4b3b2b05a4fbfc09276e70e0c16c1ffdd3c8f706e4800bb33ebf714a84fbb622cbecac951f0b", 0x8f}, {&(0x7f0000000240)="0a0bfafd0c42cd1022a513fe41cc459e94959bf2dab40e", 0x17}, {&(0x7f0000001380)="2743e185e5c6a04abae74f9cdd98c101e522c9de6a7175321ba575922df33ddb9b7ca54b7277ba22a4b3d56b1f89846b237a29747dfd436c38b30fcc6539e5a596d771abf0e04d494fd991b90c628f4426f0da85706485ec5c202d93b36f3ed9043097c1950ca94dfba0ea77d36b8ab7d98bdc8196e812c5961ef3eacb41ee6c8b4c4afb54a6b2e8f17ae8f05c744b4337a58dce9f891f0050efe8c63cf8846280f2e4607e007366b46f609cbd7ec0cdd6341b897a130976a36d76e5c64f7756968823efcd81d7ee09028b193d9be6041699976f17e4a30d70ba1a5ea6ab5125a9e18b1ec952f33b287600680228a2ecd1", 0xf1}], 0x5, &(0x7f0000001500)=[{0x98, 0x115, 0x1ede, "933a2404428a73171e6bab7dd1b939cc71da4fbe4c3ef025fbedc2f095c1ec2afd260d9f5382b730c5b0648b74a34685986e689739c782b91b48b6cd5b9b6b6d76a6322d4e7ee79b2eebce13c8f558b43d6458f22b48cdfaf0e493b8ba4e1eb1bbfde72cfa77c44f887d6e0167d169292cd94c23d0ac986f0ef6b332d7943130465e03de74"}, {0xd8, 0x101, 0xffffff3f, "1430e400d1ec3c46fbfb67c2f75cc185ca10b55d8389c55a2055119d4d5d81b27e7e24aca5aa1569510623ed1f0b4abbca1ca803c4ea63734ea8aac1227849d76c6ddad719916d28ad7d86e8546f3dc008c531d30cf336ba82978965c1e62830f03d1bc1e1c5e49ec700c310efac8370f3dae954d45efc9d1d146ab3bab7fb170bcb07a96dfd940cb7e6a9d75d35c97b02be2e2d005c44f9c08ae79ba66c35b064cd119d06b3e6e77b51370ac252d5548672a333c48efbe858d8736e9aad3abc44"}, {0x100, 0x0, 0xfffffffe, "05ef383939232bf93ce6301d97cd7c55ba9f70e890266f5d5e161d3ae2b570abdd034d0e759e510645745f6eda2d7f389efb0e5aa4c35b464bad7b1cff9c9845da06dc7ba5c2a1627933d963a648a88b3f8db2d2e131e950fc117db11d78c95e2f16cee41e16be27cb204c9022e8d5dcbdfd78fc8ce1a4dce13f22b7d52eb43c15360e6c749e7e1f55cb510281c99df8c0bd8de23edc4928c681c3f5ba72b306fa0958a646a73064a3d0314262a11d88ce99440b36fe83fc508dc24a43c3ec946b003cdda7c899e3b910abf816d1a89deabf70f5a4e05fa5cc9fe71bbbeba411b0907c318afe0258083914071ce910"}], 0x270}}, 0x40) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:28 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1) 09:28:28 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1) 09:28:28 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:28 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:28 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x2000)=nil, 0x2000, 0x1000007, 0x40010, r6, 0x10000000) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x4, 0x30, r2, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x7, 0x10001, &(0x7f0000000180)=""/191, 0xbf, 0x4, 0x1}, 0xa3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000000)=0x7f, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:28 executing program 0: r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) fsetxattr$security_selinux(r0, &(0x7f0000000280), &(0x7f00000002c0)='system_u:object_r:xconsole_device_t:s0\x00', 0x27, 0x0) 09:28:29 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x200000000000000, 0x0, 0x0) 09:28:29 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2040000) 09:28:29 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:29 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x59, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:29 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x100, &(0x7f0000000280)=0xffffff7f, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_setup(0xcfa, &(0x7f0000000380)={0x0, 0x4db9, 0x20, 0x3, 0x18d, 0x0, r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file0\x00', 0xd0, 0xc040, 0x23456}, 0x45780b0) 09:28:29 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x50, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:29 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88043, 0x0) r1 = syz_io_uring_setup(0x180, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) fchown(r1, 0x0, 0xee01) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="1b32c85393b2e80ab36544298a989782bd21f76a67dc7139403de03eb02c8f7069a27bc24acd8dedddbb747abdff3c4ae7357a3a673e9f8ac4d6dfb2415e2141c19dcf811096d2a4ac540c09ef8af07617bb", 0x52}, {&(0x7f0000000240)="fde3ab86f493116196bafd8dfa07a9508a560cf8234104916304f7e12f65c4b3bb33c294232df93cde3358024c67ebadf2a21b694cfbc74fb21346e6e0523f7a32209cc082d76bd336da04355235ec76916f7770dcd3c25646472a0ebf7827726d6fb9f41e", 0x65}, {&(0x7f0000000380)="d4f997a4c4694a5d7d72420cbadd41814bf42c3a2cecbdbdfee990d40e0534ad288436f5e2714f0da6762ee73a1212623edb8c47c87f0214aa0630849353ef0ae3d30752", 0x44}, {&(0x7f0000000400)="c9e212a7d5e16286db951b502436fdb4ecad698383e3d8835536b2e72512f69f886481f0cf", 0x25}, {&(0x7f0000000440)="a99503fe41da0e1bea3a4f41f3eb74fdc0ebff4afddbb9588ee6cb4c633050c66f8b8dc471e347b7f2329afc05d867d7704a1d1d81f508d381569f8f1b68632786c38edc35b971f07e6e4f2acbf59ae4d44553ae7e76c9fca9916162bb", 0x5d}, {&(0x7f00000004c0)="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", 0xff}], 0x6) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, &(0x7f0000000080)=0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x0, 0x80800, 0x1}, 0x5) 09:28:29 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x6053, &(0x7f0000000080)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x11, 0x14ac000, r6) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="acca2bee8434a9b5b2238479c57a8d3cf1365ec2ff97d9c762d4dcafb94b5db323b20887099d35a9326411f156d69dea52293c65113a1b6b5ba087596703af2402c015c1fade49e2c0", 0x49, 0x20040885, 0x1, {0x0, r6}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:29 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x2dc9, 0x773e, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:29 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x50, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:29 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:29 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) sendmsg$inet(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="19d1d4b2b201f156a06530810c7eafc83de810a279b75c53131a239e1ec0beee6acf43f27dafe6c60ca6d80a69839fc6948a23c4b87f390b400c93fd4a35ed50c56c588a968ef9e7c0faa374961f78f73bcafac5604724bda6d582e22609cb41129c590b96c597da2d3a166757e6832bff8b0ba1c17e3e9d9e6b9ea9cdb23ddc87a0a457ad020680b62c0f44dec11486f318", 0x92}], 0x1, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd9}}, @ip_ttl={{0x14}}], 0x30}, 0x40001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(r4, r7, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000440), &(0x7f0000000540)='./file0\x00', 0x200, 0x4000, 0x1, {0x0, r9}}, 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:30 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x204000000000000, 0x0, 0x0) 09:28:30 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x3000000) 09:28:30 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xe6) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 09:28:30 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf, 0x2010, r0, 0x10000000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f0000000280)={0x40}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x2) 09:28:30 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x6, 0x1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:30 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:30 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x41000, 0x8) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x418000, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000440)}], 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r3) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_setup(0x2ed6, &(0x7f0000000000)={0x0, 0xe379, 0x46856c81644c6553, 0x2, 0x45}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fef000/0xd000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:28:30 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 1) 09:28:30 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x6807, &(0x7f0000000340)={0x0, 0x800000, 0x0, 0x3, 0xbf}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd=r9, 0x101, 0x5, 0x2, 0x8, 0x0, {0x3, r10}}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r11, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r11, 0x4ea9, 0x78a2, 0x1, &(0x7f0000000280)={[0x2]}, 0x8) [ 676.434665][ T1928] FAULT_INJECTION: forcing a failure. [ 676.434665][ T1928] name failslab, interval 1, probability 0, space 0, times 0 [ 676.447372][ T1928] CPU: 1 PID: 1928 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 676.456125][ T1928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.466177][ T1928] Call Trace: [ 676.469447][ T1928] dump_stack_lvl+0xd6/0x122 [ 676.474042][ T1928] dump_stack+0x11/0x1b [ 676.478196][ T1928] should_fail+0x23c/0x250 09:28:30 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0xa80, &(0x7f00000001c0)={0x0, 0x1f3f, 0x0, 0x0, 0x3d1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000380)=0x80, &(0x7f00000003c0)=@hci, 0x0, 0x80800}, 0x4) syz_io_uring_setup(0x7e4, &(0x7f0000000000)={0x0, 0x41a3, 0x0, 0x0, 0x9, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xa22, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r5}}, 0x101) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:30 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x401, 0x4, 0x0, {0x0, 0x0, r4}}, 0xfb2) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 676.482636][ T1928] __should_failslab+0x81/0x90 [ 676.487393][ T1928] ? io_sqe_buffers_register+0x127/0x920 [ 676.493029][ T1928] should_failslab+0x5/0x20 [ 676.497531][ T1928] kmem_cache_alloc_trace+0x52/0x320 [ 676.502819][ T1928] ? 0xffffffff81000000 [ 676.506967][ T1928] io_sqe_buffers_register+0x127/0x920 [ 676.512434][ T1928] ? __fget_light+0xd0/0x260 [ 676.517021][ T1928] __do_sys_io_uring_register+0x513/0x21a0 [ 676.522824][ T1928] ? ksys_write+0x153/0x190 [ 676.527322][ T1928] ? fpregs_assert_state_consistent+0x7d/0x90 [ 676.533377][ T1928] __x64_sys_io_uring_register+0x4f/0x60 [ 676.539026][ T1928] do_syscall_64+0x44/0xa0 [ 676.543454][ T1928] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 676.549351][ T1928] RIP: 0033:0x7f66e1e64a39 [ 676.553759][ T1928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 676.573484][ T1928] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab 09:28:30 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x49}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 676.581944][ T1928] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 676.589898][ T1928] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 676.597858][ T1928] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 676.605823][ T1928] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 [ 676.613795][ T1928] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:30 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x300000000000000, 0x0, 0x0) 09:28:31 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x4000000) 09:28:31 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 2) 09:28:31 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x182, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r4, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r5, r3, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd_index=0x5, 0x2484d357, 0x3, 0x0, 0x1, 0x0, {0x3, r7}}, 0x5) ioctl$RTC_UIE_ON(r4, 0x7003) 09:28:31 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x3000000, 0x4000010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="2a1abc952977741e172902f29ee07f3aa8ff49ae7ccc47ff0d2173d26f5e988a499a4bacd7a35f11dda2a3d3ca41e5e781cbcc274a327a9eb166853ff970daac965a552f02481e7fec498c2510e41bb2bf76cef51b2be392d7c923d918e8aca32ea3439e199a5c330c41a4d1586134bb056d44cc96a791f84fea87fff3d9e11064165782c5d970d6a4984ebe7b134b11608cc5c07783344b843de272da710aed055944f0806fc53440d34f972a12c710b44399401a5d697778c24f0e565cc06bc33a52cfae34be18b4c81e", 0xcb, 0x40000100}, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 677.259592][ T1955] FAULT_INJECTION: forcing a failure. [ 677.259592][ T1955] name failslab, interval 1, probability 0, space 0, times 0 [ 677.272313][ T1955] CPU: 0 PID: 1955 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 677.281063][ T1955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.291098][ T1955] Call Trace: [ 677.294356][ T1955] dump_stack_lvl+0xd6/0x122 [ 677.298939][ T1955] dump_stack+0x11/0x1b [ 677.303084][ T1955] should_fail+0x23c/0x250 [ 677.307488][ T1955] ? kzalloc+0x30/0x30 [ 677.311596][ T1955] __should_failslab+0x81/0x90 [ 677.316358][ T1955] ? percpu_ref_init+0x96/0x250 [ 677.321216][ T1955] should_failslab+0x5/0x20 [ 677.325697][ T1955] kmem_cache_alloc_trace+0x52/0x320 [ 677.330959][ T1955] ? kzalloc+0x30/0x30 [ 677.335026][ T1955] percpu_ref_init+0x96/0x250 [ 677.339680][ T1955] io_sqe_buffers_register+0x149/0x920 [ 677.345121][ T1955] ? __fget_light+0xd0/0x260 [ 677.349714][ T1955] __do_sys_io_uring_register+0x513/0x21a0 [ 677.355503][ T1955] ? ksys_write+0x153/0x190 [ 677.360052][ T1955] ? fpregs_assert_state_consistent+0x7d/0x90 [ 677.366154][ T1955] __x64_sys_io_uring_register+0x4f/0x60 [ 677.371766][ T1955] do_syscall_64+0x44/0xa0 [ 677.376221][ T1955] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 677.382242][ T1955] RIP: 0033:0x7f66e1e64a39 [ 677.386631][ T1955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:28:31 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 3) 09:28:31 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x8000, 0x40) syz_io_uring_setup(0x302c, &(0x7f0000000880)={0x0, 0x945e, 0x2, 0x3, 0x2e6}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r3 = syz_io_uring_setup(0x456d, &(0x7f0000000440)={0x0, 0x4ac0, 0x2, 0x0, 0x1c4, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x50, r0, 0x8000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_setup(0x2344, &(0x7f0000000640)={0x0, 0x18a6, 0x1, 0x2, 0x1c8, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_submit(0x0, r10, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x16}, 0x1}, 0x3) syz_io_uring_submit(r4, r8, &(0x7f0000000840)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x20, 0x3, &(0x7f0000000740)="334ecf603a94f9fc2af620a02eec0830916d00f5fe963fd867bdbb1cbf9aedfbedd7a78fd1dd5839bcb7bb281960536a2f8e8973499179aa62deefc43393305ea65047ae262d6973d1bd6761c7495eefaa69004900874b0c35b0df69cee23ec5deccf1fe5a015f29c4f2aa0a579468718f7c83f5cd10117b318515dbe5a8bb16331cf2476a08b4cfc1adbee55081648e3140443caff8c4b2ed3507f3b23c0ff3105b0a9abacd7ff6432984957d83d4c6a5f4376425214968126224ff443926d5600bcfa1cb2f042f945acffdc16d4614f69ab3fbced54933448bde6ee408cbba940d79fea9", 0x4, 0x0, 0x1, {0x2}}, 0x80) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r11, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r11, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x100, 0x800}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x810, r0, 0x8000000) [ 677.406279][ T1955] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 677.414677][ T1955] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 677.422716][ T1955] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 677.430721][ T1955] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 677.438675][ T1955] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 [ 677.446633][ T1955] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 677.486245][ T1968] FAULT_INJECTION: forcing a failure. [ 677.486245][ T1968] name failslab, interval 1, probability 0, space 0, times 0 [ 677.498909][ T1968] CPU: 1 PID: 1968 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 677.507591][ T1968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.522918][ T1968] Call Trace: [ 677.526230][ T1968] dump_stack_lvl+0xd6/0x122 [ 677.530826][ T1968] dump_stack+0x11/0x1b [ 677.534972][ T1968] should_fail+0x23c/0x250 [ 677.539392][ T1968] __should_failslab+0x81/0x90 [ 677.544138][ T1968] ? io_rsrc_data_alloc+0x44/0x3e0 [ 677.549475][ T1968] should_failslab+0x5/0x20 [ 677.554013][ T1968] kmem_cache_alloc_trace+0x52/0x320 [ 677.559284][ T1968] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 677.564475][ T1968] io_rsrc_data_alloc+0x44/0x3e0 [ 677.569470][ T1968] ? kzalloc+0x30/0x30 [ 677.573549][ T1968] ? percpu_ref_init+0x1f2/0x250 [ 677.578467][ T1968] ? kzalloc+0x30/0x30 [ 677.582518][ T1968] io_sqe_buffers_register+0xe3/0x920 [ 677.588117][ T1968] ? __fget_light+0xd0/0x260 [ 677.592768][ T1968] __do_sys_io_uring_register+0x513/0x21a0 [ 677.598591][ T1968] ? ksys_write+0x153/0x190 [ 677.603117][ T1968] ? fpregs_assert_state_consistent+0x7d/0x90 [ 677.609208][ T1968] __x64_sys_io_uring_register+0x4f/0x60 [ 677.614952][ T1968] do_syscall_64+0x44/0xa0 [ 677.619375][ T1968] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 677.625420][ T1968] RIP: 0033:0x7f66e1e64a39 09:28:31 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) personality(0x5000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x0) syz_io_uring_setup(0x505, &(0x7f0000000000)={0x0, 0xfca4, 0x1, 0x3, 0x264, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x9, &(0x7f00000001c0)={r3, r4+10000000}, 0x1, 0x1}, 0x8) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x5]}, 0x8}) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 677.629824][ T1968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.649573][ T1968] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 677.658157][ T1968] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 677.666114][ T1968] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 677.674067][ T1968] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 09:28:31 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 4) 09:28:31 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 677.682176][ T1968] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 [ 677.690125][ T1968] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:31 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_setup(0xab4, &(0x7f0000000280)={0x0, 0x7709, 0x0, 0x1, 0x109, 0x0, r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) [ 677.732543][ T1981] FAULT_INJECTION: forcing a failure. [ 677.732543][ T1981] name failslab, interval 1, probability 0, space 0, times 0 [ 677.745200][ T1981] CPU: 1 PID: 1981 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 677.753870][ T1981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.763957][ T1981] Call Trace: [ 677.767296][ T1981] dump_stack_lvl+0xd6/0x122 [ 677.771895][ T1981] dump_stack+0x11/0x1b [ 677.776046][ T1981] should_fail+0x23c/0x250 [ 677.780441][ T1981] ? kcalloc+0x32/0x40 [ 677.784491][ T1981] __should_failslab+0x81/0x90 [ 677.789234][ T1981] should_failslab+0x5/0x20 [ 677.793834][ T1981] __kmalloc+0x6f/0x350 [ 677.797975][ T1981] ? io_rsrc_data_alloc+0x44/0x3e0 [ 677.803171][ T1981] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 677.808365][ T1981] kcalloc+0x32/0x40 [ 677.812284][ T1981] io_rsrc_data_alloc+0x80/0x3e0 [ 677.817244][ T1981] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 677.822452][ T1981] ? percpu_ref_init+0x1f2/0x250 [ 677.827377][ T1981] io_sqe_buffers_register+0xe3/0x920 [ 677.832749][ T1981] ? __fget_light+0xd0/0x260 [ 677.837348][ T1981] __do_sys_io_uring_register+0x513/0x21a0 [ 677.843201][ T1981] ? ksys_write+0x153/0x190 [ 677.847684][ T1981] ? fpregs_assert_state_consistent+0x7d/0x90 [ 677.853728][ T1981] __x64_sys_io_uring_register+0x4f/0x60 [ 677.859411][ T1981] do_syscall_64+0x44/0xa0 [ 677.863835][ T1981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 677.869718][ T1981] RIP: 0033:0x7f66e1e64a39 [ 677.874110][ T1981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.893696][ T1981] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 677.902104][ T1981] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 677.910056][ T1981] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 677.918021][ T1981] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 677.925978][ T1981] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 [ 677.933929][ T1981] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:31 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x400000000000000, 0x0, 0x0) 09:28:31 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x5000000) 09:28:31 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 5) 09:28:31 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x8080, 0x0) close(r3) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:31 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 678.164909][ T1999] FAULT_INJECTION: forcing a failure. [ 678.164909][ T1999] name failslab, interval 1, probability 0, space 0, times 0 [ 678.177549][ T1999] CPU: 0 PID: 1999 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 678.186313][ T1999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.196346][ T1999] Call Trace: [ 678.199605][ T1999] dump_stack_lvl+0xd6/0x122 [ 678.204176][ T1999] dump_stack+0x11/0x1b [ 678.208326][ T1999] should_fail+0x23c/0x250 [ 678.212771][ T1999] ? kzalloc+0x1d/0x30 [ 678.216818][ T1999] __should_failslab+0x81/0x90 [ 678.221636][ T1999] should_failslab+0x5/0x20 [ 678.226127][ T1999] __kmalloc+0x6f/0x350 [ 678.230266][ T1999] ? kcalloc+0x32/0x40 [ 678.234315][ T1999] kzalloc+0x1d/0x30 [ 678.238199][ T1999] io_rsrc_data_alloc+0xfc/0x3e0 [ 678.243121][ T1999] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 678.248321][ T1999] io_sqe_buffers_register+0xe3/0x920 [ 678.253760][ T1999] ? __fget_light+0xd0/0x260 [ 678.258385][ T1999] __do_sys_io_uring_register+0x513/0x21a0 [ 678.264191][ T1999] ? ksys_write+0x153/0x190 [ 678.268753][ T1999] ? fpregs_assert_state_consistent+0x7d/0x90 [ 678.274815][ T1999] __x64_sys_io_uring_register+0x4f/0x60 [ 678.280426][ T1999] do_syscall_64+0x44/0xa0 [ 678.284832][ T1999] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 678.290723][ T1999] RIP: 0033:0x7f66e1e64a39 [ 678.295150][ T1999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:28:32 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 6) [ 678.314734][ T1999] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 678.323125][ T1999] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 678.331251][ T1999] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 678.339281][ T1999] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 678.347230][ T1999] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 [ 678.355242][ T1999] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 678.381221][ T2008] FAULT_INJECTION: forcing a failure. [ 678.381221][ T2008] name failslab, interval 1, probability 0, space 0, times 0 [ 678.393875][ T2008] CPU: 0 PID: 2008 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 678.402604][ T2008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.412639][ T2008] Call Trace: [ 678.415914][ T2008] dump_stack_lvl+0xd6/0x122 [ 678.420493][ T2008] dump_stack+0x11/0x1b [ 678.424626][ T2008] should_fail+0x23c/0x250 [ 678.429031][ T2008] ? kzalloc+0x1d/0x30 [ 678.433091][ T2008] __should_failslab+0x81/0x90 [ 678.437831][ T2008] should_failslab+0x5/0x20 [ 678.442310][ T2008] __kmalloc+0x6f/0x350 [ 678.446441][ T2008] ? kzalloc+0x1d/0x30 [ 678.450512][ T2008] kzalloc+0x1d/0x30 [ 678.454402][ T2008] io_rsrc_data_alloc+0xfc/0x3e0 [ 678.459346][ T2008] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 678.464521][ T2008] io_sqe_buffers_register+0xe3/0x920 [ 678.469871][ T2008] ? __fget_light+0xd0/0x260 [ 678.474467][ T2008] __do_sys_io_uring_register+0x513/0x21a0 [ 678.480331][ T2008] ? ksys_write+0x153/0x190 [ 678.484821][ T2008] ? fpregs_assert_state_consistent+0x7d/0x90 [ 678.490865][ T2008] __x64_sys_io_uring_register+0x4f/0x60 [ 678.496478][ T2008] do_syscall_64+0x44/0xa0 [ 678.500880][ T2008] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 678.506804][ T2008] RIP: 0033:0x7f66e1e64a39 [ 678.511211][ T2008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:28:32 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x1bb}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:32 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 7) 09:28:32 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000002, 0x110, r0, 0x9a51c000) 09:28:32 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5f, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 678.530806][ T2008] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 678.539211][ T2008] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 678.547184][ T2008] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 678.555148][ T2008] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 678.563175][ T2008] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 [ 678.571239][ T2008] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:32 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0xffffffff}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r4 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x4, 0x4004, @fd=r0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000380)="2c00f55623e616d7686956d53bc78726d85483b7d0539c6e7ecaecd6d23baf6152a32b101d8d6a0be8425d508aabc42b2d8ca6286ecabc56f27bc4116716158888612d3f6eb8c85a94b57e9b15078575b3d2d7cbf43aeb4329e5923aabd37ec3891710f736d98f8112b587113281244a0e225f677e4770443233a90d61db115dcc620f7ef100045808757ef0300cdde57fd2b03c742c9d11afb0b25c1842c5341c3cead1b8b635134903df6b029f730849035346e890e362ae211c820abc49476faa82715d425a319e4a5c9cbb194dc0e6e5a7a02318da8dc596b782a0d38e19cc2e6df64964c5785389b880a977e4329220f1f3ef761cc74287e84e648dbf3a1afda0102b2d40bdc9138e0386ca7507a7b37773768e8fe045c2737289834b0eba5d2f50437f1e541c3e730356b1f746ef4c200863b5363f1b0bbeb90541b9807f85bb1d27c254c2c1e346d86188ffa830548a8101801cba03a1a47a528f2f2891dabfb0a37a4622afd2afafabcb212ff6c51af1ae7dddcbe6ade0a9d312cc08d6d74d078b95471c92ab123db07259bba2d2f476aaa76d68afe0e9c562c7bfb657c1b9322a680f7ff365aeadf70f867eb50cfac6ce3205a51fda66504f578d93658b8fccc681d49b05c69464e2a7ec3645c7ac2c0e360af806a4d699a660d1f4db52f1dfb60bddc9f1d0508f5b94e244c8959c9624ee69b5f837225afe778ce562fe7d5eec80ad6c66048b1a8a3a9b26f29cb63950d7570b48950d61409d66c7c31d3b60c3e0c5b8f7d41204b14e7d275864217969f854252d0e9138b43e4d4ad54fe8dac96f8bd69fb392f080caaf919d1d49684fab369bee3694316c30fb2ba926abae67175784235977e042d9b5077d1591900340e9c5ed9ca981eb5b2c73d222d5377f1989c50e44fd6a55983dfa957c00bcd247eb399856bd7954c6fbe11dd012622e7302011e2d7cfecce83c73892f8dae6d16ac3965869f598175d21096c603319f5eb4185aa7eb98d173a29bb5c4f20d1336c606ceaed4f540f304b99954459e2c138f126e849506a6834651c68c8f650b541d8d7aa32d69d121c9fe80b367544c5a02b3b8d7a324fa727fd6e9b54565eed0e35c8d838695d7d4820ad0740d147baa09f556a432c97a8e5d4dad6bbe5f789d6e8a4eaf56b3d83f684a56c65b6add2e70a7aee58f3baf9870e06ac743d850e537ce5d8802f67d3f04c98e3e2e7595906800ae7c391afce237a3df2099213cf6f89c4696cc00648ee86f64ac65d40f2294060360a00032e2a11cc0f32a38ecb558a4d0ccfd02ac0e18bd80519a287e2609ad1cde2f1e02536e2c36a75114e24a2d05a3c2a8ce8dfb10ce4d49df3029b4385c0c14354b25a2a5c9d5b0b7b2ae7d299ac53b51bfab9e7c787303cc7da35b5358b2e1ec856899afa78c8dcbf0469a7b3ef35749f8cd65399d1280bfb9ce1bd410f228512578589f7e0b7b79358752ff228d1f27f27c8705e56279820be7c26be82221e7683dc30ac7d27da11c4a86a20f9a2d3ed8294b82399f9e4a756b56665f5b9f3eb147ba8431dff35c805946e469ded0408db33c7ed2dfe8253059fe519dd2e9a38c311866f66545777e4cec9cb195bcde7ab862a9fbc11b805c0202aeef70599b7d4fe1b640d48525cfcd6447c1149598553e802c776ca9cef3a7788cf85863bc7dcd5ba0b6dac9b9e9d3b5c2f8e3b10f9b4ffd7f1752e256b92b39ce505f1aa2eba842038de3dfdae271137926f9b59620a6521578ebaae837cb384238dec3a6a657e99811f474c09fc58e95ebaf6f5a404b647bcc779eeff964489b996b705516e00ad8c3cc9f2f2ccf7b5539969282d29b4b6835440fac19933b6a5aca79b7f9651e23bbaa54869642adc93997f717275c417ca31c181ccd2fd99810943033e45b6f9d48c62f0356c988e3e002890810d210b805e44648a9da5cf99d4081f53aff33136788244e14003c5adf20587f7a60b323376b7359f32955e2f255c885580815af56667f7af9fa708cfd9fc70c73bdb82c0c072ff003fe3e0bf5a7a4d048eeaf60973eb0811ed9df46ea815a593abdd2242ff4083e4e793cb570751dcc0c7d87a15e38ec0393af24d615e72c1b067990b2673a49b4ea0505197d8699b5c902486ed66b16e2d5ec24dc1304dcc552b56fa619638e9c3fc6ce3bb1c9de8e5c94ba90b174c9b2d244914e3f5b143fe311f1d9260dacd058e108d7614dccdda77440143de6fcc15b97bdd630961b386397e19797bf77d22af195067b1a847c80c00ce80930e7096267aa178c68de280149950dafc985e8d2719d99d60954ae8068728fc3805e7ccffbda7e87bc687372c2051875e10a3035d76b257d0108c1bc3e6a7af6b50c8fa479cc657d2093a0aea48a4f4ff4b1f4e55061d0e79cdd78532d41e90cff64b04949e2a7eac6e73283856c823f7f64e0da1d2b7c18d324e68a5324c98a746b878a3b16ed4a2d5397846e2782637ab94906955e13466e82aa6ae830d187ed5f18814e4cc72e131feef3492fc0db7f390a8a4d791d3576c15993ae562581e21c786ff488c71f63d979dd5a13d2e393cb82de0c13e2ae59fe00e726157fbc05e78f416b5b2ed017e4ec84fa8ab900e7ce338d94daf5b5f33cc2904c30f38b0b7f1698b88681b5eb75c4c8e43cd860a720e06daa034383fcbdf4090c2259da4ff8b2b84dc7d62f698c264accd0a7d3d22d77100b663549007461d991e6c1c3c967a072e3a0a5bc7418301dfebb0e970ed1dabe7d11dcf9ad5477fc1e41d3157ef807be6e3442d370a4ed4b64e646cd53470d8ba5437fe86cbc2231b698d40a64cd78e117780a9d70539f473e765b34fece5fb0e01d094213b2aba09a1d7ee9e3f4b34376215cb30e7bf66823153cd8b7de6216bf5a416ed2e368dca2aac7fe8b0158e36993639e8fd0fc1665d3851a8a216af2aca9f93c3d30e5f765fc720bcf975e3202e228c9da74057977d87cb906b9d1944785d8b56accadefcd69602516caa320b270edfa91b98e7800f349561aa7bedc66f4384a937ad2588375ee4d295af324fef9429f983ba106fbe5486686205093c1252824fc47349a8be00d8dcf94890fcde296cb6439d7f9ba287e803a9c929208e91cc041f199f129e7c43f7e17334269959e45d7d655c1912cf19c9b67cb795b070b4b271f2555bef3aac72bcf17096524cb3c50df2ee537cf0db51594034f4d3cf60ba63210ddb2b86c11418d72d87c459b29d6b3614f2aea6d739ad8da03a44709f89087cf23a90c213c3c6727acf9664408550467ed4924ea47636cdc760ee6ab37c3765b4f3a2e5dfa8611aba60899f4268fd4b4541fe85fecc5189df3911629974b85dfeea9485f6a191e3a20e00eb3ebd559c0f71f8d44e05f2055f099cfa664bcea4c3dce26742b729317b2652d149c240c572d6c55588218ac39ff37e0a79c9e9822c71b7aa24d4e1561bceff0f53f08e8cc2e2444e1f55c03221de9c2978a0727c92429aeb489ff50344a19899e083605b97d2d02476c5f5f84de46ad199a03cce062e4eb0641954d201840323774d84d69f12566c77cf5a3df23709a6dcbb0b2b8bfcbf892d71db507e7f0f3f96a24d64f0e98c0507be21c4cf0ea593f487d4eb08090feffeb6ba2964838e61a7a9d7ed2330af0da748449f2cdf0794eb0c478361e851e2f4e14db4ef3ee19841c8a62bd99c696635bc8e5c28cc411dc07d93b744f729dd142e1785c1414edc9371242ed0204e62016497b35fa7a227c86cf3d3663a1e68cd0e1b704bf83fc6e3535b801b1105440fe4cdd85c35c5e6a51cc0a04bd2ade61281977de3ce260a98210a4129a9f9834a80720aaa842c8a5600cb6d899978569f8c0ff23d48ed7bd2843969fc9177204cf31be2d9b3f52d43182095e3cf21b5071c7528482d7894db2d5a4d2db482c518d61e6e1e13d695633bb0ce7f4d233f397117fb2ad050766d20588ab73e74978cd73af4810d00db33a5cbdc779f55dffce92165eb686889e171fd30f42ac829b9a52371bf25043324199c2d39127b4b805449c5357f2bbb59f90f25d6ded92d344e3182b9b2fe4252a4f9b3f705233a8a4e93abd3fd25f3ab2ba3a8a9f39df106c1bbb7c005b1de55abee165970f25235c7e71282e60bf2bd28a372b7f888c2def3dbe2e12a52f3431ab90073cdf6d4ec610f8838d5d5085fa25815e23a58acb2641b76a70530bf8f507f093bce2ff034dc741408ab6f5b47bb9ccadf727dc65c91815efbca4343c79138fd36df08c9e7762497092c953eef83eda37ca924b9d691d0052bc637f25ec4af86bed56ea7aa0a2c3a2d0d233a95f1c873a0c39b3294f9a339d9c6f9d916df9ceacd5219cd3781ea8fa62996f15ea3f163bf47c3dc95f2e17f5a4649f22a1e3ff35f32db2c330e8734f5c2488b70a8f03b4f9f7ee31aea924bfc3f25f87655249b229668069f1faebff1c8e284f49009ea9d831a2ae8ac0362ba89911a8b7006bbb1b9d39ca7c0fb104b4e6769782d891157088e99aa7a6703e18a8af6fef4ac155b09db7db42cb8bb11c2c294cbe93692acdd343c917acd385489e3a575e359ad0d0c176cdac9f9dcc7f5d1d430a37f5f397a303164cc9fc3bbbad337c83b8ef304fdeb3ad47811dd473b9136a71311541e3c2308beb55e70dccf133a4ba02439761a9f473b7e0fc3c341c0d0236905d920b858a9382c04d6be4987794b515f421d291a2abe94fbe082b732cc5d4049898c448256b05364b4439b46ea197f39e532e10cdae90b2b29acd2db152f845b6da7d207f3f2416c9558dc57bbc721677f7862deb86422d5cd1c4ca58328cedfebc9a73de4ddda043fbd0294263ab07c8189f35307140a11fedb1303729c78b10ad679d38d41db32aa354f718b73145ac223c2440efdf43f9c831d45d4f00e2a82f434371fcbe5bf726e10151549b59d3d97d007be7b351691257a7d9ed1299c03a09afd2e3e8671b9d289c437702ec9d8c02bcc66094bdf12b9c7ad80506bbe36fb8dc0ca3ea05af2f7aa3ed4415023851205110f79ce4d8746a1d762dca3b61673ceb741ab46f4a6c904014030a262319750a88d75ac301d722da4cf34d82c3ec48aef76bc4ff3e7aad60afa6d964d7068850e79dcd4fa7de0d8da267e0722a69e679ad36cc91056efd4c539d9df1b1a431689b1fe2e7b99927c16edad8fa51833139563a2076caf841615bc62b5b9ad3dd3647576c869ba5953f3f2ca3c243bd95ddfe909f5796c4515153d90dc7c104da1a6069bc900387c7ddaf234734f9a61a2b55ef980302bcbb915cc2a14995d295c4ac62f6aa5b14b50a509a553a03ab0a20ae06a8ea7d11ab685091ed7d54dbd8437a4ef2996bd0849e34c65093010d14eb576d0605fc0ad34ceac850c810940d70b74f6f75b7cb5ca4f0acd87e2c0625641b27a36f692113a474d463650c3128b3b820ba513bc9c9ad831f3aff19babc7821d5a057ffbd855656d0ab3db213cbfc5b3eece1d4b234c0ca20d7eea5bbc8b9dcd2f2b45c73cf41315d6923098c12daec6517c8ce398b0a4f892efa84bc29bbfb1de030539e329f5624f0cd1c2415d3e5408adf7ff66c6e2730cac4f45e1c03a14d8db7cad45903e1d720411571cd628b8f4351f163f203a34c1fc3a23e24595a857f85e5914c42992239be2c7fd405b1981cf5d4c78713c3e9b0a0052f4574128a0339a52b3df76dfca21d53a3e03b91efa7c8d82e42e392171cfe2abb79111797021d3dc0c79d56660bfdb63e3255da36b100cd2dde319bebabf9f754d77e6c76ab", 0x1000}], 0x1, 0x0, 0x1, {0x1}}, 0x9) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000eeb000/0x2000)=nil, 0x2000, 0x2000003, 0x40010, r0, 0x10000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x1000, 0x10041) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r11 = epoll_create(0x1ff) syz_io_uring_submit(0x0, r7, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0xff7, &(0x7f00000000c0)=[r8, r9, r10, r11, r4], 0x5}, 0x3f) [ 678.617851][ T2016] FAULT_INJECTION: forcing a failure. [ 678.617851][ T2016] name failslab, interval 1, probability 0, space 0, times 0 [ 678.630500][ T2016] CPU: 1 PID: 2016 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 678.639226][ T2016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.649374][ T2016] Call Trace: [ 678.652631][ T2016] dump_stack_lvl+0xd6/0x122 [ 678.657290][ T2016] dump_stack+0x11/0x1b [ 678.661442][ T2016] should_fail+0x23c/0x250 [ 678.665834][ T2016] ? kcalloc+0x32/0x40 [ 678.669884][ T2016] __should_failslab+0x81/0x90 [ 678.674648][ T2016] should_failslab+0x5/0x20 [ 678.679207][ T2016] __kmalloc+0x6f/0x350 [ 678.683353][ T2016] ? io_rsrc_data_alloc+0x298/0x3e0 [ 678.688631][ T2016] kcalloc+0x32/0x40 [ 678.692526][ T2016] io_sqe_buffers_register+0x180/0x920 [ 678.697994][ T2016] ? __fget_light+0xd0/0x260 [ 678.702565][ T2016] __do_sys_io_uring_register+0x513/0x21a0 [ 678.708354][ T2016] ? ksys_write+0x153/0x190 09:28:32 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index, 0x2, 0x0, 0x0, 0xa, 0x1, {0x3, r3}}, 0x8) [ 678.713008][ T2016] ? fpregs_assert_state_consistent+0x7d/0x90 [ 678.719129][ T2016] __x64_sys_io_uring_register+0x4f/0x60 [ 678.724864][ T2016] do_syscall_64+0x44/0xa0 [ 678.729286][ T2016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 678.735165][ T2016] RIP: 0033:0x7f66e1e64a39 [ 678.739554][ T2016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 678.759204][ T2016] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 678.767710][ T2016] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 678.775681][ T2016] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 678.783730][ T2016] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 678.791699][ T2016] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 [ 678.799689][ T2016] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:32 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x500000000000000, 0x0, 0x0) 09:28:32 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x6000000) 09:28:32 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 8) 09:28:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="cd624ab789d4b8ed473df614da5ccf054ae5c46c5ba32042c9048b6d38877b11c2ae7e40d2c0843ff8dc738ef41f7187348f0fdcbe85da3560cd14", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c0006000100000001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r4, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r4, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:32 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:32 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x60, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 679.072980][ T2044] FAULT_INJECTION: forcing a failure. [ 679.072980][ T2044] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 679.086246][ T2044] CPU: 1 PID: 2044 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 679.094909][ T2044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.105000][ T2044] Call Trace: [ 679.108264][ T2044] dump_stack_lvl+0xd6/0x122 [ 679.112837][ T2044] dump_stack+0x11/0x1b [ 679.117011][ T2044] should_fail+0x23c/0x250 [ 679.121421][ T2044] __alloc_pages+0x102/0x320 [ 679.126042][ T2044] kmem_getpages+0x1a/0xd0 [ 679.130525][ T2044] cache_grow_begin+0x4c/0x1a0 [ 679.135269][ T2044] cache_alloc_refill+0x326/0x3d0 [ 679.140279][ T2044] ? should_fail+0xd6/0x250 [ 679.144855][ T2044] ? kcalloc+0x32/0x40 [ 679.148902][ T2044] __kmalloc+0x2c6/0x350 [ 679.153122][ T2044] ? kcalloc+0x32/0x40 [ 679.157316][ T2044] kcalloc+0x32/0x40 [ 679.161202][ T2044] io_sqe_buffers_register+0x180/0x920 [ 679.166647][ T2044] ? __fget_light+0xd0/0x260 [ 679.171298][ T2044] __do_sys_io_uring_register+0x513/0x21a0 [ 679.177119][ T2044] ? ksys_write+0x153/0x190 [ 679.181632][ T2044] ? fpregs_assert_state_consistent+0x7d/0x90 [ 679.187677][ T2044] __x64_sys_io_uring_register+0x4f/0x60 [ 679.193300][ T2044] do_syscall_64+0x44/0xa0 [ 679.197698][ T2044] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 679.203696][ T2044] RIP: 0033:0x7f66e1e64a39 09:28:32 executing program 2: r0 = syz_io_uring_setup(0x6008, &(0x7f00000002c0)={0x0, 0x80000000, 0x1, 0x400000, 0x3d2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x4010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x1}, 0x6) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:33 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 679.208093][ T2044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 679.227735][ T2044] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 679.236219][ T2044] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 679.244188][ T2044] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 679.252153][ T2044] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 679.260111][ T2044] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 09:28:33 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 9) [ 679.268079][ T2044] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 679.296385][ T2056] FAULT_INJECTION: forcing a failure. [ 679.296385][ T2056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.309439][ T2056] CPU: 1 PID: 2056 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 679.318128][ T2056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.328165][ T2056] Call Trace: [ 679.331424][ T2056] dump_stack_lvl+0xd6/0x122 [ 679.336000][ T2056] dump_stack+0x11/0x1b [ 679.340223][ T2056] should_fail+0x23c/0x250 [ 679.344616][ T2056] should_fail_usercopy+0x16/0x20 [ 679.349620][ T2056] _copy_from_user+0x1c/0xd0 [ 679.354236][ T2056] io_sqe_buffers_register+0x219/0x920 [ 679.359729][ T2056] __do_sys_io_uring_register+0x513/0x21a0 [ 679.365593][ T2056] ? ksys_write+0x153/0x190 [ 679.370096][ T2056] ? fpregs_assert_state_consistent+0x7d/0x90 [ 679.376147][ T2056] __x64_sys_io_uring_register+0x4f/0x60 [ 679.381800][ T2056] do_syscall_64+0x44/0xa0 [ 679.386933][ T2056] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 679.392815][ T2056] RIP: 0033:0x7f66e1e64a39 [ 679.397211][ T2056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 679.416874][ T2056] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 679.425280][ T2056] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 679.433242][ T2056] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:33 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x7c65}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:33 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 10) [ 679.441190][ T2056] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 679.449172][ T2056] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000001 [ 679.457121][ T2056] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:33 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) [ 679.506189][ T2060] FAULT_INJECTION: forcing a failure. [ 679.506189][ T2060] name failslab, interval 1, probability 0, space 0, times 0 [ 679.518899][ T2060] CPU: 0 PID: 2060 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 679.527563][ T2060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.537608][ T2060] Call Trace: [ 679.541483][ T2060] dump_stack_lvl+0xd6/0x122 [ 679.546200][ T2060] dump_stack+0x11/0x1b [ 679.550383][ T2060] should_fail+0x23c/0x250 [ 679.554806][ T2060] __should_failslab+0x81/0x90 [ 679.559560][ T2060] should_failslab+0x5/0x20 [ 679.564048][ T2060] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 679.569784][ T2060] ? __kmalloc_node+0x30/0x40 [ 679.574532][ T2060] __kmalloc_node+0x30/0x40 [ 679.579029][ T2060] kvmalloc_node+0x81/0x110 [ 679.583520][ T2060] io_sqe_buffer_register+0xcc/0xbb0 [ 679.588824][ T2060] ? should_fail+0xd6/0x250 [ 679.593402][ T2060] ? should_fail+0xd6/0x250 [ 679.597894][ T2060] io_sqe_buffers_register+0x37c/0x920 [ 679.603402][ T2060] __do_sys_io_uring_register+0x513/0x21a0 [ 679.609221][ T2060] ? ksys_write+0x153/0x190 [ 679.613731][ T2060] ? fpregs_assert_state_consistent+0x7d/0x90 [ 679.619884][ T2060] __x64_sys_io_uring_register+0x4f/0x60 [ 679.625507][ T2060] do_syscall_64+0x44/0xa0 [ 679.629931][ T2060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 679.635825][ T2060] RIP: 0033:0x7f66e1e64a39 [ 679.640240][ T2060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 679.659828][ T2060] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 679.668233][ T2060] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 679.676191][ T2060] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 679.684152][ T2060] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 679.692103][ T2060] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 679.700060][ T2060] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:33 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0xffffffff, 0x2ea000) io_uring_enter(r3, 0x542f, 0xc137, 0x2, &(0x7f00000002c0), 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:33 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x6040000) 09:28:33 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x600000000000000, 0x0, 0x0) 09:28:33 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 11) 09:28:33 executing program 2: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = syz_io_uring_setup(0x58c7, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x3, 0x6e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:33 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x61, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:33 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x108000) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/211, 0xd3}], 0x1) [ 679.978188][ T2078] FAULT_INJECTION: forcing a failure. [ 679.978188][ T2078] name failslab, interval 1, probability 0, space 0, times 0 [ 679.990862][ T2078] CPU: 0 PID: 2078 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 679.999531][ T2078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.009581][ T2078] Call Trace: [ 680.013044][ T2078] dump_stack_lvl+0xd6/0x122 [ 680.017655][ T2078] dump_stack+0x11/0x1b [ 680.021819][ T2078] should_fail+0x23c/0x250 09:28:33 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 680.026238][ T2078] __should_failslab+0x81/0x90 [ 680.031013][ T2078] should_failslab+0x5/0x20 [ 680.035509][ T2078] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 680.041236][ T2078] ? __kmalloc_node+0x30/0x40 [ 680.045909][ T2078] __kmalloc_node+0x30/0x40 [ 680.050445][ T2078] kvmalloc_node+0x81/0x110 [ 680.054976][ T2078] io_sqe_buffer_register+0xf8/0xbb0 [ 680.060259][ T2078] ? should_fail+0xd6/0x250 [ 680.064755][ T2078] ? should_fail+0xd6/0x250 [ 680.069258][ T2078] io_sqe_buffers_register+0x37c/0x920 [ 680.074754][ T2078] __do_sys_io_uring_register+0x513/0x21a0 [ 680.080635][ T2078] ? ksys_write+0x153/0x190 [ 680.085170][ T2078] ? fpregs_assert_state_consistent+0x7d/0x90 [ 680.091219][ T2078] __x64_sys_io_uring_register+0x4f/0x60 [ 680.096834][ T2078] do_syscall_64+0x44/0xa0 [ 680.101327][ T2078] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 680.107289][ T2078] RIP: 0033:0x7f66e1e64a39 [ 680.111695][ T2078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 680.131431][ T2078] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 680.139938][ T2078] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 680.147895][ T2078] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 680.155858][ T2078] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.163824][ T2078] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 09:28:33 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_io_uring_setup(0x1159, &(0x7f0000000000)={0x0, 0x8b71, 0x2, 0x3, 0x2ab, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_submit(r3, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x80340, 0x175, 0x19}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) syz_io_uring_setup(0x4f2a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x20) syz_io_uring_submit(r6, r5, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r9}}, 0xf975) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r11, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c71, &(0x7f00000003c0)={0x0, 0xff99, 0x0, 0x1, 0x161, 0x0, r11}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 09:28:33 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 12) [ 680.171813][ T2078] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 680.203176][ T2098] FAULT_INJECTION: forcing a failure. [ 680.203176][ T2098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.216376][ T2098] CPU: 1 PID: 2098 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 680.225124][ T2098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.235173][ T2098] Call Trace: [ 680.238509][ T2098] dump_stack_lvl+0xd6/0x122 [ 680.243208][ T2098] dump_stack+0x11/0x1b [ 680.247377][ T2098] should_fail+0x23c/0x250 [ 680.251838][ T2098] should_fail_usercopy+0x16/0x20 [ 680.256850][ T2098] _copy_from_user+0x1c/0xd0 [ 680.261511][ T2098] io_sqe_buffers_register+0x219/0x920 [ 680.266957][ T2098] __do_sys_io_uring_register+0x513/0x21a0 [ 680.272793][ T2098] ? ksys_write+0x153/0x190 [ 680.277323][ T2098] ? fpregs_assert_state_consistent+0x7d/0x90 [ 680.283412][ T2098] __x64_sys_io_uring_register+0x4f/0x60 [ 680.289059][ T2098] do_syscall_64+0x44/0xa0 [ 680.293458][ T2098] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 680.299336][ T2098] RIP: 0033:0x7f66e1e64a39 [ 680.303809][ T2098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 680.323394][ T2098] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 680.331783][ T2098] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 680.339745][ T2098] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:34 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 13) [ 680.347699][ T2098] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.355756][ T2098] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 680.363729][ T2098] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:34 executing program 2: r0 = syz_io_uring_setup(0x200182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x128}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r6, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = socket(0x28, 0x1, 0x3) syz_io_uring_setup(0x1a87, &(0x7f00000009c0)={0x0, 0xf1eb, 0x42, 0x0, 0x4070}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000a40), &(0x7f0000001140)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x4, 0xe6, 0x8, 0x7ff, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x7fc0, 0xffffb2ed, 0xffffffff}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001100)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={&(0x7f0000000c80)=@xdp={0x2c, 0x3, r8, 0x3c}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d00)="caa98ac7e74e7287c27ca250047a2e79e4b1f3d710b90bd8083357652753a9cd0d9f9aca2ff223a71f6632b24da8d31390220ffd2b554d8fe0c22851532b912082b53c9a18c91b585f2aedd6430feb8e53b630c2b0e4ba5db737834c36376d154201de292ea7e56c0f81c4de1955144f4e37a85512e2020cf91acba8c3", 0x7d}, {&(0x7f0000000d80)="c35b5be40bf21f8b5f111ef4828f374955e41c5b9994f96c0be6b79b8a35c898652b8313cc9d69ea664638ae84252003c7dd800c6836f81cac6118bb85aabef4a6adf3e9a9f13f072176617c349d7ce839a642075ab73522e02d2b190c387a8c0d76414dec11d2f01a31c5d3ab439d530dbdefc624de12ddb1ab6ac4a9a200fc24d240b0886781442d5fd3f91cb499a09d10cda63b7d03c1aac7a86015b4fd26d444d2de12d864d6e4e9f680edfb09f552404b739aa5741dad2b5138869f86950ad01b215b7f68903b106097c088e1", 0xcf}, {&(0x7f0000000e80)="cca0e31b567bb99b5e09eaf3e18fb3eaed958d54516a904f4d9a7a35baf3dafda223d7ba5edfb7b44c2a70663c9741ae0cfc671d1ff47605b857ca78a1021468e83a59bf10fb3554f2cf9a1ee90baf25685f5a2e394caae3f34568baa88b424b0959a2a7f597b2cea97b7228f26dc619bfdc62200d006e3e28b4344e267bd1b2cc6c918f6c624e8e01580526a6ec13ae5c79e3be77cf64063acc25990efa4543cd3d7e323ad4f7e9bc83d50aa1e88563ce8a0ceed11eeaafbf88785f6731f7ac31c177718fed9880048efb41b4bf678d9dd91f9c187b28d7fda15ecc949e521082ef461e61ce0d9ac97d612744757e", 0xef}, {&(0x7f0000000f80)="a0f045b668e664ee1bcccee92a49e93badb24af09453b3bc7f8005ab4217b7b3ee55a318f85bec6283186cc540a6c1fe4f", 0x31}, {&(0x7f0000000fc0)="9ee7b575ed2402c89374c8d216fb627d46e96799d34479ccba51ac3752b5ad00b69f560c825c9924b75003010475186f25222a35df85ac3dc2dfe71943148bf0832d30297dd6d0ea8c217538018713041976acc2d0877741a46f", 0x5a}], 0x5}, 0x0, 0x800, 0x1}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="bba0d8d91f9598be540f2ef2c27cc5a6bc14630fabc00627e0251c841a26ab7d1c721111d392d21e6da460164c65e4cfb396e0d6b1ca74dc2d38eb0d82e29cdda7caa42a0620", 0x46}, {&(0x7f0000000ac0)="7c8fb578c98205dff628dba4163b9441f39fd7781c8db7b5913c24355699346f609991dec05968228da215eb4174dd7b4c87e4f282197ecd01c05de44cc10770b74ba6debd2776eaf4b2c6f434c7e07d3c020e7c33aec10ccde736bb8bdfd21ed6714da109d550bf97a3059c099be39932b37b328614dc808115ad93378cd5f796e5fff622f38460676f28ea642bdf1e05c8e875e15a5d5b6d89925fd54070acf43d8632508787b1e89da6b6d80800000000000000793ff5df8e31a35f465c5303b07b789ffceab8cfff2ddce170371f221623f996fe7796e37d21f59bbb5042636e5ab7087f88f3ea19da7771c3e2508f5742b5d78fc84f868bebcfffcfa75271dcb6e3bbbe8b4ead4044fddf790e3c38b1220403540f1260cb", 0x11a}, {&(0x7f0000000380)="3271ca93b5dd56d022aaa198908fe828125fcaa3c669e9e056bf49cff5aac0555ad6172b6ace2a8e6161e0767cd6499e5e67d66fd78f5c98de3bcc325432f7455f56146231c1438b624cccd5890ce1806a045078e4fe170be7ec81", 0x5b}, {&(0x7f0000000280)}, {&(0x7f0000000400)="18f188519b4f7a745aa8b55de3ea30f609a10e9c761981c6f228887fa7742eec11d0e299730b852a51d3b0a0cb1b7f4a61bd6cb2af4abaf57cea4b385865f91dd80f9257f2df950268bf58cfd03bbc196319fef013e9e876b354420d037682148215e01ad761876183907c3680fcf86e652c13b07d5b1fa9313c039df6c513fea4d22660f420d7d0960398824d5fda17", 0x90}], 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x400}, 0x0, 0x8882, 0x1}, 0x5) faccessat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="10e0ffff160149004b2f66696c654b007636f492b5f45f0154b9610568e3210006801d4bda623b2dba"], 0x10) 09:28:34 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000400)={'wg0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x6a97, &(0x7f0000000280)={0x0, 0x187, 0x0, 0x0, 0x1a7, 0x0, r0}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0xa, 0x2, 0x80, 0x6, 0x8, 0x0, {0x1}}, 0xfbd) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) [ 680.413518][ T2103] FAULT_INJECTION: forcing a failure. [ 680.413518][ T2103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.426568][ T2103] CPU: 1 PID: 2103 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 680.435243][ T2103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.445346][ T2103] Call Trace: [ 680.448625][ T2103] dump_stack_lvl+0xd6/0x122 [ 680.453226][ T2103] dump_stack+0x11/0x1b [ 680.457378][ T2103] should_fail+0x23c/0x250 [ 680.461795][ T2103] should_fail_usercopy+0x16/0x20 [ 680.466823][ T2103] _copy_from_user+0x1c/0xd0 [ 680.471423][ T2103] io_sqe_buffers_register+0x219/0x920 [ 680.476904][ T2103] __do_sys_io_uring_register+0x513/0x21a0 [ 680.482750][ T2103] ? ksys_write+0x153/0x190 [ 680.483114][ T22] audit: type=1400 audit(1634549314.181:3482): avc: denied { create } for pid=2104 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 680.487254][ T2103] ? fpregs_assert_state_consistent+0x7d/0x90 [ 680.487278][ T2103] __x64_sys_io_uring_register+0x4f/0x60 [ 680.487298][ T2103] do_syscall_64+0x44/0xa0 [ 680.523205][ T2103] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 680.529101][ T2103] RIP: 0033:0x7f66e1e64a39 [ 680.533505][ T2103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 680.553318][ T2103] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 680.561824][ T2103] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 680.569784][ T2103] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 680.577770][ T2103] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.585771][ T2103] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 680.593768][ T2103] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:34 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x7000000) 09:28:34 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xde}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:34 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x62, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:34 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x604000000000000, 0x0, 0x0) 09:28:34 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 14) 09:28:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r1 = syz_io_uring_setup(0x17d, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0xfffffffb}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x10000, 0x1, 0x6}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000200)=""/26, 0x1a}], 0x2) [ 680.880479][ T2125] FAULT_INJECTION: forcing a failure. [ 680.880479][ T2125] name failslab, interval 1, probability 0, space 0, times 0 [ 680.893656][ T2125] CPU: 1 PID: 2125 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 680.902606][ T2125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.912692][ T2125] Call Trace: [ 680.915996][ T2125] dump_stack_lvl+0xd6/0x122 [ 680.920579][ T2125] dump_stack+0x11/0x1b [ 680.924763][ T2125] should_fail+0x23c/0x250 [ 680.929166][ T2125] __should_failslab+0x81/0x90 [ 680.933911][ T2125] should_failslab+0x5/0x20 [ 680.938463][ T2125] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 680.944164][ T2125] ? __kmalloc_node+0x30/0x40 [ 680.948832][ T2125] __kmalloc_node+0x30/0x40 [ 680.953351][ T2125] kvmalloc_node+0x81/0x110 [ 680.957863][ T2125] io_sqe_buffer_register+0xcc/0xbb0 [ 680.963232][ T2125] ? should_fail+0xd6/0x250 [ 680.967850][ T2125] io_sqe_buffers_register+0x37c/0x920 [ 680.973537][ T2125] __do_sys_io_uring_register+0x513/0x21a0 [ 680.979329][ T2125] ? ksys_write+0x153/0x190 [ 680.983847][ T2125] ? fpregs_assert_state_consistent+0x7d/0x90 [ 680.990163][ T2125] __x64_sys_io_uring_register+0x4f/0x60 [ 680.995841][ T2125] do_syscall_64+0x44/0xa0 [ 681.000318][ T2125] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.006311][ T2125] RIP: 0033:0x7f66e1e64a39 [ 681.010770][ T2125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:28:34 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:34 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 15) [ 681.030366][ T2125] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 681.038825][ T2125] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 681.046802][ T2125] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 681.054797][ T2125] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.062851][ T2125] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 681.070836][ T2125] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 681.107866][ T2139] FAULT_INJECTION: forcing a failure. [ 681.107866][ T2139] name failslab, interval 1, probability 0, space 0, times 0 [ 681.120734][ T2139] CPU: 1 PID: 2139 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 681.129472][ T2139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.139735][ T2139] Call Trace: [ 681.143003][ T2139] dump_stack_lvl+0xd6/0x122 [ 681.147577][ T2139] dump_stack+0x11/0x1b [ 681.151834][ T2139] should_fail+0x23c/0x250 [ 681.156288][ T2139] __should_failslab+0x81/0x90 [ 681.161045][ T2139] should_failslab+0x5/0x20 [ 681.165535][ T2139] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 681.171239][ T2139] ? __kmalloc_node+0x30/0x40 [ 681.175956][ T2139] __kmalloc_node+0x30/0x40 [ 681.180452][ T2139] kvmalloc_node+0x81/0x110 [ 681.185285][ T2139] io_sqe_buffer_register+0xf8/0xbb0 [ 681.190665][ T2139] ? should_fail+0xd6/0x250 [ 681.195234][ T2139] io_sqe_buffers_register+0x37c/0x920 [ 681.200756][ T2139] __do_sys_io_uring_register+0x513/0x21a0 [ 681.206554][ T2139] ? ksys_write+0x153/0x190 [ 681.211142][ T2139] ? fpregs_assert_state_consistent+0x7d/0x90 [ 681.217524][ T2139] __x64_sys_io_uring_register+0x4f/0x60 [ 681.223232][ T2139] do_syscall_64+0x44/0xa0 [ 681.227657][ T2139] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.234021][ T2139] RIP: 0033:0x7f66e1e64a39 [ 681.238423][ T2139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 09:28:35 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 16) [ 681.258188][ T2139] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 681.266629][ T2139] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 681.274585][ T2139] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 681.282566][ T2139] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.290532][ T2139] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 681.298487][ T2139] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 681.324064][ T2144] FAULT_INJECTION: forcing a failure. [ 681.324064][ T2144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.337280][ T2144] CPU: 0 PID: 2144 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 681.345957][ T2144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.355994][ T2144] Call Trace: [ 681.359257][ T2144] dump_stack_lvl+0xd6/0x122 [ 681.363831][ T2144] dump_stack+0x11/0x1b [ 681.368000][ T2144] should_fail+0x23c/0x250 [ 681.372403][ T2144] should_fail_usercopy+0x16/0x20 [ 681.377410][ T2144] _copy_from_user+0x1c/0xd0 [ 681.381991][ T2144] io_sqe_buffers_register+0x219/0x920 [ 681.387453][ T2144] __do_sys_io_uring_register+0x513/0x21a0 [ 681.393250][ T2144] ? ksys_write+0x153/0x190 [ 681.397839][ T2144] ? fpregs_assert_state_consistent+0x7d/0x90 [ 681.403888][ T2144] __x64_sys_io_uring_register+0x4f/0x60 [ 681.409513][ T2144] do_syscall_64+0x44/0xa0 [ 681.413918][ T2144] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.419803][ T2144] RIP: 0033:0x7f66e1e64a39 [ 681.424215][ T2144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.444237][ T2144] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 681.452640][ T2144] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 681.460603][ T2144] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:35 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x63, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:35 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x180, &(0x7f0000000080)={0x0, 0x2, 0x20, 0x0, 0x75, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:35 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 17) [ 681.468552][ T2144] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.476516][ T2144] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 681.484508][ T2144] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 681.541460][ T2151] FAULT_INJECTION: forcing a failure. [ 681.541460][ T2151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.554638][ T2151] CPU: 0 PID: 2151 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 681.563380][ T2151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.573434][ T2151] Call Trace: [ 681.576709][ T2151] dump_stack_lvl+0xd6/0x122 [ 681.581356][ T2151] dump_stack+0x11/0x1b [ 681.585551][ T2151] should_fail+0x23c/0x250 [ 681.589964][ T2151] should_fail_usercopy+0x16/0x20 [ 681.595151][ T2151] _copy_from_user+0x1c/0xd0 [ 681.599902][ T2151] io_sqe_buffers_register+0x219/0x920 [ 681.605348][ T2151] __do_sys_io_uring_register+0x513/0x21a0 [ 681.611157][ T2151] ? ksys_write+0x153/0x190 [ 681.615661][ T2151] ? fpregs_assert_state_consistent+0x7d/0x90 [ 681.621766][ T2151] __x64_sys_io_uring_register+0x4f/0x60 [ 681.627383][ T2151] do_syscall_64+0x44/0xa0 [ 681.631827][ T2151] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.637707][ T2151] RIP: 0033:0x7f66e1e64a39 [ 681.642100][ T2151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.661752][ T2151] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 681.670148][ T2151] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 681.678104][ T2151] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 681.686059][ T2151] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.694013][ T2151] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 681.701978][ T2151] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:35 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x8000000) 09:28:35 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4007, @fd_index, 0x400, 0x0, 0x0, 0x2}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x2611, 0x92a8, 0x3, &(0x7f0000000280)={[0x81]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:35 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 18) 09:28:35 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x700000000000000, 0x0, 0x0) [ 681.794815][ T2161] FAULT_INJECTION: forcing a failure. [ 681.794815][ T2161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.808417][ T2161] CPU: 1 PID: 2161 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 681.817096][ T2161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.827250][ T2161] Call Trace: [ 681.830591][ T2161] dump_stack_lvl+0xd6/0x122 [ 681.835337][ T2161] dump_stack+0x11/0x1b [ 681.839498][ T2161] should_fail+0x23c/0x250 [ 681.843980][ T2161] should_fail_usercopy+0x16/0x20 [ 681.849068][ T2161] _copy_from_user+0x1c/0xd0 [ 681.853721][ T2161] io_sqe_buffers_register+0x219/0x920 [ 681.859160][ T2161] __do_sys_io_uring_register+0x513/0x21a0 [ 681.864943][ T2161] ? ksys_write+0x153/0x190 [ 681.869427][ T2161] ? fpregs_assert_state_consistent+0x7d/0x90 [ 681.875490][ T2161] __x64_sys_io_uring_register+0x4f/0x60 [ 681.881101][ T2161] do_syscall_64+0x44/0xa0 [ 681.885499][ T2161] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.891390][ T2161] RIP: 0033:0x7f66e1e64a39 [ 681.895854][ T2161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.915732][ T2161] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 681.924213][ T2161] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 681.932299][ T2161] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:35 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/185, 0xb9}, {&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000380)=""/125, 0x7d}], 0x4) 09:28:35 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x64, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:35 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 19) [ 681.940586][ T2161] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.948545][ T2161] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 681.956519][ T2161] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:35 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="15afb5ae672563b41821a82e31991d5f39f643867075d1134fd7099148efdbf07bf268008c6c4f35", 0x28}, {&(0x7f0000000180)="f4887e34a1277b03dcb90584823dae70bceafdf86e9a93bf31692bd002b5ce4d7ba5cf8e554242348696740277dc7600d9128d43639a5e74ea7d16b612e307f77c05ed", 0x43}, {&(0x7f00000000c0)="b2a210428515efab1f5a6cbb1aa8b8b6856714874dded7708a4d1021b5d3242a60d4449094abbb74ac2a0a52e8d367e931bf327cd4", 0x35}], 0x3, 0x0, 0x0, 0x80}, 0x40000) r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 681.990621][ T2173] FAULT_INJECTION: forcing a failure. [ 681.990621][ T2173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.003676][ T2173] CPU: 1 PID: 2173 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 682.012330][ T2173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.022378][ T2173] Call Trace: [ 682.025908][ T2173] dump_stack_lvl+0xd6/0x122 [ 682.030516][ T2173] dump_stack+0x11/0x1b [ 682.034914][ T2173] should_fail+0x23c/0x250 [ 682.039342][ T2173] should_fail_usercopy+0x16/0x20 [ 682.044405][ T2173] _copy_from_user+0x1c/0xd0 [ 682.049023][ T2173] io_sqe_buffers_register+0x219/0x920 [ 682.054597][ T2173] __do_sys_io_uring_register+0x513/0x21a0 [ 682.060431][ T2173] ? ksys_write+0x153/0x190 [ 682.064915][ T2173] ? fpregs_assert_state_consistent+0x7d/0x90 [ 682.071109][ T2173] __x64_sys_io_uring_register+0x4f/0x60 [ 682.076739][ T2173] do_syscall_64+0x44/0xa0 [ 682.081211][ T2173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 682.087088][ T2173] RIP: 0033:0x7f66e1e64a39 [ 682.091568][ T2173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.111389][ T2173] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 682.119824][ T2173] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 682.127885][ T2173] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:35 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x3, &(0x7f0000000080)="ca18b5daa016a745023ef00ec268b51d2327557c9bc50281171170235d3f6d1d5310a406716aa36f6212b706ba56e1367489491c8da938a0bebaa663d1bb0acdfe5f9dc059b5e3fcc88482667dc3", 0x3, 0x0, 0x1}, 0x7) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x10, r0, 0x8000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x3, 0x800, 0x1eb2, 0xfc, 0x3}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:35 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 20) 09:28:35 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r4, r2, &(0x7f0000001880)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001800)=@x25, 0x0, 0x0, 0x0, {0x0, r7}}, 0xcf) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000001680)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r0, 0x83aa, &(0x7f0000001600)=[{&(0x7f0000000180)="b005b2d102e2967e89de3fff68f41c8815011d19b797ba2028e3bca540bbf2375565d155a85a61fbc68b7960eff54f1700172539c47ad63636648af741174129c00c1d796160c6df1a00dc0695c7882f82f184f20915bb432c8d730581ed33c4cff7fb8a9e1aaac90283f0b7e445874d32ea24ef7a35b1b3dea522f24e561a801a0456282de123179cf7410286474bda6b0455126af659948a44738a1bfa8849446e6f660b7db5f4b25d7e", 0xab}, {&(0x7f0000000380)="4fc982c35c08cfc5c7db7ebd9499a169f01c63eb3186e3ba50d186210de7cad7df716e621efa91998460d431612490ac3ae371c273cd541711a20a70392f395ec34d5fd40857988ce1a27ca300e23cbce25b00a6afeead32c62e6ebe078a6b8d25d0ffaccd6f25e857903571301365d43016888559590201a23ced61b58bae9a4cb4e66c44d85800cfed384d81e6327c74e77656ad28583638574fb9c3d956d923f79d598536796b0f9b76d19124e94c1aaa762e3976b5af10731e", 0xbb}, {&(0x7f0000000240)="ff6dfc8b0763264a62f1ee6ac4bddebd41c413f111adbf106a0e6b527817dc82448edfcc70acd2cd90601686dfc895000c2fd7a8c218ba59d88a94fdc68361c0d6da7458e96bb100777a00e755e9b82000e4df1d52be8a76599cc06e4321d98825d93fb8740c20cbabcb3577afc6983e323713abfef35a8b", 0x78}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="6d09b193d54ddaf95f4091fd7e37166c51988370e0d2daa0f6761c9dd408f0f25ac7a1539c3913d3aab806033427cad950ec179212389d78a964b3b415e9d5e03dab481e62cf05e9296ecdc046994293e0188e7bc0cb22e610dcb51426dc63c341925d65835fdc8aa2fa1079e8768be68ef5beb89fc006e5b7b0e374a5cde802a7cf20936647076a0c0f1ecf642ebca37df3762f5cb74369d71c58cc90ec71e16fe685c66fa9f0f2cbae23f0fd257e4df70de3d835f12a6c36cac799", 0xbc}, {&(0x7f00000000c0)="af8ed672eda1b7d46e08171f1e0a91c9641fdd473fa1f0f5a7eb7aa303ddc3dbe98bb01d0b571a156ca35b956ad515daec0a5496de5e", 0x36}, {&(0x7f0000001500)="80969acb1a9118418c1d6de37553582e612b1204138d894b8b7a16aae378e0f982586e30ce02bdc37f50bd73dedd4089237ae4495f6badfcd6d8d5e2decb84e5adf989b63ef73a95d6b698c73a4f6eaf59ee68c5b27daf643efa44bf2927f4ab3074442c5ecf04d91d04b1d2f13c0a3be4f2c163e7da84f817da626346af537745e29f20249f9585889dd157fe862acbe02918aca4fe9a020e08fcd4ff725bef6eef0b9e714990da4a1ced853b50647b64f2b092478445954a682907d9e79df469146e2f28f059fffea1e5b471380fa265529b94992330205081", 0xda}], 0x7, 0x18, 0x0, {0x3}}, 0x2) ppoll(&(0x7f0000000000)=[{r0, 0x230c}, {r0, 0x100}], 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x5]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000019c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index, 0x0, 0x0, 0x7}, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee9000/0x4000)=nil, 0x4000, 0xc, 0x4000050, r3, 0x8000000) syz_io_uring_setup(0x1dfa, &(0x7f00000016c0)={0x0, 0x1cc4, 0x0, 0x1, 0x339, 0x0, r3}, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001740), &(0x7f0000001780)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000017c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x7) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 682.135841][ T2173] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.143802][ T2173] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 682.151768][ T2173] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 682.198232][ T2183] FAULT_INJECTION: forcing a failure. [ 682.198232][ T2183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.211339][ T2183] CPU: 0 PID: 2183 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 682.220167][ T2183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.230312][ T2183] Call Trace: [ 682.233571][ T2183] dump_stack_lvl+0xd6/0x122 [ 682.238148][ T2183] dump_stack+0x11/0x1b [ 682.242324][ T2183] should_fail+0x23c/0x250 [ 682.246737][ T2183] should_fail_usercopy+0x16/0x20 [ 682.251750][ T2183] _copy_from_user+0x1c/0xd0 [ 682.256362][ T2183] io_sqe_buffers_register+0x219/0x920 [ 682.261977][ T2183] __do_sys_io_uring_register+0x513/0x21a0 [ 682.267786][ T2183] ? ksys_write+0x153/0x190 [ 682.272345][ T2183] ? fpregs_assert_state_consistent+0x7d/0x90 [ 682.278396][ T2183] __x64_sys_io_uring_register+0x4f/0x60 [ 682.284043][ T2183] do_syscall_64+0x44/0xa0 [ 682.288472][ T2183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 682.294361][ T2183] RIP: 0033:0x7f66e1e64a39 [ 682.298869][ T2183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.318544][ T2183] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 682.326947][ T2183] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 682.334913][ T2183] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:36 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x6c7ee24c, 0x0, &(0x7f0000000000)="7ef52ad5eddc0d7abba9febe86fccbf35de536f8f221f32f0512ac0091fbe58ead8f5f1ec0a8a8ff2ce4ef92f449769b52a1d97e7dff525ea365f4ed40d3c80034699a68eeaef96fd47a9d61fe5ff7867f1ed26d57a616686118da696f626672aa541e3fe80ee6106b39a380a4ed0c369d849fdf89520b1011a3ef35ca671118c59110263d27c97720d8f32e5cefdf6760706ce11da8ebc24e7e86ac4cf9e23eaad1bbbf5081b4f2cc6ee2e26e3bdae915a0c18ae4f050c2b910f868ecd0d8", 0x7f, 0x0, 0x0, {0x1, r7}}, 0x7f) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r9, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x100010, r9, 0x8000000) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 682.342877][ T2183] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.350844][ T2183] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 682.358909][ T2183] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:36 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x9000000) 09:28:36 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x5eae095a386dbac8, 0x0, @fd=r3, 0x6, {0x0, r4}, 0x6, 0xb, 0x1, {0x0, 0x0, r5}}, 0x3) 09:28:36 executing program 0: r0 = syz_io_uring_setup(0x54dd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:36 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x800000000000000, 0x0, 0x0) 09:28:36 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 21) 09:28:36 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x65, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 682.719130][ T2203] FAULT_INJECTION: forcing a failure. [ 682.719130][ T2203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.732304][ T2203] CPU: 1 PID: 2203 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 682.741260][ T2203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.751308][ T2203] Call Trace: [ 682.754581][ T2203] dump_stack_lvl+0xd6/0x122 [ 682.759156][ T2203] dump_stack+0x11/0x1b [ 682.763324][ T2203] should_fail+0x23c/0x250 [ 682.767733][ T2203] should_fail_usercopy+0x16/0x20 [ 682.772736][ T2203] _copy_from_user+0x1c/0xd0 [ 682.777322][ T2203] io_sqe_buffers_register+0x219/0x920 [ 682.782802][ T2203] __do_sys_io_uring_register+0x513/0x21a0 [ 682.788656][ T2203] ? ksys_write+0x153/0x190 [ 682.793157][ T2203] ? fpregs_assert_state_consistent+0x7d/0x90 [ 682.799216][ T2203] __x64_sys_io_uring_register+0x4f/0x60 [ 682.804862][ T2203] do_syscall_64+0x44/0xa0 [ 682.809284][ T2203] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 682.815181][ T2203] RIP: 0033:0x7f66e1e64a39 [ 682.819570][ T2203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.839206][ T2203] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 682.847613][ T2203] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 682.855562][ T2203] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:36 executing program 2: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x9a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6dd}, 0x4) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x6053, &(0x7f0000000080)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x11, 0x14ac000, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x4}, 0x0, {0x0, r4}}, 0x7) 09:28:36 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 22) [ 682.863574][ T2203] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.871539][ T2203] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 682.879574][ T2203] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:36 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xa, 0x110, r0, 0x10000000) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0xf7) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) write$binfmt_elf32(r3, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x0, 0x7f, 0x81, 0x7, 0x3, 0x3e, 0x2, 0x3db, 0x38, 0x1e8, 0xd92a, 0x3f, 0x20, 0x1, 0xe55, 0x8000, 0x9}, [{0x6, 0x400, 0x2, 0xffff, 0x4, 0x3, 0xe3, 0xc8}], "e100c68c7b4a6e8541333904266bd40a6a61879bb034f06780032bac595850a5a1f4427a9d88135843fe2384e8c3132c2dfda4aeb77bd4010c624ff8e32ea2b488a1679761148fc3ad37ef6ec670535fb745efb1839e44bb38634ae478ba1d7cf118ec3322ef681c1f119538b3938d6ca534dca3ac21639ff0adaeb5cc", ['\x00', '\x00', '\x00', '\x00']}, 0x4d5) 09:28:36 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x450b, 0x5d8a, 0x1, &(0x7f0000000280)={[0x401]}, 0x8) [ 682.926093][ T2219] FAULT_INJECTION: forcing a failure. [ 682.926093][ T2219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.939773][ T2219] CPU: 1 PID: 2219 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 682.948524][ T2219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.958571][ T2219] Call Trace: [ 682.961842][ T2219] dump_stack_lvl+0xd6/0x122 [ 682.966489][ T2219] dump_stack+0x11/0x1b [ 682.970649][ T2219] should_fail+0x23c/0x250 [ 682.975141][ T2219] should_fail_usercopy+0x16/0x20 [ 682.980222][ T2219] _copy_from_user+0x1c/0xd0 [ 682.984844][ T2219] io_sqe_buffers_register+0x219/0x920 [ 682.991174][ T2219] __do_sys_io_uring_register+0x513/0x21a0 [ 682.997401][ T2219] ? ksys_write+0x153/0x190 [ 683.001926][ T2219] ? fpregs_assert_state_consistent+0x7d/0x90 [ 683.008014][ T2219] __x64_sys_io_uring_register+0x4f/0x60 [ 683.013737][ T2219] do_syscall_64+0x44/0xa0 [ 683.018141][ T2219] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 683.024068][ T2219] RIP: 0033:0x7f66e1e64a39 [ 683.028463][ T2219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.048369][ T2219] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 683.056762][ T2219] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 683.064714][ T2219] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:36 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x140) r0 = syz_io_uring_setup(0x2a22, &(0x7f00000002c0)={0x0, 0x8000800, 0x0, 0x0, 0x5c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc0, 0x75a6, 0x2, 0x0, 0x0) 09:28:36 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x66, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 683.072677][ T2219] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 683.080713][ T2219] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 683.088725][ T2219] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:37 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xa000000) 09:28:37 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 23) 09:28:37 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:37 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x900000000000000, 0x0, 0x0) 09:28:37 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x4cbd, &(0x7f0000000380)={0x0, 0xdd63, 0x8, 0x1, 0xfd, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x68, 0x1c]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r5, 0x9, 0x0, 0x10000}, 0x5) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000740)={'bridge_slave_1\x00', {0x2, 0x0, @multicast1}}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @ethernet={0x306}, @l2={0x1f, 0x9, @none, 0x707}, @l2={0x1f, 0x1, @none, 0x0, 0x1}, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0xdf7e, 0x7, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10010, r0, 0x10000000) syz_io_uring_submit(r3, r8, &(0x7f0000000700)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)='./file0\x00', 0x4, 0x8000, 0x12345}, 0x5) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x13, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x4) 09:28:37 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x67, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:37 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 683.602277][ T2239] FAULT_INJECTION: forcing a failure. [ 683.602277][ T2239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.615341][ T2239] CPU: 1 PID: 2239 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 683.624018][ T2239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.634195][ T2239] Call Trace: [ 683.637479][ T2239] dump_stack_lvl+0xd6/0x122 [ 683.642112][ T2239] dump_stack+0x11/0x1b [ 683.646337][ T2239] should_fail+0x23c/0x250 09:28:37 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f0000000600), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x8000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000080)=""/96, 0x60}], 0x4, &(0x7f0000000280)=""/64, 0x40}, 0x0, 0x0, 0x1, {0x2}}, 0x2b28) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 683.650830][ T2239] should_fail_usercopy+0x16/0x20 [ 683.655847][ T2239] _copy_from_user+0x1c/0xd0 [ 683.660437][ T2239] io_sqe_buffers_register+0x219/0x920 [ 683.666223][ T2239] __do_sys_io_uring_register+0x513/0x21a0 [ 683.672040][ T2239] ? ksys_write+0x153/0x190 [ 683.676541][ T2239] ? fpregs_assert_state_consistent+0x7d/0x90 [ 683.682609][ T2239] __x64_sys_io_uring_register+0x4f/0x60 [ 683.688280][ T2239] do_syscall_64+0x44/0xa0 [ 683.692720][ T2239] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 683.698708][ T2239] RIP: 0033:0x7f66e1e64a39 [ 683.703122][ T2239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.722710][ T2239] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 683.731175][ T2239] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 683.739124][ T2239] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:37 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 09:28:37 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 24) [ 683.747566][ T2239] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 683.755519][ T2239] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 683.763480][ T2239] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 683.800705][ T2265] FAULT_INJECTION: forcing a failure. [ 683.800705][ T2265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.813920][ T2265] CPU: 0 PID: 2265 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 683.822600][ T2265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.832654][ T2265] Call Trace: [ 683.835918][ T2265] dump_stack_lvl+0xd6/0x122 [ 683.840488][ T2265] dump_stack+0x11/0x1b [ 683.845062][ T2265] should_fail+0x23c/0x250 [ 683.849476][ T2265] should_fail_usercopy+0x16/0x20 [ 683.854482][ T2265] _copy_from_user+0x1c/0xd0 [ 683.859121][ T2265] io_sqe_buffers_register+0x219/0x920 [ 683.864576][ T2265] __do_sys_io_uring_register+0x513/0x21a0 [ 683.870367][ T2265] ? ksys_write+0x153/0x190 [ 683.874954][ T2265] ? fpregs_assert_state_consistent+0x7d/0x90 [ 683.881072][ T2265] __x64_sys_io_uring_register+0x4f/0x60 [ 683.886691][ T2265] do_syscall_64+0x44/0xa0 [ 683.891133][ T2265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 683.897028][ T2265] RIP: 0033:0x7f66e1e64a39 [ 683.901434][ T2265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.921095][ T2265] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 683.929505][ T2265] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 683.937458][ T2265] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:37 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 25) 09:28:37 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5370, &(0x7f0000000000)={0x0, 0xb533, 0x4, 0x1, 0x1cd, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r5, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000500)) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r5, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x40000, 0xc26e4790b83c5242}, 0x1) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 683.945518][ T2265] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 683.953464][ T2265] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 683.961437][ T2265] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 684.000674][ T2269] FAULT_INJECTION: forcing a failure. [ 684.000674][ T2269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.013735][ T2269] CPU: 1 PID: 2269 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 684.022424][ T2269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.032457][ T2269] Call Trace: [ 684.035731][ T2269] dump_stack_lvl+0xd6/0x122 [ 684.040303][ T2269] dump_stack+0x11/0x1b [ 684.044558][ T2269] should_fail+0x23c/0x250 [ 684.048954][ T2269] should_fail_usercopy+0x16/0x20 [ 684.053956][ T2269] _copy_from_user+0x1c/0xd0 [ 684.058572][ T2269] io_sqe_buffers_register+0x219/0x920 [ 684.064055][ T2269] __do_sys_io_uring_register+0x513/0x21a0 [ 684.069867][ T2269] ? ksys_write+0x153/0x190 [ 684.074352][ T2269] ? fpregs_assert_state_consistent+0x7d/0x90 [ 684.080407][ T2269] __x64_sys_io_uring_register+0x4f/0x60 [ 684.086023][ T2269] do_syscall_64+0x44/0xa0 [ 684.090430][ T2269] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 684.096383][ T2269] RIP: 0033:0x7f66e1e64a39 [ 684.100798][ T2269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.120497][ T2269] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 684.128889][ T2269] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 684.137022][ T2269] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 684.144987][ T2269] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.152957][ T2269] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 684.160980][ T2269] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:38 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xb000000) 09:28:38 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x68, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:38 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 26) [ 684.501030][ T2279] FAULT_INJECTION: forcing a failure. [ 684.501030][ T2279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.514137][ T2279] CPU: 0 PID: 2279 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 684.522957][ T2279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.533038][ T2279] Call Trace: [ 684.536303][ T2279] dump_stack_lvl+0xd6/0x122 [ 684.540875][ T2279] dump_stack+0x11/0x1b [ 684.545021][ T2279] should_fail+0x23c/0x250 [ 684.549443][ T2279] should_fail_usercopy+0x16/0x20 [ 684.554486][ T2279] _copy_from_user+0x1c/0xd0 [ 684.559085][ T2279] io_sqe_buffers_register+0x219/0x920 [ 684.564712][ T2279] __do_sys_io_uring_register+0x513/0x21a0 [ 684.570498][ T2279] ? ksys_write+0x153/0x190 [ 684.575022][ T2279] ? fpregs_assert_state_consistent+0x7d/0x90 [ 684.581077][ T2279] __x64_sys_io_uring_register+0x4f/0x60 [ 684.586690][ T2279] do_syscall_64+0x44/0xa0 [ 684.591170][ T2279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 684.597103][ T2279] RIP: 0033:0x7f66e1e64a39 [ 684.601499][ T2279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.621098][ T2279] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 684.629517][ T2279] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 684.637464][ T2279] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:38 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xa00000000000000, 0x0, 0x0) 09:28:38 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x32a, 0x8d18, 0xbc338d7cb51825d3, &(0x7f0000000280)={[0x1]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:38 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x20, 0x1117, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:38 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 27) [ 684.645426][ T2279] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.653384][ T2279] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 684.661344][ T2279] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:38 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x440, 0x5f7d, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:38 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0xa) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/181, 0xb5}, {&(0x7f0000000180)=""/242, 0xf2}], 0x2) [ 684.702670][ T2292] FAULT_INJECTION: forcing a failure. [ 684.702670][ T2292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.715841][ T2292] CPU: 1 PID: 2292 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 684.724554][ T2292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.734692][ T2292] Call Trace: [ 684.737972][ T2292] dump_stack_lvl+0xd6/0x122 [ 684.742569][ T2292] dump_stack+0x11/0x1b [ 684.746731][ T2292] should_fail+0x23c/0x250 [ 684.751153][ T2292] should_fail_usercopy+0x16/0x20 [ 684.756273][ T2292] _copy_from_user+0x1c/0xd0 [ 684.760872][ T2292] io_sqe_buffers_register+0x219/0x920 [ 684.766337][ T2292] __do_sys_io_uring_register+0x513/0x21a0 [ 684.772153][ T2292] ? ksys_write+0x153/0x190 [ 684.776652][ T2292] ? fpregs_assert_state_consistent+0x7d/0x90 [ 684.782749][ T2292] __x64_sys_io_uring_register+0x4f/0x60 [ 684.788372][ T2292] do_syscall_64+0x44/0xa0 [ 684.792938][ T2292] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 684.798886][ T2292] RIP: 0033:0x7f66e1e64a39 09:28:38 executing program 2: r0 = syz_io_uring_setup(0x800182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 684.803383][ T2292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.823207][ T2292] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 684.831752][ T2292] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 684.839788][ T2292] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:38 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x81) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:38 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xbf}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) sendmsg(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f00000004c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="4d8119", 0x3}], 0x1, &(0x7f00000005c0)=[{0x1010, 0x108, 0x383c, "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"}, {0x48, 0x117, 0x1959, "d4c0a6beb433eb87c4a33057a6a5070576a2e2a61e1051a18324e13e28ed0fbdf3b24fef332690f82eaf5e97f7dd80e4d4"}, {0x18, 0x112, 0x0, "025d0b86"}, {0xa0, 0x101, 0x7b, "6b8f920c5695551aae6dc9fef752df53577565309f1f3d92afaaabcb3a387dfa95301ecf536859645d9be86225f2b9c3f9fa51d4ff61f84e88861df5d9e39676e19f443ded5bd2dfb8eea18991dee44d85bf4f6092d315de12c59268de5ae97dd4e83d70364cbd3734f81695f717b7e54ed35b8e0d359f6572ffd428dffc768638e7373b2ba6c2cb61"}, {0x90, 0x0, 0xc7b, "943669d8b4b255a4246dfce36d3722588ecc4f1da2a7440252023edb4fac972d7eefb7b29151a46f33ea8930aab95f49208b348a2671eb09831c424d050d685e965e0a87d9ea838df48a8ec5c9bd6bb8f1f8f3abfdef6719e97fc04ce86d97363bafa350a77f62cd2fc27d8594717c2b6be9700b11e39d5cf1"}, {0x1010, 0x10f, 0x40, "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"}, {0x38, 0x115, 0x1, "981000c14bbd3a95df600fd86444c952505c37bb452d38db7c60be957df6e54aff"}, {0x60, 0x0, 0x7, "1fb2fd7b208b2a99c96fed2d961e6fb677e2e3b51e866aaac4d2b92023796593c6bda3c9f8a0221b5f13da2233e8806fa5e0585d2f7f64ff37193cddb1239ece9e23e8f38d40c2a798c4dee7"}, {0xd0, 0x10d, 0xdb78, "354c9409fc4472cd6e3893c56f5c4f78988e24aba3b844e4375c158fdb2debb33690c6b5e7a720666117ed5dcd9510d3d1b66d6cfeace0123c986684196b05622ef77cf0a6e93ed94a929b1ad64b7609f895ec489faffe02aa62b5d5682cac184f868462543445d108b433b0a1448c00765ce59ce1937f13af611a25bdac46f1c85e86cdac719d0a5b8652785a65ec323188b18c0230f6ab96bcb1b4718ad2cb9ea586a3fa6206cecc6b9256a01224dbdc0b05922402650d1ef7c7"}], 0x2318}, 0x40004) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x6053, &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x11, 0x14ac000, r7) syz_io_uring_submit(r3, r2, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x0, 0x80000, 0x1, {0x0, r7}}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x1010, r0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_submit(r10, r12, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@can, 0x0, 0x80000, 0x0, {0x0, r9}}, 0x5) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) [ 684.847790][ T2292] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.855754][ T2292] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 684.863760][ T2292] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:39 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xc000000) 09:28:39 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 28) 09:28:39 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x69, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 685.412483][ T2317] FAULT_INJECTION: forcing a failure. [ 685.412483][ T2317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.425772][ T2317] CPU: 0 PID: 2317 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 685.434437][ T2317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.444485][ T2317] Call Trace: [ 685.447746][ T2317] dump_stack_lvl+0xd6/0x122 [ 685.452430][ T2317] dump_stack+0x11/0x1b [ 685.456577][ T2317] should_fail+0x23c/0x250 [ 685.460972][ T2317] should_fail_usercopy+0x16/0x20 [ 685.465977][ T2317] _copy_from_user+0x1c/0xd0 [ 685.470553][ T2317] io_sqe_buffers_register+0x219/0x920 [ 685.475994][ T2317] __do_sys_io_uring_register+0x513/0x21a0 [ 685.481861][ T2317] ? ksys_write+0x153/0x190 [ 685.486341][ T2317] ? fpregs_assert_state_consistent+0x7d/0x90 [ 685.492428][ T2317] __x64_sys_io_uring_register+0x4f/0x60 [ 685.498068][ T2317] do_syscall_64+0x44/0xa0 [ 685.502469][ T2317] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 685.508351][ T2317] RIP: 0033:0x7f66e1e64a39 [ 685.512777][ T2317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.532433][ T2317] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 685.540828][ T2317] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 685.548785][ T2317] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:39 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xb00000000000000, 0x0, 0x0) 09:28:39 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x6000, @fd=r3, 0x800, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 09:28:39 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) 09:28:39 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 29) [ 685.556798][ T2317] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 685.564747][ T2317] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 685.572697][ T2317] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 685.615410][ T2329] FAULT_INJECTION: forcing a failure. [ 685.615410][ T2329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.628481][ T2329] CPU: 1 PID: 2329 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 685.637138][ T2329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.647205][ T2329] Call Trace: [ 685.650480][ T2329] dump_stack_lvl+0xd6/0x122 [ 685.655111][ T2329] dump_stack+0x11/0x1b [ 685.659373][ T2329] should_fail+0x23c/0x250 09:28:39 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x3a74, &(0x7f0000000440)={0x0, 0x15d2, 0x2, 0x0, 0x4000049, 0x0, r0}, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=0x0) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x6, 0x7, 0x0, 0x5, 0x4, 0x0, {0x0, r5}}, 0x85d) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x6053, &(0x7f0000000080)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r12 = syz_io_uring_setup(0x49f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xbb}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x11, 0x14ac000, r11) syz_io_uring_submit(r7, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x7, 0x0, @fd, 0x0, 0x0, 0x0, {0x404}, 0x0, {0x0, r11}}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) [ 685.663793][ T2329] should_fail_usercopy+0x16/0x20 [ 685.668818][ T2329] _copy_from_user+0x1c/0xd0 [ 685.673413][ T2329] io_sqe_buffers_register+0x219/0x920 [ 685.678883][ T2329] __do_sys_io_uring_register+0x513/0x21a0 [ 685.684708][ T2329] ? ksys_write+0x153/0x190 [ 685.689237][ T2329] ? fpregs_assert_state_consistent+0x7d/0x90 [ 685.695382][ T2329] __x64_sys_io_uring_register+0x4f/0x60 [ 685.701018][ T2329] do_syscall_64+0x44/0xa0 [ 685.705431][ T2329] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 685.711345][ T2329] RIP: 0033:0x7f66e1e64a39 [ 685.715861][ T2329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.735643][ T2329] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 685.744052][ T2329] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 685.752021][ T2329] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 09:28:39 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 30) [ 685.759970][ T2329] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 685.767975][ T2329] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 685.775933][ T2329] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 685.805238][ T2339] FAULT_INJECTION: forcing a failure. 09:28:39 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 685.805238][ T2339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.818378][ T2339] CPU: 0 PID: 2339 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 685.827042][ T2339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.837096][ T2339] Call Trace: [ 685.840424][ T2339] dump_stack_lvl+0xd6/0x122 [ 685.845024][ T2339] dump_stack+0x11/0x1b [ 685.849220][ T2339] should_fail+0x23c/0x250 [ 685.853663][ T2339] should_fail_usercopy+0x16/0x20 [ 685.858671][ T2339] _copy_from_user+0x1c/0xd0 [ 685.863243][ T2339] io_sqe_buffers_register+0x219/0x920 [ 685.868763][ T2339] __do_sys_io_uring_register+0x513/0x21a0 [ 685.874621][ T2339] ? ksys_write+0x153/0x190 [ 685.879134][ T2339] ? fpregs_assert_state_consistent+0x7d/0x90 [ 685.885272][ T2339] __x64_sys_io_uring_register+0x4f/0x60 [ 685.890889][ T2339] do_syscall_64+0x44/0xa0 [ 685.895407][ T2339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 685.901389][ T2339] RIP: 0033:0x7f66e1e64a39 [ 685.905804][ T2339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.925492][ T2339] RSP: 002b:00007f66dfbdb188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 685.934189][ T2339] RAX: ffffffffffffffda RBX: 00007f66e1f67f60 RCX: 00007f66e1e64a39 [ 685.942145][ T2339] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000003 [ 685.950119][ T2339] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 685.958080][ T2339] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 09:28:39 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) (fail_nth: 31) 09:28:39 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x3, 0x8, 0x0, 0xfffffffe, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000001900)=[{&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/38, 0x26}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000680)=""/61, 0x3d}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/12, 0xc}, {&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000001800)=""/240, 0xf0}], 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) [ 685.966802][ T2339] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 [ 685.992713][ T2346] FAULT_INJECTION: forcing a failure. [ 685.992713][ T2346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.005802][ T2346] CPU: 0 PID: 2346 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 686.014491][ T2346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.024659][ T2346] Call Trace: [ 686.027954][ T2346] dump_stack_lvl+0xd6/0x122 [ 686.032571][ T2346] dump_stack+0x11/0x1b [ 686.036760][ T2346] should_fail+0x23c/0x250 [ 686.041162][ T2346] should_fail_usercopy+0x16/0x20 [ 686.046188][ T2346] _copy_to_user+0x1c/0x90 [ 686.050798][ T2346] simple_read_from_buffer+0xab/0x120 [ 686.056250][ T2346] proc_fail_nth_read+0x10d/0x150 [ 686.061273][ T2346] ? proc_fault_inject_write+0x230/0x230 [ 686.066894][ T2346] vfs_read+0x1e6/0x750 [ 686.071120][ T2346] ? __do_sys_io_uring_register+0x26d/0x21a0 [ 686.077095][ T2346] ? __fget_light+0xd0/0x260 [ 686.081691][ T2346] ksys_read+0xd9/0x190 [ 686.085864][ T2346] __x64_sys_read+0x3e/0x50 [ 686.090367][ T2346] do_syscall_64+0x44/0xa0 [ 686.094912][ T2346] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 686.100807][ T2346] RIP: 0033:0x7f66e1e175ec [ 686.105313][ T2346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 686.124933][ T2346] RSP: 002b:00007f66dfbdb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.133431][ T2346] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f66e1e175ec [ 686.141634][ T2346] RDX: 000000000000000f RSI: 00007f66dfbdb1e0 RDI: 0000000000000004 [ 686.149616][ T2346] RBP: 00007f66dfbdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.157584][ T2346] R10: 000000000000033e R11: 0000000000000246 R12: 0000000000000002 [ 686.165542][ T2346] R13: 00007ffd725aec8f R14: 00007f66dfbdb300 R15: 0000000000022000 09:28:40 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xd000000) 09:28:40 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x1f9d, &(0x7f0000000080)={0x0, 0xab3e, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:40 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:40 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xc00000000000000, 0x0, 0x0) 09:28:40 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:40 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x4002, 0x0) read$usbmon(r0, &(0x7f00000002c0)=""/6, 0x6) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x139}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:40 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5dae, &(0x7f0000000180)={0x0, 0x5ee2, 0x1, 0x1, 0x20c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c020000000105000000000000000000000080000600124000000000"], 0x1c}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000001700)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r4, 0x0, &(0x7f00000016c0)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000280)}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001500)=""/113, 0x71}, {&(0x7f0000001580)=""/184, 0xb8}], 0x7, &(0x7f0000000480)=""/34, 0x22}, 0x0, 0x40000010}, 0x7fff) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r5, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x69ce, &(0x7f0000000000)={0x0, 0xb1b2, 0x20, 0x1, 0x2da, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/timer\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:40 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:40 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r3, 0x5, &(0x7f0000000380)=""/4096, 0x1000, 0x12, 0x0, {0x0, r4}}, 0x7fffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:40 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:40 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:40 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:40 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:40 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xe000000) 09:28:41 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xd00000000000000, 0x0, 0x0) 09:28:41 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x393a, 0x616b, 0x1, &(0x7f0000000380)={[0x3f]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x8000000) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x20000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c154a9107b1fac7ac509947ed03ff7fa2bad223192800010500000000000000000000000000061dc140000000000423f28ca27905f9e7beb95a9af48e000000000000006275bcb81132b0865eec75c704a455ce4c152400276cb94da838169e088b4e1915815962a80055e107190270424a0300a6de907eca8f135cd9d00ff81d05"], 0x1c}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000008540)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x8a, 0x0, {0x0, r7}, 0xffffffff, 0x0, 0x1, {0x0, 0x0, r0}}, 0x10001) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0xec166c1d850caf18, 0x2004, @fd_index=0x7, 0x7, 0x5, 0xc402, 0x4, 0x1}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd=r4, 0x20, 0x0, 0x0, 0x8, 0x1, {0x2}}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r8 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$getownex(r8, 0x10, &(0x7f0000000480)) socket$inet_tcp(0x2, 0x1, 0x0) r9 = creat(&(0x7f0000000400)='./file0\x00', 0x12) io_uring_enter(r9, 0x2a69, 0x8c81, 0x1, &(0x7f0000000440)={[0x5]}, 0x8) 09:28:41 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:41 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:41 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee5000/0x3000)=nil, 0x3000, 0x1000004, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ca5, &(0x7f0000000180)={0x0, 0x826c, 0x1, 0x1, 0x49}, &(0x7f0000ee4000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f00000003c0)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0x1a8, 0x0, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7c07fde4}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2c}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20040840}, 0x4044000) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0xa}, 0x1, {0x0, r6}}, 0x12) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x0, 0x800, 0x1, {0x0, r6}}, 0x7) 09:28:41 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:41 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:41 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:41 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2e}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x3f) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_submit(r6, r10, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x1) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x183040, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r11, 0x0, &(0x7f0000000040)='.\x00', 0x36, 0x84900, 0x23456}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:41 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:41 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:41 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf000000) 09:28:42 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xe00000000000000, 0x0, 0x0) 09:28:42 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:42 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:42 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xbd}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:42 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:42 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getflags(r0, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:42 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:42 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:42 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1b, 0x49, 0x1, 0x6, 0x0, 0xff, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x5e0d396843a65692, 0x9, 0x3, 0x3, 0x101, 0x4668, 0x6e5d, 0x0, 0x1000, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r0, 0x8) r1 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0xc0, &(0x7f00000001c0)=0x8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x54f, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x9) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:42 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:42 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:42 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x10000000) 09:28:42 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xf00000000000000, 0x0, 0x0) 09:28:42 executing program 0: r0 = syz_io_uring_setup(0x792, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x6bd2, &(0x7f0000000280)={0x0, 0x1b82, 0x4, 0x3, 0x2c7, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000380)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x10, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4490, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x80000001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:42 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:42 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6f, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:42 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x2cc, 0xa962, 0x2, &(0x7f0000000000)={[0x6b21d243]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:42 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:43 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x94, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:43 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/125, 0x7d}], 0x1) 09:28:43 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) ioctl$int_out(r0, 0x6, &(0x7f0000000280)) 09:28:43 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:43 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:43 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x11000000) 09:28:43 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1000000000000000, 0x0, 0x0) 09:28:43 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400081, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xd23, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x3f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:43 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x70, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:43 executing program 2: r0 = socket$inet(0x2, 0x6000000000000003, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_names\x00') sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x4, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x5b00, 0x0, &(0x7f00000001c0), 0x10) r2 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r0, 0x80, &(0x7f0000000200)=@caif=@util={0x25, "d43aeaef4428f4a2cb87644521d7f060"}}, 0x100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x79cf, 0x704, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r5, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x4892, 0x98ff, 0x3, &(0x7f0000000000)={[0x4]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r2, 0x8000000) 09:28:43 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:43 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e, r2}) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000006543617b95afdfb3f86aac83751c4dfc0316239e29a030d04cf3dc03a336a8"], 0x48) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e, r5}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x7c, r0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x300480b0}, 0x8880) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000240)='batadv_slave_1\x00') r7 = syz_io_uring_setup(0xe51, &(0x7f00000002c0)={0x0, 0x2276, 0x20, 0x0, 0x200002a8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x11c, &(0x7f0000000140)=0x386e, 0x0, 0x4) io_uring_enter(r7, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r7, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:43 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:43 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x110010, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x3) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:43 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:44 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:44 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x71, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:44 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x12000000) 09:28:44 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1100000000000000, 0x0, 0x0) 09:28:44 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x6053, &(0x7f0000001380)={0x0, 0x480, 0x2}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x11, 0x14ac000, r8) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x3f, 0x0, &(0x7f0000000380)="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", 0x5, 0x0, 0x1, {0x3, r8}}, 0x800) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r3, 0x4e8b, 0x5b58, 0x2, &(0x7f0000000180)={[0x89a]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:44 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:44 executing program 0: r0 = syz_io_uring_setup(0x3af4, &(0x7f0000000080)={0x0, 0x5076, 0x0, 0x1, 0xfffffffd}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x101000, 0x1c, 0x10}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f00000001c0)=""/43, 0xe}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000105000000000000000000000000100600124000000000"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000380)={{0x0, 0xfffffffffffffffa, 0x7, 0x515, 0xffffffffffffff39, 0x9e7, 0x5, 0x200, 0x4, 0x4, 0x8, 0xb7d, 0x6b21, 0x8, 0xffff}}) 09:28:44 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x72, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:44 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:44 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000010000000000000000000600124000000000208151a95450ec2629b975351dc88aa7b68793e09ac786edaeb8b338b4000000"], 0x1c}}, 0x0) close_range(0xffffffffffffffff, r3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:44 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:44 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:44 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0x10001) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:44 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:45 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x1, 0x1) io_uring_enter(r3, 0x3fec, 0xa3d0, 0x2, &(0x7f0000000400)={[0x5]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r5 = io_uring_setup(0x6053, &(0x7f0000000080)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x11, 0x14ac000, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r4, 0x0, &(0x7f0000000280)="a8e707c790dc38000faedaf1cc878770131fa782bab7ed948cc97f497b00ed6c99385a418c187c7c1259c6c90b60633dba935feec3c52ee593da1b8c96501f39300589c02bebe9c1e4bcb946be88082f594831123f4feeb4eaaf770918714dbefa4b848b6465a9c2305b2d44c034e278bf49b4be222afb448d10389513573607d161cac01e1884a3c77fdbe16a5db566e351a4d6eb65736e4e635b8e5bd240549903e0b84294dcb3d5e06642dedcbb9795dc", 0xb2, 0x4000001, 0x1, {0x0, r6}}, 0x91) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:45 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1200000000000000, 0x0, 0x0) 09:28:45 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x13000000) 09:28:45 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:45 executing program 2: r0 = syz_io_uring_setup(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2ac}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x1000) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:45 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x73, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:45 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c871d1b4aef3c5900000000000000000000000006001240000000009efc60febf95976d4aa6c8a2a0de5d68889368ee016ade692e2d43e2ba4d5e5efa2a554e34140e86ac6a7607dd7aa2a9a9d8d78dcc2b90ecbf8b286b3b5fba40d6bc3880b131ce1b0b5dca2c23bd3161a3a99fe4e25b393c3db74fe168504b15a8994bac1a0000000000"], 0x1c}}, 0x0) preadv(r6, &(0x7f0000001840)=[{&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000780)=""/9, 0x9}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/104, 0x68}], 0x7, 0x8b3, 0xd24) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r7) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}, 0x47e3) acct(&(0x7f00000003c0)='./file0\x00') 09:28:45 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:45 executing program 0: syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x510, &(0x7f0000000500)={0x0, 0xfffffffc, 0x2, 0x2, 0x24c}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000112ef1723e805000000000000000000000000000600124000000000"], 0x1c}}, 0x0) r5 = io_uring_setup(0x6053, &(0x7f0000000080)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x11, 0x14ac000, r6) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r4, 0xce, 0x0, 0x5, 0x3, 0x1, {0x0, r6}}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/196, 0xc4, 0xfffff8ef, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000280)=""/233, 0xe9}], 0x2) 09:28:45 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:45 executing program 2: r0 = syz_io_uring_setup(0x17e, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x1e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x1}, 0x3) 09:28:45 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@empty, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x1000, 0x1, 0x400, 0x7, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)={0x18, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d38a46"}]}, 0x18}], 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000800)=0x33) r6 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r9, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000780)={{0x2, 0x4e21, @loopback}, {0x306, @remote}, 0x76, {0x2, 0x4e22, @multicast1}, 'veth1_to_team\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e, r7}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe0, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x40008041) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:45 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x74, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:46 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1300000000000000, 0x0, 0x0) 09:28:46 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, 0x4010, r0, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2004, @fd_index=0x2, 0x3, 0x5, 0x6, 0x1e, 0x1, {0x3}}, 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:46 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:46 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x39236764d7b3512c, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x4010, r2, 0x8000000) syz_io_uring_setup(0x344b, &(0x7f0000000180)={0x0, 0x8c6ca, 0x0, 0x0, 0x8d, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index=0x7, 0x8000, &(0x7f0000000980)=[{&(0x7f0000000380)="52e0ab2aea1a5c0206ab377192c1d44688e9b127bb5529a15d72cfff0a08468df73501e6f0048242b848a93b1b051b01ebe4d1b11e4adba799cbf9aed2562d66755afcbe6e2429d366bad5d52a41ecd6f634dfc9f8d6b70287d1f832fcac08cc1a672602e9c6a62b701a3e35ae839483a5f6a8bcc8b3642187bde0b05d404ce8abf0ba58b6e48e445e7291373d193c948e38ae138dde7d48e292c3cd2dc0b95129bd4a4d9aea6896433c3767b0ac26a7bccc1334cf0ca0fd390a31f777882748dca04caa0cc11c934133ed351cc21b8b5233778de456ca63f13538d5c1a2757586cfc744bafede8a54978b071a9b929d62a233", 0xf3}, {&(0x7f0000000480)="fd951d0fdb8c50ab9971862f47396b77b20d25562c185bdae6dede3c8fc6b2526295aa1849f760a399d1390bb5c996bbf2ef62d6a55319ea254d38a8f56e650a3c225a4250251917083480cf6aa5fe149cd62e6d2be133d8ceb9a27da17b47254e33cadbac38b8f34c1818e5e72a8d1415d7679dda6ff6f10b064df1b8046bfac9fd18609716997d9df81be45af04d9d7ba82ad0ce22bc4f5a31db6ae9a2c4df5c486990f26721f3182fbb9c4d0f035a5a160bbd24837bb71222d81e0a76b205", 0xc0}, {&(0x7f0000000280)="00b9ccf9e63c", 0x6}, {&(0x7f0000000b00)="7cf593a163d16588196d623a9dec68f77c3627965e4c94959a69d03408482f4ad0426a12b14ff59d2ea9ddad4b3a41e2eb94be6546be0ff149e76a1daf340939a5ccdcddc703e8e68c1ae3e458575b900278fb3ee85af2b41f1fae7f8f7ac3b3dfe7289433af96856764999f44090efcc77c31bfddf116ec72d36176773e2b8877b95d56bd15d71c5b03165e02212fa933ef417738bbedb0ea1ce48ccb219a4ea78c95a32855de024c3ef98c39d401ca0ca280b6b67249369ce4773c7f023c4ed8a909ed3c8145c29cb21c", 0xcb}, {&(0x7f0000000640)="dcec95783a28441473237ea079eab5cf8cd82957c6edb3c3023f661ca80dca0e649b6645e6ba5de2e703f0203083832c8aff20f43c593169d84436684f8e69e2b9188744a8f8c3eb8e453876adaf2248dd2250331ab5dabdbf26cdd8820dc99681de5e5e21e75b94e1b96a5b6997fe75f88b30857e26fb89fb4758f99390c56b011d6e75d87cdb00", 0x88}, {&(0x7f0000000700)="03a20a2d35f8a73a0e3917d1298ee0e93ce1ca0ae2ae3b40c43ef2f725e5ce5a28070f15cbd9d541827b104a3188a2f48c6ff314d9e15e9e59795bebdb25b3a8acaeafd0895077e29f66f3845d111ac845f7ca6ba95e29145adef838d26d28f9ade2925e72dfb794a35e72a61849ef89b5ce9c8ab8aa31bd3eb3460f96c395e8b5ca24e9ff584792948cd7ff73819f04b17948a3584c2e53707d15217e9eaf771e0ff526e2f34cc6f359fb91c47fc272e6123b8ad01e42038cee055649ca6f5acfe5ed8685c61308d5e224a0edbb5d67f5c608e1feb3c6c5141376fe44", 0xdd}, {&(0x7f0000000800)="eecb9a3d8432ceed61b87bfe6651063ce5127cbad7940302e38b77e4018ab51352e0d05335367d1202173c4d40892788403e40f7952c75dd62a5986466bf284aba70ea123a2d7e7dabd7ef42edc3147738d6534957aec46900e7c1cf5a23d2895eaa1e281d13862a7a37415fd4c1b1cd8c9106062b1a52efddde4f4e7711313977c587442e5d3e113dee12a8cf", 0x8d}, {&(0x7f00000008c0)="934d269c6c6fa734c6623b64bd05bbc3ea2c46dab54022ea1b94715ce7b31f98fe13cd4619a98c36d40bc492ed246cbce93e446a3ea6f4bae913a66aff80ebee70ab49c928ad00ee46aa106edbfa1ca6e923923dc61ff6eb0d7a2b879c0c66227684657562725b8c43fe263814103afde1df7bd86ed6dc1e8c02c73a0183b4ce36fc96a8a1209913d41c165de6", 0x8d}], 0x8, 0x2, 0x1}, 0x4) dup2(r0, r0) r6 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x111200, 0x20) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r9 = io_uring_setup(0x604f, &(0x7f0000000080)={0x0, 0x4b17, 0x0, 0x0, 0x5}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r11 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x11, 0x14ac000, r10) syz_io_uring_submit(r4, r8, &(0x7f0000000ac0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2004, @fd_index=0xffff, 0x200, &(0x7f0000000a40)=""/73, 0x49, 0xa, 0x1, {0x0, r10}}, 0x7f) io_uring_enter(r6, 0x0, 0x1119, 0x1, 0x0, 0x0) r12 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r12, 0x1) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:46 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x14000000) 09:28:46 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x75, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:46 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x16b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd=r0, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000300)="8c389e650e266e4fff2c5830810e4d1151b7abf378df35b15950229d49521b10eb2ace6d887fa916ece852d032d07668220a34256725769376498019f46f3adbdf5876c31b1dcaa02b2ecc2a7b1e4f1c7dda7e771080f261561b241e7067f5999f6751fe497165a4541359c3f1d1854e647fed9a17fbd1a2f661f374d24bc89738915bc6865c24b59a465de06aad5804f98ae00027aab52d5cc7e70df7be1ba8982dbadf0d4ecbb452c38457a14eb59fc8f50478cfef75c29c38d1dc8ef1cbb4", 0xc0}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f00000003c0)="386beb943574d2e53dc21251787d57409cd1e2a59d5196059716bd895f3c257974d0a06c8eed57e8f81cf76ef38481332061509dc4fb3c6ee74db57c2f20123ffd37f7fec8cb3eed149f85770a11846c18eb30f0fc16af2f0ee537ad5a20cae15d2b6fd1085856e897590d9f5a00c738b7a1ec68591dee46ba8d9605586e193428b534f9370bbb2b01d726e713b5d8acd04c26fa274202197743753ce8a7e177d750aa054b63d32808fb8b11d8bb1625bd524bfd2500ad38ed08c3", 0xbb}, {&(0x7f0000002d80)="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", 0x1000}, {&(0x7f0000001500)="2372e6eec4d3a8e7bbbff07a17dbb6cd36e202ad8b5c5666680df51557e2334c7094806dd0a4215713068d87e0644b9d85fe9c01ef40a26a81e5e82c41f26f53eb4e1be968c2fea022ca8f4e8f260455762e84d72c9316f5bcc7e89cfe8357dd3a4a06334b75a72d44897a3bb75ea25d41e0d96de50687489841ac7279b57c6640c4da84241533a6da7d90e6a2f0", 0x8e}], 0x5, 0x11, 0x1}, 0x7fa) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r1, 0x10000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000500)={{r4}, "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"}) 09:28:46 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:46 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x75c9, &(0x7f0000000000)={0x0, 0xcd27, 0x0, 0x1, 0x117, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) openat2(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x20002, 0x30}, 0x18) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:46 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9400, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:46 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000005000000000000000000000000000600124017000000"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "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", "fd900f3ea0a6fe8cbb32613fb921bc4cded68fdf7638f6e30c39d03ea2ddbad5a0f6cc0f413b100a87b82f79df6437c6af48aff6ea253247c8faf875f37aff9a081d59856f033047056e5b6e79f2f6e37812b6e24a450f48d1bdd8dde80a8c778a62e65e1ae61d0457536612d816494bdfb1520c13ac682afc13d0c4a4c0b0958f02289c8154bd0cd2cbbfa18055821c1fc5f2f8c387c2d090ea2dec09b493558c32620b164a8386395c736ae7cef252459d41e6e1c60967c1a2045fbb00043ec66e96d9bfd259a4206fe24155116869295514994911e70d48215c75a9881f56ba6a955b080a50f1689581fbb3800960b79748bac3c99043c370f767791b2b9eb2c004ad06f6978a4c9c8b85048836a4307dadba9ca57d70344bb10a47a4f21d195b39db64bc06f787ee7c78909328327cfe3ba3651e9f879179c1017435d8da1e6204cf87a888a6d865efe96a55ea8cff37a77618e7e13ba8afc7d4770efc0d5bcae9cf7d1f994fd2e2ad8e39930bcfd512bae96f4b40edd8deb5a2428cff7563b34876b1ed1e81f7ab9171b5798d9af05d9ca4c2157672982237b2a08a1bf9f30eec784de37f7115bf9567c7b1c0cd9397652f8eee98f51d65ec68efbf9fbbb9059515aada4ddc903ece6ea073f52c39f3c1ada6a03403f7b2e0da1cbb92844d6c8c4ae7b529aed8bea9512483d3f86f9d4c0765d8998808b7713e08f0687d1e9e2350502e29b99f559f3a3f5cbc66caf53b5a682eaf69032ce3b7eb0b0c3231851bb18b4c8a7d50b71e3515e0c10fc9350aca6c0a54021a77f2f561ce2fc385b10255d2f0d22ab444a271699313fe2cff335f232873a8f355368054f5e6e81c0e76481d16739d6e0aef81f6345bdae3eba95f087402a589a3214f6cf369abc6a222fc248056c7a5075795067a53afbd13aa339be434e77cf02084ebb41396b84ae20ba8f25c7ce1f391b0a4976d930ca9f137bd5d2b512eee9c7d7254294b2f7af57f15abf3ef498477c57f380a7e6c0b12a9c212054af06002722f5108842e618f430264ad07ceb65461309fd8b1493f644fd1a985b99806abb306b7d8602ad2a96351e85ed3e47c21590dfb43ae1a5f8505165995ea5ca4b55b3a439a83d561cffa2cc1d2d0d9e56e38c954743588461e65c27359d29fad2cc7bd34367b7a5f9112d5bdfcbd979c73a6766b2fe65bcd6cc61e6233959babac1c8c9532c5bf30ad3a56bbb2bf447eda3a088b991666c9c913ed9a86a7e91f143725e85174361cc70e1b0f6b8a94061cb1e39426e6aa0145871ac308e7416709cccadf547211c1e332dc238b0d4c6bd98bd9d64012cd5fc0faf28a2e052ca9c808bfa0a4c95df5796f5656adfe33dc7cd5117d23fe5dea6364cb5599cbcefe26ba517ead6e32b582c397e194fcf581d1b7ebbcebf9e1cb06525878d7452a0669f4eb4b99cbc036b7b233511a9b782e6e7365c6846cf78f013751e9de7c39d1e51019acb6fcb3b0752fe0643625292a1355ce306fd376960e759b61c5c982bac08bf45bd8c1a11490051aeb21329149ff504a912ca619c666f7eb6f45057409da7b96dee84e857f1dbcf4481cd3eb3be6eb7849fbfcbbfa8b16680625b6ec2736c64514beca9c817b545f7718d75f07552917e7f81aaa40e734196f11860187fb7d801358ab97ac571777edeebc2ce4d8725fdedd81724521065a4fcc7e6282eb2e80c0be5d2144a7de1166289c0f1b2abe3d1a7b87b4075481e459fb36a1552be9c97b29e9a07fe687e5211c3ed326932c35a52e6b81dde91ea8cbc810ed1605bd6bff53a343c4d6af44b5f5b939bbb70e8b59dea574b16d750f5ea2498914ace0c78e11b4e6ec0f17e345d92700b0966449242b2308c5593842e5af26862b9c42a6d7b59e3506d910da49689480d71cf12acc0c2201066462afa0a5ba383dfd050723f15778c229b8df49422a829562e777d98c02ae0a84341689337877a096212e13ccd15e8af5b8d83ad7fe9c5a60ff1bba4a4610bae73ec8b94ab8858bcf135e4e63727a3b53bcf1162ca822742d72e8affab3790472767aab828968d800650791a49cb21f7f78c10c0f10fd3dbdf3b919d72426ea579479980e11bc235250a78e8fb1a47b156f914fe3903cbd060f7def61d3ebe606004aed095ea6dcf25e0b8a173f2d650fc54233d9147bc7a1df94ac11200304bfc93a72bb216201c476af2f223c9aee21c3ccbc5dd62506eabe5eea8d6f9e4951db6c7c10a826266be8e3f7925dd88b89f119d7e2a4a858e388ff92d096693b583289b18e929ae9cb073cc498cd58b9b998b3ca3b1de9a7b062cc8c8fe8e779fa7ba2bec67bfb67a67b932dd640b3233a64984daf5ca28af565519ee643686dff90199d0459b95ce6545bf37ceb5ba1c0012ae9ebdb0284db19a48bf47c39e1323e2b361ba1b1fdf0c450d0fd7f3297c066be967f6dc44ec378ae038e5f973d35e77ee6c3fb383303030878e473a6a23fb70c926f6d19114d6a37a0a939f28baf2edfa2d6e417383b8622d59bf97f42fd7eed38aa35427f4f513ce90b8a844e6b69150eb23b9767f5219f53093365aae2d02f620fca3d8cc001912ab7d643ee70051dc8f3fe2b51efb33988d42eef84d037fc89bae3ceba53a08d1162143bc1aa32bce1e7cfbbad164f875236145b40eb9de87f6ac84e52f757601b690c7fc62ec8f65614c432958877f1de4175d5f690ddc07be6c62c91ccefa0bf51df050d5c7c4a477336883fcc9c3d063d1c49427dd9da82328431d54e112168167df2c0036fa2cfa42418ff89e33d95e26c3f639912886e609e3614e4679eddd3ab89b7cbd7f0f20ef60e5b6ff28c7ad5ede98cf50e2255e55f5699331ebd52bef42d8de00770564af4f8e824acb89a1223754648a0440c4bf95945aa23361c8914fdf2b8772a70c1120d42e456e3e085bda904c72d76241faf78555baf3b7678301dbc3f5c683d74cbee90dc678f20dc5b52595e0155005830bc32606ca39a5bbf14f6851b2405e761bfc0185e2aa5518f794a87ec6696f663965d8dabfb997339181a092510a3a0ccc912c8a786825803fba08afa85542d3aca1d53e7627f4ddfbe26d1fd59d1240ced9879b0e6321d296b8ffe75532cec1c8f6bc7cc2f0d9da757a274078b6815cd6dfcdd8bd5b9356e37ab58b73added8dcbc9625670cc7ec9e63adf3bd14fea5b05dd907895751e86cfc31c6324a04fb18104c0c09172bd3d5ae91d0fac26af9fbc3ced8f123a3e1a96ee8f0bf15c324c79d402c837ad174c04a88473d660adfcf64909fbf4339bbcacbe58770ea9de8660d1bb925a72401cfadfeb45133a1f58e37c5963271fe91ed25c744beed8ab8ddd3cfa13083859cee701883ea32be56f69f7b883423e94db0212747353ce3a29e00e125548362fd6dee5b49cfb18d18eca8c7f2dfe05ccd8e4fbea39881f6ede598a1359d23e599cf26ba5a7c27852588bbad08c6f37ad3c648f5dce8714b4f2c7413907c1494758eb15c1bb573bfca8caa5ba4f1e6521f8e7433f5c86f531631f65543ea73ec6b43566744f0e4ea2202354405334b14253c077179fb7b71617edd2cc3037e65423932b4066ab98d6d7f04ea0fdc7cf8e077fd8c3f791deaae0750a4d0ef728b830da995e31da95814b4c02b83f5e1a1a57af9eba0de237fee411dbb1a8d9c8df2573779649691da0ece1cfc3470d305f29a9f0ed0d9bf99975f1179b17b6e61417acb364e5a238cda47601e8b3ad1b5ccf1430a2cd4aee243eb4141beea0cb5391cdba8a9ee315e0486cc465f536cdf3d9daa5122bc11bc84ae4253cbaa37635ea9523575376fceb5d6e35f2a27aae9aabf5516cfba81ba90f8aec267327caf6c232eaaa82d46e7574b3e0a064ad13d8c0a3720227514e9e92055751b6e8919f3912f1694f0027c2fa75e80ddac1ff42c155bf61f9a33b886d3d763ba3d38191007992757171dbc403af6782b363550fc0b392a1949298b56542b71ad00b6476e6aaf4e04e60a6ab18dd529522c72d97efdc3351980ec8234d14ae59280cdce300918eda8b5ccc9304c1a153461df74faee98fdbbbe9b8ce21f0a29055bacb6db912c6ff99344a9856b2dfa7ae51f400aa063bbe5541d485467979ca2060c567617799a4792ef8eb1b88be0f10223b87ff4f26329847c19c41192856c06876eaeeb8c6ea2565e073acc63d8964da8d950846096f452c228ac8996948fadbd47d82ad7e8f10278d8a1206437069b2bba6f9d5a75dfe500f985683c536e89adde9b6a5580ffd4022dd691f84844fbbb56a8335fd2af16f6e061b858942df191a9b352cfb672472f69414270d03aada81bef590d760fc8626ce8b44e96f44fcaaadfbd5744df9d08e407f0bfd0739362d5d5e2ae9516744910acb7e31913d618de2cd55508360e6b1e846a155028dda4e2fa478a92e914372e480d68ed28b2c721be3da2af68654bf8fbe7091a0582449d2ed92d5be9078de2b0d60ffed9fd70925db44646c98ebc31fd14931b9283a7b1c17ff31a786b02dddfdf63966e9d80161fb76e66f9bb5e7ae7d11dd6f64f0c7a094dea6d4861eff5665c462543f4aeea541bbaaef117ef9c601ca821df61537a392b24f4cd9ff4ccc3f2622321034054d74b4604641143157051ae9bb6cb58db6c45cb783d019096dc18e5b3f28c5f19fffa78c51a1ed5bcb7450772cbc8eb4c6918699f60f3f1b051f014e812b75d144f0e03b59356bfb9b816ce44d1c57d56a516dd89c9e476e2145d65cb3efcad5676f4f9339518e078c80b38b0c523ca34e378cb74a269b6f1e25bddcf8d50f6b4fa936ed1aa06d087693e7584235e03c32ce757bbe881e0925d2768b61abbc9a307de172241e3723f70960f622b5cc6ff8020f96fc7b610e103480a25ac5041e7bada6d9bd045343319f9e4a8084e027af4a8a51a1585484099e20a1322a2f5e81b35bdd4008d1b75508446b10a5344b99ab7d790030e603403f7a95a37ebc7c991a2c57c87ad2eb6755fe3632544cbc059d9ae6f88d03b072712d71a923e3a07b6f8a47dde9b08cb533fe18c019b65af9e60916d17dc3782465de997207900c36731015a91d9cca2d0c6271b734e61bca19983d39aa4403521e47a2cce7f9418c10a97dd6ddc124d841ca5bab6fa535599c6d7984a9c094221109f56b266dd8d87b33f4dbbc1d30844633c087d356cd61df8097e9a0c63b94bb7d569d3fdf8e370843c2748e175f8831cf7dc497d819f95a6732d968af42ee753af1338343af3c4e5292f6e32d4954b1898230341334c2f457d46b017737c3082e70d6acf6fc0b897480d8f518e4427930c0f95773024b1389196eb8e6fcc4b608320ae7ae5927dd0fea12ebf306d5897133bdddf9d894984cd4dd78a7afe85d8e651f0b55adb77c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001380)={{r4, 0x401, 0x3, 0x3, 0x5, 0xfffffffffffffff7, 0x0, 0x200, 0xf8c, 0x2, 0x4, 0x6, 0x6, 0x5, 0x7}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:46 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:47 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1400000000000000, 0x0, 0x0) 09:28:47 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x76, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:47 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x50e0, &(0x7f0000000000)={0x0, 0xd64, 0x4, 0x1, 0x23e, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:28:47 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:47 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) clock_gettime(0x1, &(0x7f0000000280)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={r3, r4+10000000}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x120}, {r5, 0x22}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={[0x5]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x60}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}]}}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3402}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4010}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40080c4}, 0x40) 09:28:47 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x15000000) 09:28:47 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:47 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6506, &(0x7f0000000040)={0x0, 0xa69c, 0x2, 0x6, 0x99}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x400100, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x1a8f, 0x24c6, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) 09:28:47 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x67b737056552f23a, 0x10, r0, 0x10000000) r3 = io_uring_setup(0x6053, &(0x7f0000000080)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x11, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x9}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456}, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:47 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:47 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FIONCLEX(r0, 0x5450) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:47 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x77, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:48 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1500000000000000, 0x0, 0x0) 09:28:48 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x8000000) r4 = syz_io_uring_setup(0x6cca, &(0x7f0000000140)={0x0, 0x87fe, 0x20, 0x0, 0x39a, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r4, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r0, 0xfffffffffffffffb, 0x0, 0x800, 0x2, 0x1}, 0x3f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 09:28:48 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:48 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r3, 0x10000, 0x0, 0x5, 0x0, 0x1, {0x0, r4}}, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:48 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x78, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:48 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x16000000) 09:28:48 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:48 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x35a1, &(0x7f00000002c0)={0x0, 0x126e, 0x2, 0x0, 0x2fc}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000380)=0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r5, 0xfffffffffffff13e, 0x0, 0x2, 0x0, 0x0, {0x0, r3}}, 0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:48 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000480)=""/170, 0xaa}], 0x6, 0xffffffd0, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x19c) r1 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6c56, 0x0, 0x1, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) io_uring_enter(r3, 0x6824, 0x1159, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:48 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x67eb, &(0x7f0000000000)={0x0, 0xb81, 0x0, 0x1, 0xd4, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:28:48 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:48 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r0, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="a789f65395cb1a205242be0c3e0e760d74a50d137219992f19654a11be0e2b3290005dc90337c1341b5de53ddc4782afe5a11a1bfc1849c0071d4eb6fd5f00972360ad78a7e6ec18680c2ea09dd36b7dc98cbfaafb1a51e6fbb513319e58acf74f56dce7e01ba79d8827fd00bfedab1f7e22f792d8e0d8b5e740", 0x7a, 0x10, &(0x7f0000000300)={0xa, 0x4e22, 0x5, @remote, 0x6}, 0x1c) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) shutdown(r0, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:49 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x79, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:49 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:49 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x17000000) 09:28:49 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1600000000000000, 0x0, 0x0) 09:28:49 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:49 executing program 2: r0 = syz_io_uring_setup(0x5c98, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000200)=0x9, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x31c6, &(0x7f0000000080)={0x0, 0xc99b, 0x8, 0x0, 0x200, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:49 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:49 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x1) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:49 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0xa, 0x9, 0x0, 0x6, 0x2, 0x1, {0x0, r5}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x4000010, r3, 0x10000000) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r3, &(0x7f0000001800)={&(0x7f00000002c0), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000500)=""/183, 0xb7}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/75, 0x4b}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x8, &(0x7f00000017c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) ioctl$FITHAW(r6, 0xc0045878) 09:28:49 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:49 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:49 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x29d}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:49 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:49 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x4]}, 0x8) io_uring_enter(r2, 0x6c56, 0x2, 0x3, 0x0, 0xffffff14) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x175181, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000180)={0x9, 0x91, "37a34c75946dc5077e3a36135cf1fd56241a7b26777c855859f2b2aeacf613ab31a9de79d3817b6ef118f6880b0f9ca6e90941a0b175d7a75d38fe626a7d885fe017cbba73fd22f2b2fd855fa337b4712b99ea1fe5437e50b528587c3c5cc193ee2684e2da1f9eaf9a373112ceb23128e3e0dc65fa3c8366ec30844de59c8a00f5adaa6b0b1ea2c05de2aa411b0ec851dc"}) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x1f]}, &(0x7f00000000c0), 0x8) open_by_handle_at(r3, &(0x7f0000000040)=@isofs={0x14, 0x1, {0x5fe7, 0x80, 0x100, 0x9fd, 0xffffffff, 0x800}}, 0x1cb503) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:50 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1700000000000000, 0x0, 0x0) 09:28:50 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) syz_io_uring_setup(0x7ac4, &(0x7f00000002c0)={0x0, 0x1e9, 0x1, 0x2, 0x3b4, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, r2, &(0x7f0000001780)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2004, @fd_index=0x7, 0x1, &(0x7f0000001700)=[{&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/131, 0x83}, {&(0x7f0000001640)=""/52, 0x34}, {&(0x7f0000001680)=""/40, 0x28}, {&(0x7f00000016c0)=""/56, 0x38}], 0x8, 0xe}, 0x6) 09:28:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:50 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:50 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x18000000) 09:28:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:50 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x237d, &(0x7f0000000280)={0x0, 0xba50, 0x10, 0x1, 0x4, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000380)) 09:28:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:50 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xfffffffe}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000105000000000000000000000000000600124000000000434953cc845cd52c8403f9101ee71b63bf3a30bc31c841d9ad5eb5533308f588143c1edcee6e06161e2f2494c134618ded6910e72e2d4ee85aea22bd12754394f09203179742e9e54e3afef911380fdf51dd851f8d7a7d3524aab040cde4c449ebe502e5f4"], 0x1c}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r7, 0x2, 0x0, 0x1, {0x0, r8}}, 0x5ba) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) lseek(r9, 0xffffffffffff7f43, 0x1) 09:28:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:50 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:50 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:51 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1800000000000000, 0x0, 0x0) 09:28:51 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:51 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x5, 0x2000, @fd=r0, 0x9, &(0x7f0000000000)="2c14a1afb00d6890c2114bcd6e0cc2ad9735c18a14523cb1074b6f4f84ed7039bef277e7b6d7198ff0ca7ac3d911f05584a0a5fcfb678ae074f7f121df3970fd2fee800e479026665228fa0fa82e1ea0cef3f85e8c470703e4ac5059ee45ee8f5e7d0a31ede9e80491613ade1d1b3698a5c586c55c8c8785dc1abee5140399969ea93acc3d4eba6b370a8ef615b5a9da6a880f08238767dd20a6183728", 0x9d, 0x8, 0x0, {0x0, r4}}, 0x1) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e, r5}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x0, 0xb3, 0x5, 0xf1, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x20, 0x8, 0x5b0}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x158, 0x0, 0xa12, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040840}, 0x400048c0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r7, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x90000002}, r8}, 0x7) 09:28:51 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:51 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x19000000) 09:28:51 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(0xffffffffffffffff, 0x8ab, 0xffe6, 0x7, &(0x7f0000000280)={[0x9]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:51 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:51 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x41f1, 0x72bf, 0x2, &(0x7f0000000280)={[0x4a06]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:51 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_io_uring_setup(0x7a62, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x200003}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r5 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r5, 0xffffffff, 0x9, 0x3}) r9 = io_uring_setup(0x605b, &(0x7f0000000080)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r11 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x11, 0x14ac000, r10) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x10000000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r3, r12, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040)={r13, r14+10000000}, 0x1, 0x0, 0x1}, 0x10001) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(r8, &(0x7f0000000200)={&(0x7f0000000440)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64-neon\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)="e398deff4ede92ded3348211dcec33ec68f139d3c630dff80277edd36f37c2be1e6da1f7dae1aa5ebf82e2e49ae23b45d7aae8a7b2251c9be5864b19cd6206bfacd3c07ba4a5ac13826115151569517515a166bd1ba74c090471cd3b2fa09b9bfc3f11a1e1e136ae4ea9d6e6e3faeb8fed77df31cb21b1ea4b413e915bfcc1eaff6aae7487fc0aebd2689d2f10561e671d79f969768ad2c4b01e660098ee30de841d1e3a6a2e109751157ee11524e8a719e8eed5a7be8505b33232ae963d2a5140c39f95e0e5", 0xc6}, {&(0x7f00000005c0)="eb37dfe2b6709ba5b86c1736418e7527a465291dcc8133f34a6155b615dd6a64e4feb536aae2358e31f2f12c49256f710fe7b7d1d06117246eacdc7d010089c2c7b2c1ee24a1093bdc6de20d5686fffb835d8986ef88a92bf1042e8344f6be36c075f08838a37d03516c35ddc0a5", 0x6e}, {&(0x7f0000000640)="e02a696de15961728053086b0ff120511ada68b631e6d830247b26e5998f9a281ff7cade756a5f69ceaee7524bac27513811a5cae1b0beb6ab3123c8d21db81c955f982419f16f05bad658051e97f35f929a028228e0cde6ae2b79fc445d05439778419191cd5e6587c1e03d97ace0c57df182556589363002bb122644ae3260cb31d3cbaea06ec9b7451e046c1595092be5503eb1e5c95899fabf4f5e408388fdb5df11ebe2eae6", 0xa8}], 0x3, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x88f}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x78}, 0x42001) 09:28:51 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:51 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) syz_io_uring_setup(0x3c05, &(0x7f0000000280)={0x0, 0x49f2, 0x4, 0x1, 0x345}, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0), 0x400) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:51 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:51 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:52 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1900000000000000, 0x0, 0x0) 09:28:52 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x40, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:52 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xfe) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r3, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:52 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x94000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:52 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x82, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:52 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1a000000) 09:28:52 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:52 executing program 0: r0 = syz_io_uring_setup(0x17f, &(0x7f0000000280)={0x0, 0xa4b8, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0x7c) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r4, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000380)) io_uring_enter(r3, 0x4185, 0xe76d, 0x2, &(0x7f00000000c0)={[0x2]}, 0x8) 09:28:52 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5b08, 0xced0, 0x2, &(0x7f0000000000)={[0x40]}, 0x8) setresuid(0xee01, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(0x0, r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r4, 0x8917, &(0x7f00000000c0)={0x0, @qipcrtr, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0xf796, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4400) setresuid(r3, r3, r5) 09:28:52 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:52 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd=r4, 0x7f, &(0x7f0000000380)="1cd45cbcc279f92c758550488f4b0c699ecdded263bf547d4c210a1446ed9931b56b861d6a35aa99c6051c96a536ae331598d431c4fa7b86b06f283a7318f5e5d956ef94bb642057dedbf977f6bac18ad5a709c19000dd81d64aaf1389041b657be03539a714eb3fa041a1f7828dcb77d137eb2ee9aaec2be0e65fc4e94908f4a8d1dbfaa16c5721f0b574deb91bf22dc5c36bcb0e56382bea5ba223285516d836301317ade0bfea157f7bba8d0f93045acfd6475fb0729cd9858e3ea8c188d863d9a102ca150b0bc0fe6714cf385baf4d261ebbaf608b03cce868252685cacb46782588fce4e401", 0xe8, 0x4, 0x1}, 0x426) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:52 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000009, 0x80010, r0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@generic={0x6, "d4c585fd2b45e5e1b528c9c9d61763ffeed3bdfffb97d08d58d21926eef64dbf2469579368d0875ceb5d5b34d5cb241aaf311ffdb81dfe6d479a5e109ca6dd4634fcff33038349bc9f3be57d17736781c73865f0889c6b4d1d2f9d51137bdd529c2499832993041ca40f18e6b5e2fde0d7b2cc0c1608f5b5780cc5c9c259"}, 0x0, 0x0, 0x1}, 0x1ff) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:53 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1a00000000000000, 0x0, 0x0) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x83, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:53 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1b000000) 09:28:53 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r3, &(0x7f0000000580)={&(0x7f0000000280)=@isdn={0x22, 0x2, 0x6, 0x3, 0x9}, 0x80, &(0x7f0000000540)=[{&(0x7f0000004dc0)="8edebfb7e02ec13a9b65bbcaa98aecd368b02562067032c814bef8754e73b69dd0b3261e653178d8ea713cb4b8f4ec36243dd6fec235a823a5a18cad0aec07e8485623eac60dd7f9a2c416ea5c72223a9bf92c8b40f02d49fa965a04742df53bf1b405b8dc993a3895963e0da3d87c8bdfb1c2fc26290ced507f2fa265e28229aa49524bafcab546d29ee0ee765312b8571357f30367d1c842bdb8f0eba74baabd06c8823df4c76f22591859c22b629f995d82e113bf549f4a0adbc4fa369f75425e0eebfeea16aa89ba92fd9631e742ad0109006e554d18ba0000000000000001ddaf410f5fcf1e14a062c5920383985bc98dfe5b8fd0d40a171383c00d6a098e53f1c50da7f85a4765057eb5bb7b7c3f9280b6887cfcea80a534d36c87f1c54ce7ac7b5c8882b724194ab8cf90ea005a45979c705dacb1f3300f6b7b8aacf25cebf61d704f33d5e6f6208d9e7683986144ee5b894a417326a5ea43860037ec95219eddb1b03e0a886a1e9bdb5e9cd6f94912162a94a0c5e77ad786b161904e031fee8c32866acad008f1b3da299dcb48ffdbed044dd340b0", 0x199}, {&(0x7f0000000300)="f2e3d2700301e0d16690721d660310a1e150180ea2c037e5c074d51ce2385457b23d5c850b97096af838e89aef6f6ab50cb10130", 0x34}, {&(0x7f0000000480)="9b083676896397cd2cb9d645183451126c5b35d529e9a5c8c197ccfc573e3ad0b21ed9cb6535cfeb5e2571976add9cc833b48c656a8a6207a2ccae7dc7ec69fdc41e01d6cd9e5f81d2cceec054b73a484471933a19a4d51dfaf53e8bee98bcff0d3e5cbd9c60df755e5dcd0126c06d9a13823f86bdc7a1968e28d31049de6bec3d80f8b56c9ad61f93b623760e", 0x8d}], 0x3}, 0x4880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001980)={0x1f4, 0x12, 0x40d, 0x70bd2d, 0x25dfdbfe, {0x26, 0x7a, 0x21, 0xb6, {0x4e21, 0x4e24, [0xa19, 0x9, 0x100, 0x10], [0xffff9b0c, 0x3, 0x2, 0x9], 0x0, [0x2, 0xf4fd]}, 0x8, 0x4481}, [@INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "6804a56437a2cbc8505567634c0a92a599df4f91b5da2bd3346a682e747f5c0050e602b645381583fa9e696dbda52daf440c896b0dbd2e"}, @INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "8899b0f627584795ce0b1bbdea73422c6e2944c2b5a9a133a7742ba502c906300d2ba41cbc8c1529bae8beda31d2f2cd2056d4f461761c6fa2e235f3d55cdba8455cdf9dc36f26b7252d2ddbe9ccbaa30e5d2f9487fa0372cb09095a507af39befe147b5bd44d0689e8913c6cc0a948325d46fb979c676b4e341738236e2bf4d034e5fee8662d13cf148415015060356a107888015ec"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "d4f173b727055666ae189c01e62a1dda30d44e843317329d2830d5d8ac6384425537eeded40508544c338b7debfbd36fca59ac0f16569c1695d6cd53efa844bcf2c55c4b6dfc43d3764005f7763cd6e91f964d7f8fb7d591a54183bb3b3ce5ee6019b34aa163de677fd6fc8bf5bf2c95d0079c3a16e569159fdaa6bca617cbf882c8a4"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "10261a605212f011fcd2547c55b25117626a719b65a378908f91e155e7e5604b54e8fef807bb987e76ca9b9adc510126a3c46a026add33012f3cdd8c71fabdf25cfb"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8040}, 0x44c40) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c00)=ANY=[@ANYBLOB="1c00000000010500000000000000000000007b0006001250000000082685bf6749ff902cb9eacb8bcd6a7eb0ad2848c829d9e3a078727b95f45afa87e46caa1bdc6df2b366c3a596182c3ca7ed27f5ee8a4feea97caf3f4836d25bba69e929d739b77e4f57d3a5d2a287"], 0x1c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)={0x18, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d38a46"}]}, 0x18}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000004d40)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000004c80)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4082) fsmount(0xffffffffffffffff, 0x1, 0x75) sendmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)="fa90b63e29b77cc883e1a14bc8521f126c07cda68097a83e19d01200f7e1e80d67dbd2ea19ae87e21da5beaffc1dc607c593b501329e97982ac0d6eb1a66c87c4fc7cf07f0fca32f6a", 0x49}, {&(0x7f0000000640)="ac88826ad5e002", 0x7}], 0x2, &(0x7f00000006c0)=[{0x50, 0x117, 0x2, "5ddbd92925039936f650fd7efa31ecf90d090e80562efc1e52272063aa7b72947ddbc1ce7c872ce659b51bda4683b25a33253d212a805d9818a2bc0004b0"}], 0x50}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="eeab1fe3b9bb2b0f9a883932051f8d49aea5a616457e0e75fb0ac00b4a2e3a0f35f8041d6bca873c434e7eac4ccb3b9f4fe650b58b3ffd8c9b6786a9ba394fcd00af76137eee47517fa330efc24d93aff6d4ca0b31ae6f432273e3f34ad7a831e615a6bd74c0d0dc344f3a1e4ec8f74e5a3d5a85352e8e3457b3507540b32c9a74f0c4d72fc6f2f1ea1a19ac268f95f4c7aeb56c31a5ba4963a07f32d625d06713680fe8beaa0a6e3a5f900c5a7e50c27a40252c4cbce0957d0f639ca184d75e66f4430f78cd06ba09b89615ebf0dd67a96c43942db32ce6e56511de0497ef63db69a6aa814ca20a5303afd2", 0xec}, {&(0x7f0000000840)="6ca0ba641abd400a0d78a727b36ce51e8807ac409ffd24bca185715350da721a389e72afe7823d927818d33ee6a25fb747e81d92b7e24c54118e9bf624c40ca01b73b179bee1939978930e2bc05284eb19422fdd53306e60eb3770ac746a62490f1b76464b", 0x65}, {&(0x7f00000008c0)="fa49fd220dfd214519fba1d98674937021eaa59dfb4110462bdaa4478b2c0b6fed99900fdc82fafa66f9aae2e5369695c2eeb75bdfcfa758e7feca64a718714ca3a5e824dce090eb88ddfc416b69d9cee4da3c5f677183d28b2f639845909ff22ba683a98a9c10bd7a79f608a80dee07a8e89c22d0a36f2a58f60e335cdf8acdfe9bf2c5fef0bedbf615314e6039ec632804ac6cd772b999", 0x98}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x328}}, {{&(0x7f0000000d00)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d80)="38a75a51e175c630ce33d2296b7c886e2531305c4cdc961d4d97bcde5849521df0a3de0f1947f26398734b4d0c2b4c0c7fc61dab197bfdc0918a6926c10d1fa5fc147ae6fcf98356ee2da18f99aa298d268a396970dadb5880485cb758c20d52ec30f56197b01efc997a4b", 0x6b}, {&(0x7f0000000e00)="801d296f33fa8b8c03692c7623403e78ec8367", 0x13}, {&(0x7f0000000e40)="c1c39a17df3ba4f23898246864c80a66b7ab1e595d6b77bc34ef4cbd42ed1a8390aa9b544b1a000bc23935694bbb073a470b3fc0aa1b167afeeab44552ef0419602d99679ff8cb18f330c9749c35d7c18c93a6fd4981bdd2af856c2e060cc3e1a42c3ceaf10585c6f7b8", 0x6a}, {&(0x7f0000000ec0)="42b3e46406503d5d6f4244942d0f042c3dfb9d26b8a20425d94d2e2a7ff7dfa3672461dbdc7c5c2588a48caeb00ce656867e49d39af14ea80bbbae2b52a215b7aa56b27c7758091ab0555529c433b6b9e2c5f01b8f9c9dfe2208e59fd09ebf8c341cd3bbd409867fd87e685f67fa39b0", 0x70}, {&(0x7f0000000f40)="d71247d11d0c0c47f1bdde34f224ae19f59f107fe462b66d4fbbd860d7b0b7333f3369efe6c4b27ebc3ea9637e47fbee264f2ee87572912e6f3aae53e151c31fcff5293edc98d89797f04c0c7d182652ddc54a7dec6da645bb59383c27cf9e5345f99c69474a4f7321d5d2db99624b61118550f03aad524f80e57802c2d16c75dce4b53e34e050b9a297c09ff4761e639572545d15b8c3a54d", 0x99}, {&(0x7f0000001000)="518fd6302f4dc262acccd6800b2f15db2c0904afe4879531fdb7e8aca38dcad41bf99a2370d1022ea4026d9265af197b06f13c7eaafc251e438e709c3ac2984639c0893da919ffdf80e7e255d45e13b0fe49db2487564b931623defba1fb3cd667e785fd498204d8ba5202e9e5e7d61f6ae1d9c2756e2f9469d9ea659144dacfd8d034c860e803a9f330afc2999bc75827f45bd1af3cf4fa794feb748cdce4a677f92ef7e7aaa51c1517022ad998c7d4dd1abb33f9aa4eaa8638503059a543383d727abe03fcc1e3f837109e583b7662ac5bca29e04963c8e06b8a8deb0e593acfc4cd0c24ac", 0xe6}], 0x6}}, {{&(0x7f0000001180)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001200)="75a259ca1e3b6f0d", 0x8}], 0x1, &(0x7f0000001280)=[{0x90, 0x116, 0x7fffffff, "ef352ac8cfdcdd6c02660af3bb27b617ce4caf61d41d17d2de2088c9d2e0abe6e71623c8556855a3d20888eca4ed44fa575c4ec22c7683e36240edf9e702dc2a5b716c6351087a99dadf3e8b4861d9c5df2a615edeb099f2ce2da5e82aac5c66bcd7a0258815b7345a92792f83b040b9f11e5a4885d987cd51813aede5"}, {0xf0, 0x108, 0x726110ba, "93cdeaccf13125f593806192d4d2785153b49246417c6bb6937f42ed38da355cec8c705e147ba646aea55f5a319c4e13648f095d4938498d92ea47cc9571d882cab3f35b529413a2bd0d0fc596f82f2e8dec061a4a3a1aab83433475f4fbd21cb361d77559aeb30c1e5a7fdf18bf304540ac0f17d8d955b7cd3667aa3e9b0ecb159234ea2e6e29e27c1750c2556ec5387768980b6c56032cff1a77b4d871d296a72d6753ff44fccfe66ea2087e8924985f1dd43b075c0329244337a699be8f49f1a9cb89725c58285510f496456ef6d8d8aeb833dcf4832ccff0"}, {0x98, 0x6, 0x3ff, "ff6611c2c2d8507a9352036d2dca3f9871053c9e59389b7d50ca15116dcdacdff015fb7dd786800203586091166dd1c9eb78f77c664969f43c5a2a15290075d5e645a0f81086c807b20691b4ed5861bd6ed7f6713ffb2289c4426f353e465144b29978067723b03be9d1b0c29a9e016fa92ba4e8e7a88c6bd649e9c1e6b168f4c052fcb3"}, {0x50, 0x10c, 0xcb, "a6eb1cbdb3bb557b6c8c0f698c587aa1b9c0425a227603786ad39821b7e0875e9a08820700f510323892709c8893497f00aec984c26609dcfee19056"}, {0x30, 0x119, 0x7fffffff, "0188c06c56874979a78620f832ed6099ac78e9940065d00228a4e4"}, {0xd8, 0x11, 0x9, "12bb9099a8c8bb791766aa590380f7f0b227219ce73432b3223d9adb6b4ab217ed97291d4b546704f8706160408ea0c26adc4cfb2b4a56a8165817969a2585d67290bd4c760bcdb6b045e15a81e28a41f5a7497f17b75ccff90c4da3c3b228e6968a20436234ce034ba2bf22157d9e9b8e8bcf27643dab057abb7a05bc29fe7c07272ed4aa53d23ea1d4b3ee8925d107d0794edd8355917c17e457a38ed01b19c7d691c42e4baa8927b7e7dbfb35868c7d09759b00571692cc96ee3f60c67e77b6d3cd"}, {0x108, 0x29, 0x2, "b14367cb9547cdabda6d124c66e541396b2a7395311c9e2da7fdd7a3ed9329cc9d52a141b5b7a28a033848f442cf5ee5f0522c0bd1260655a4fe79a2e187116a9dcc581612ff8d688e375e8196f0cff1639dcc2bba8425c50c776a59bbfb2a255df37da160f38146a1655c9a3edf5739193d59f647d0cf27fa3b9b09c9c6ecb47c8c5a7ff415bcb287cd908e01bf74ad8450b70b3540bb855356b607948a9d6ed9c396b4426a11595db2a589cca4c27a760eb4085f55bb9f5bb9124ee4b0b75fe63e277d7cfd141a4b4ce3c569dc66f51bdabe5f3236bdb479c7d0773a6d1ce6fe065a5f181b445ea65221acd7f2d0adacf7212a7f781ec6"}, {0x98, 0x118, 0x3, "64281ec78eb626378ed7b2e39a208f24a83a02d1eeb9c89720cda1e151ce49d5b7cc10d2d65f6f021f4da766fefd65bf0a81c81351ab0d0b383e047408f0558cdbbf545027b41e28c1dfacbd86f3faf408f030b1bb9ffbfb8583928a1c4d55e1f610742f5eec3505266174bd84ea91b37bc71b077aa23ed352bc34eb5841cd19a329f96f74b329"}, {0xb0, 0x103, 0x3, "150f8dbd856e00e5f6395ac3f4a47402de2dd127efb70678f3a270f5e720f1b12ddd60b665c161ab16eb2ce4511b387890555b8105f503d06a667a4adce4bdb1b83ac97320e802fd28a6c45d497f5ccf65a9b24e751148c0ddc5de31ce0fe49de4805b7d782daa9dc46cfa084e4b4786adfaa6dd5b71abbab9b55ebfee87c78f8c56f372e28965d8638aa16dbff197f52189e055434a45af0525457022e963"}], 0x5c0}}], 0x4, 0x20000000) syz_io_uring_setup(0x3224, &(0x7f0000004cc0)={0x0, 0x1f, 0x10, 0x1, 0x355, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001d00), &(0x7f0000003280)) getpeername(r3, &(0x7f0000001d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000001dc0)=0x80) r6 = syz_open_dev$vcsu(&(0x7f0000003380), 0xb3, 0x100) sendmsg(r6, &(0x7f0000004c40)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000033c0)="f2d3f97e1796ca09ecbef4bf34fe764e13106a8e27c614e6bbc39ce17f07c6e47977d1d7b234763f2b5654942b736613904aa7bc24f303a76fb894207d6fec892e4e0ed43b70eb84708a96632a204bb118bca0f800", 0x55}, {&(0x7f0000003440)="1fa3a1288e13ca1792a1f21b9d604b1a4b827a95aac40ac6c0469993b4bb95692bec9e522c18862f9930fc4f273ca711f169a5e5bf9586eab652f7e0fe46cc779e5c8aa9e07ef97ce6dd43d3c05e7652b392db26a672920ffc59342de7fffc9d3f14463ee22d2f20b6f7cb08033f557f6325", 0x72}, {&(0x7f00000034c0)="db5380bff684eac423e1a221ec80a188e3e705b6aa1212ab9d5db4d735be28bb744f7d84936ca54c1e8bb3d09d5c50f488c0c64b7adc6d77e6aeedb0f3c01d78f6a5e49a661603fc1336951892e5d532bcfe6f78f419a171f0ecee5eaf", 0x5d}, {&(0x7f0000003540)="fe4d680067111763e2699cc5573481205f803f252dc144f6c149723efb44f61ffc5d65fb540cf3f0de4facf4e72ce828f194c294f433b13f77f6420db3180536a50f0b5f21d7b9dcf91b88147b9f6307fb9575e6ad9d3d4023cd907961d1cc6ca2b46c872e8793a3cb84e0ca3ac1ee2a2967d874de46efd7650a6766b2c8542b02e134b9276bde9e9321006bfa30a1fbeaae13237d424a93abbd5d9254765b7e46b4936dd1636984785e3950ac8c53e7c5528e9cfadb046915c98bb41171a6565e77fb0c49", 0xc5}, {&(0x7f0000003640)="61df33695fc9ad7382c0c12eb677cb05a8613a7c78c312890b1e86415b1b0bdfc0deb63d688fa73e94a4c65e85aaf41a779185bc9f6b3b7a1717a2861dd8f5094538c1bab6adfd66b038c462c9910d2ef205cffc8f0765ba0d4807b08c02dc61154fad398e6f07fb5d524f38f5d32489bbe83b6be9a661e69f40a8d3fe825b78545eb206aa94980cfd8a898331f88aee523946de690fcbd76e0e25c08e6ac13043cb3c490d824f3c582be3ba9602c2038e50f46b619eec0e75db7f9415d6478c1ed7290a07da5767f61973d6ac42083eeaad6d83e590da", 0xd7}, {&(0x7f0000003740)="6e59bc10f7062814e94a31a7a27304754dc469218aa62b8a4fa3f5924be86daf08e194dad94b368d68e73fba512550da5ed84f1cfdd34db492c64585701f0592bd1a63e45fcb0246a14fc2b7a640b92bd57d0c641e4a344042dbcbfaed82911463bce36f6f18fc1ab2713c40f31f621cce4d992f849367f90ff779de6872b62ebd58ce6ede2bb9a6d56d59dffcee7ad493828dfa79c31002ffa0faabe8fea042ecb64ff8cf38c05000cd51bed81de40eb8", 0xb1}, {&(0x7f0000003800)="f34c6543bc617c9d59965a668af094485b6d57eeff9e12ea302a58ad345381d3608279b609378d04a14b99bd2738c78af3a1523b45db9749c7dea3386f74c7c716bf8361e4dc230d11fc77017894ae661e015972c2e8234998d6fa7c971cf7fa511bd3b88d4b1bfe13452771fd7b4cfcc4562a0c558965e4bc75504524e72884b23e559df31bb093e65306859486432ebb91f44e1f8cf6e6815acd19b53b5d", 0x9f}], 0x7, &(0x7f0000003940)=[{0x60, 0x1, 0x8, "99a7e076e897a86e91ee681fe1b2d41fb15d97e8d984e187cfc3e3e39751975d28178a0d06e6729b636fc12751eb33785c73d09a74878df4224d316b69070d0015ef9d99da3aa1c6406730a1"}, {0xe8, 0x19, 0x3, "75e3a9398427fd730f7a030acf1ec85382a1764e7227eb8ea678a43d735f5ec0565e3475d127f097a795ffff9de9f61c0bec13ae898ea72e82f830661e4b0b6ef7233f6b1d35678f71bc190e860084a98d3954713ba0512cf8ee2006e5203c2686b82b94e610019bcd6a3a6c700a2c947e0f0053a61f77b72851f33251d0da3abe6f10d0157fa8fbf507fbdc6d7a5b40c84b6ca53f61d1051dd14b880b3c72724c55b59f1f71aa0b9d69903a62411103c86b1c1422f7118681b3084f62dd004538713310124a6f0e7e3508e72bf635783488e0549a"}, {0xa8, 0x84, 0x0, "c0572f6576cd2e44e405d8ac2233e37e2253bce30f7be4a20c621d247b91052384e1d05b10627cb749df2cac9b0c03d42e05f9761133941e775177edb9388d7696c261cd30f44895446ea2661f1206e2ebbbcf224478d1c7ea438f93a041899f4515db24d4ff8a5cf8ed5b161575d7e8f90eea6fa4aeda97e32ccb52737411f119f2e8a6ac603a3f6316291978b41973bef9"}, {0x1010, 0x116, 0x20, "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"}, {0xf0, 0x10a, 0xa72c, "32dd5dd5285032d19e03ae50e2a62f5774f69a302bb9550463f29e38cd2c93851932daddfe1672939c095990f4792c9c797bf4b05e30a6629a5650ed17c39ad2029e2fdb31692095039de8f0e24e613a9906d38e2255319ca1268712a2bb10f1c8f147119f24e5443b8305c0a6af56660b2494621bd04c058b4d9bd58b648707f8eb4567419d2c867de38d4eea05c4b6302fe584deb404ef7fbc15d14c5413c053276009dfe791dea7fc0d1a90653252430891252078388a7cb6be2750be262a3e6a7c59e7a2af2cb6200a932d9a07e91d0c2219d4eeaf835d15e990398138c9"}], 0x12f0}, 0x80) sendmsg(r5, &(0x7f0000003240)={&(0x7f0000001e00)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @loopback, 0x40}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001e80)="6f67215fe515afa2e1eba677d4c6014633867c59407051b07da59854cda8a2871f5f41e1fd4d370e042bf2e9b761a62d6531fed86f0d52354ad379596d3893751d27c7a6435bab06d134af669490a399a86a35aa9503e953c3fddbe8c14b1361e81892b5e6de00b8c7e6799362a1e40390f239489e66dd546302d16c4d3ce49477db7af9748ddae9", 0x88}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="f10e57bae936a13fd7035a875858b1ae650cfd834892acb1869f9887b1b0b5cd6f61c8004d0aa3b8ce7d3789487c6cb5e370185a640d8af5c1bfe088cfcd4f55395ebd84ea9940d2139268b53fe4d998df2850dd1ad2d70646456a15d00ca44f0b5b08b314224a49f52f65b4db0fc67f4789f8614d0cfe358384c48612cba52fa56d8ba93eca0347cb12cdaf35ba9e2a9cd185d49c57cf31823f17dba419c64d27f8b279ba5b5743a652c93d402dfcb19c71bd269d12834748b0e683fc03a09c42fb657d96bc77f70a203151f76310e3366b1d3dd9c1f4316411d40aff8145ca26a39d591a", 0xe5}, {&(0x7f0000003040)="205c05fb6ec7c1f5e09060f2d1bceddb914a1c73dc22227524ad37fc87455787d963f46b07a2cb92ce228ff9cc0433a0a64474430a7dfca0cb0fa627e0728700f8", 0x41}, {&(0x7f00000030c0)="36e2c825d977f3b256", 0x9}, {&(0x7f0000003100)="a11bee99468c2f3525852cde2c8c340dd8129d769c399c556f968b8c62fe7eee787126bee41ca3dfc17076a251c4c77377e2dc7711477659fb9b9375630e16fc40488e36c7c0", 0x46}, {&(0x7f0000003180)="fa2f1de97151d06a1fed57a3ad6e11fb1035e42e19769ce55895569653a44739b9495749446ad2518a27f4f7f766c39aee136cc98121623b3d408e9acb", 0x3d}], 0x7}, 0xc894) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x400000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000001050000000000000001f10000c9b4b4bf673ab5641d0e00000000060012400000"], 0x1c}}, 0x0) pwritev2(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="0283e010912f8cc0c48b368dec182e6ddde0c441669fe4febf9e866eb36fefd12a87d24aceaea8d89696acacb79c8058d7ab5d2d523c86ed50e90452754c9097a7d2930430d6e0a46b3f036a64cd2cb14068e3553c34f0a0c8f27745fb849d3cf1af69fa670c46349249f0f680aa482499cf0b6d207690a2ca9dd52f8cc88b66ef8c580cead423fd4ed20103e84f7652ce4ac6bb867adac190a869c332a4e8462de56424e7ed0c03b44b23838b13ed79a3c4154eb141191595dce015", 0xbc}, {&(0x7f0000000380)="1021f995ec8407208c97e4fae4455336f1c62cbc6c9b1272d9a0ffea107f785719db5f414f57dabaf7cd0f9538d4f71d5fa7cbafb104ba2731b5076a897f8df1699e569909dfd85f8866a8de35382c66d3062d719e540453034fa9a10afd7dd0fc98da6322abde5916fd3b30530f2e41fed0fb8a55d5f91c6c33985718ac4783eac7c2dff61915", 0x87}], 0x2, 0x1, 0x7fffffff, 0x13) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x800000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) [ 699.351202][ T2997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 09:28:53 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x1119, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x8000}, {r0, 0x48}], 0x2, 0x7df) 09:28:53 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1b00000000000000, 0x0, 0x0) 09:28:53 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x10001, 0x3) r3 = socket(0x2, 0x803, 0x9) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast1=0xe000000b}, @l2tp={0x2, 0x0, @local}, @isdn, 0xff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/129, 0x81}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x84, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:53 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1c000000) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1c4, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) (fail_nth: 1) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:53 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x36, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) io_uring_enter(r1, 0x22e0, 0xb7fc, 0x1, &(0x7f00000002c0)={[0x2]}, 0x8) 09:28:54 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) [ 700.224656][ T3036] FAULT_INJECTION: forcing a failure. [ 700.224656][ T3036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.237735][ T3036] CPU: 0 PID: 3036 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 700.246474][ T3036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.256528][ T3036] Call Trace: [ 700.256537][ T3036] dump_stack_lvl+0xd6/0x122 09:28:54 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1c4, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) (fail_nth: 2) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:54 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) [ 700.256563][ T3036] dump_stack+0x11/0x1b [ 700.256582][ T3036] should_fail+0x23c/0x250 [ 700.256597][ T3036] should_fail_usercopy+0x16/0x20 [ 700.256652][ T3036] _copy_from_user+0x1c/0xd0 [ 700.256674][ T3036] set_user_sigmask+0x53/0x130 [ 700.256699][ T3036] io_cqring_wait+0x31a/0x8c0 [ 700.256723][ T3036] __se_sys_io_uring_enter+0x641/0xb30 [ 700.256746][ T3036] __x64_sys_io_uring_enter+0x74/0x80 [ 700.256764][ T3036] do_syscall_64+0x44/0xa0 [ 700.256787][ T3036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 700.256812][ T3036] RIP: 0033:0x7fea7f4b6a39 [ 700.256825][ T3036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 700.256839][ T3036] RSP: 002b:00007fea7d22d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 700.256858][ T3036] RAX: ffffffffffffffda RBX: 00007fea7f5b9f60 RCX: 00007fea7f4b6a39 [ 700.256871][ T3036] RDX: 0000000000001119 RSI: 00000000000001c4 RDI: 0000000000000003 [ 700.256883][ T3036] RBP: 00007fea7d22d1d0 R08: 0000000020000000 R09: 0000000000000008 [ 700.256894][ T3036] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 700.256906][ T3036] R13: 00007ffebc30e9bf R14: 00007fea7d22d300 R15: 0000000000022000 [ 700.361232][ T3051] FAULT_INJECTION: forcing a failure. [ 700.361232][ T3051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.361277][ T3051] CPU: 0 PID: 3051 Comm: syz-executor.2 Not tainted 5.15.0-rc5-syzkaller #0 [ 700.361296][ T3051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.361306][ T3051] Call Trace: [ 700.361312][ T3051] dump_stack_lvl+0xd6/0x122 [ 700.361333][ T3051] dump_stack+0x11/0x1b [ 700.361361][ T3051] should_fail+0x23c/0x250 [ 700.361379][ T3051] should_fail_usercopy+0x16/0x20 [ 700.361398][ T3051] _copy_to_user+0x1c/0x90 [ 700.361468][ T3051] simple_read_from_buffer+0xab/0x120 [ 700.361489][ T3051] proc_fail_nth_read+0x10d/0x150 [ 700.361513][ T3051] ? proc_fault_inject_write+0x230/0x230 [ 700.361561][ T3051] vfs_read+0x1e6/0x750 [ 700.361645][ T3051] ? __fget_light+0x21b/0x260 [ 700.361665][ T3051] ? __cond_resched+0x11/0x40 [ 700.361682][ T3051] ksys_read+0xd9/0x190 [ 700.361699][ T3051] __x64_sys_read+0x3e/0x50 [ 700.361718][ T3051] do_syscall_64+0x44/0xa0 [ 700.361743][ T3051] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 700.361794][ T3051] RIP: 0033:0x7fea7f4695ec [ 700.361808][ T3051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 700.361825][ T3051] RSP: 002b:00007fea7d22d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 700.361844][ T3051] RAX: ffffffffffffffda RBX: 00000000000001c4 RCX: 00007fea7f4695ec [ 700.361854][ T3051] RDX: 000000000000000f RSI: 00007fea7d22d1e0 RDI: 0000000000000004 [ 700.361864][ T3051] RBP: 00007fea7d22d1d0 R08: 0000000000000000 R09: 0000000000000008 [ 700.361874][ T3051] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 700.361883][ T3051] R13: 00007ffebc30e9bf R14: 00007fea7d22d300 R15: 0000000000022000 09:28:54 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x85, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:54 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1c00000000000000, 0x0, 0x0) 09:28:54 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:54 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1c4, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:54 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1d000000) 09:28:54 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x0) (fail_nth: 1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:54 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:54 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:54 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:54 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:54 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 701.167491][ T3073] FAULT_INJECTION: forcing a failure. [ 701.167491][ T3073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.180800][ T3073] CPU: 0 PID: 3073 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 701.189575][ T3073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.199622][ T3073] Call Trace: [ 701.202911][ T3073] dump_stack_lvl+0xd6/0x122 [ 701.209272][ T3073] dump_stack+0x11/0x1b [ 701.213416][ T3073] should_fail+0x23c/0x250 [ 701.217831][ T3073] should_fail_usercopy+0x16/0x20 [ 701.222974][ T3073] _copy_to_user+0x1c/0x90 [ 701.227469][ T3073] simple_read_from_buffer+0xab/0x120 [ 701.232880][ T3073] proc_fail_nth_read+0x10d/0x150 [ 701.237892][ T3073] ? proc_fault_inject_write+0x230/0x230 [ 701.243565][ T3073] vfs_read+0x1e6/0x750 [ 701.247945][ T3073] ? __fget_light+0x21b/0x260 [ 701.252793][ T3073] ? __cond_resched+0x11/0x40 [ 701.257473][ T3073] ksys_read+0xd9/0x190 [ 701.261714][ T3073] __x64_sys_read+0x3e/0x50 09:28:55 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 701.266265][ T3073] do_syscall_64+0x44/0xa0 [ 701.270694][ T3073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 701.276608][ T3073] RIP: 0033:0x7fef813e35ec [ 701.281015][ T3073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 701.300641][ T3073] RSP: 002b:00007fef7f1a7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 701.310118][ T3073] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fef813e35ec 09:28:55 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x86, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 701.318075][ T3073] RDX: 000000000000000f RSI: 00007fef7f1a71e0 RDI: 0000000000000004 [ 701.326309][ T3073] RBP: 00007fef7f1a71d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.334279][ T3073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.342244][ T3073] R13: 00007ffefba0e18f R14: 00007fef7f1a7300 R15: 0000000000022000 09:28:55 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1d00000000000000, 0x0, 0x0) 09:28:55 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:55 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:55 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1e000000) 09:28:55 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:55 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x87, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:55 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9400000000000000, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:55 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0xec0}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:55 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x26}], 0x33e) 09:28:55 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:55 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0xe00}], 0x33e) 09:28:55 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x2, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:56 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1e00000000000000, 0x0, 0x0) 09:28:56 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:28:56 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:56 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x1f000000) 09:28:56 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:56 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x88, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:56 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x36a) 09:28:56 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:56 executing program 1: r0 = syz_io_uring_setup(0x185e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x1000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:56 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x1b3c, &(0x7f00000003c0)={0x0, 0xbbd9, 0x4, 0x3, 0x0, 0x0, r0}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r5 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(r4, r1, &(0x7f00000004c0)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4000, @fd=r5, 0x80000000, 0x200, 0x1ff, 0x10, 0x0, {0x1}}, 0xb8b) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1a92, &(0x7f0000000000)={0x0, 0x774d, 0x10, 0x2, 0x1ff}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000380)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0xd8, 0x111000, 0x23456}, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:56 executing program 1: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000280)=0xc) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002040)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003600)=[{&(0x7f0000000380)={0x1b0, 0x3f, 0x1, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0x89, 0x0, 0x0, @pid=r0}, @typed={0x17, 0x15, 0x0, 0x0, @binary="974cc7628151e7050723a74af20df7a64a64c0"}, @typed={0x4, 0x5c}, @generic="fa", @generic="beb6b6b06b899b9ff9f71f954a347752ea37b0fd30bc8a04786edeaac99892cd7f32ec15b0010452cd07", @generic="ff811384c3a4f2a39368296cc4e6dc08e81eeb50126a7b0a4b43f24d91602d7a7594f87d6f84070276c386cf40416d5ea452b62ec4dac8397158a47246842a", @nested={0x10d, 0x44, 0x0, 0x1, [@generic, @generic="ca03c4eff65145176588f26abd3d2f10a07b12984f076a0e21136553", @typed={0x8, 0x3b, 0x0, 0x0, @u32=0x200}, @generic="7c15533df1a382de34c2d63509f095e7478b9133fa935f5d55fdb55e33cc99cc194d4be36e5d672361fc32cdb3ff966128208b41c547115557aaa22b60de8306d563526981ec11da1efcc78967acc5e05f1ca3863e26ca60bff1dcf5ef9a91310cc16a48dd1060e5b2e82f13f4f687763776fb8a1abb6c43091043e90738b0aefe15e04c86f84c1bf128f978f1025f61ddf4fd819f6b2abdb85fb0472c872f70f571cbd4211c3ba5d712a6ba01a8b6a08f975eafdf11efa04057187b3ae622f7896d9e371c1ca5a4629500b9b914eebec954697a20374fcd5f", @typed={0xc, 0x4e, 0x0, 0x0, @u64=0x200}]}]}, 0x1b0}, {&(0x7f0000000540)={0x1288, 0x27, 0x400, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x6a, 0x0, 0x0, @fd}, @nested={0x89, 0x70, 0x0, 0x1, [@generic="69ecfdc1a965230453439252fbcce1e1bee1d798533de2fe752d15db56886495a0230f302105fe680c1e1eb0464e86024de20f1b04786e392ebbd356073561be8b8c2913891d2787e999f6d28ad6e163a9ef0f27af4ba4e85ee13f102f5a671da88fb069ba0295041c04f4d1eb5a1298735d38327d39427a2b8777e631e13db30157800243"]}, @nested={0x10ff, 0x31, 0x0, 0x1, [@generic="d536d9cbd502ca49a09d7114a280b35400a2530530059c4f91ba1296040c871b9c270954ea8ea5fbf4c0026bc5dc93f95841169301f3f1d3aef1e4795b1846f6f8480c8d9265bd518fe08f601d74cb52c98a4b1c53b0f5ec4b262e548911a56bed0bc25069002538f1009b3164d284bf3958be98b1effd1d699c75f027292cd24ae1369da34bfc611ddf4734084360c4b117d22fe2f396e958be626e5b67b6099d1a52a5fec2a08f7b115d3856d2a4024b03006c294f32b35c33171cbe59c3dfa36b736b57f75ef5ebd213305ceea588d86c2f292329506587040948096e33708f65e86e9df105ab0957d922da0afe13dc55e5006aad4246f0d31aa9f0f112334f0bdc37fb7660c485da85579038e170d74c3264e6906e0e52b1e05a1bdb30615216839f8c2952b741bab38b88076be8f991248bf356b962b353714a974c0b04eec90cebb51d2e96abc1979f7a03cee7858fa6bc6da3545d92e7f80a9b0397c3db3728833870569a4ee026e80d9dff643542743d71a050f398c95c4e589a44eacde43ac638723373f797b39ae98cc1476362dea3dd8556d5ed073935301acb7cb22818cbf70a64f4de3bf0cfa280d097e4dae87392bc6cde78012f4634f941fafdf5be9e252f544636e19c031980022903a7beb7fdaaf32ad7cd91f408f542e36bd6e15c3ffe7fd8c91da52d58398f396ff872078c4e3754320ca4bb31f60f77821684a1d4c0b577a8af5ea6d3047b305bd7f4762dcd0136a6e9837566b8e82d14bfaa14a3f6c0c9757059700a849632f7573388935d14adcad92d10c4bb84a52b73bcac02da879aa06755c8cb9a8f5676dde773ea94f01fecef5dd9f975a2a41d5f5b7bbe38ecf5fa03fb9b8a4e5797652e3d5889d5bfe75461772bf494b99c8c3e965fcb169c44b39b34222aec939c2be3783bb92a46e164dc110fb23083ba8f70f070089ad7e6b67c6757aafb6c9507fd446b7cedf7af1a0d9079e047ecbea2a72a5173b7f45dde13329418b9b87b52bb8e6f8d224dbee3abd2c32d46524c0a39456102fa0c100a1e01993868baf3fa3d06c450d5e8d8972b8c00940f432c54c29e70ca2cddb3669044fb8ed5f95a7b8282adf1067411abbfcb1cff96e41e9bcf424c6e8cc2ed09b91ae0630b40c09944e9cd3df45c48ce7fb962df3ef52597e0c5d07998091e04a3fb081bc2cf61fb1174275a4521786eba1046baddcedf615214e2ea4b5975fa7246ed12dbe579f04fc4410c2c463fa6db5d1677bbb0aaaee9cdc981db8d00a108ecff33607db32db0c989b58479509824e5cb6e36f0816638cf2d59e7c0f1a3fc7b8c1281170849352c5d145df869cdaf87025a41be48cc2f817ddbd287469041f59d17dfab210016e49bf2c3aa8d273b628b2e5da386608d81c7e1c19544559746bc4fee8db6afe9dc23e759cff917445431b303e56c1b1209fecfb4c9c61487fa2e8165a627063c35302c360b56b495d679f5d0d0f6503920a7dd464caaf347c2e59d02c0e7c659863ff662b699ba9aae22d5a6eeab977ba128ccbdcc256673ac119b6f78641d09e7511fb1ed3b2aa95f2dfe2a3a51777fb248e70fbcc927cc61e34a360e29b756c942afeb81ff5f7ee7aca5fa08fa389b636838cdf6bbafff4b689b0deda801e1716126968857dacf19b0bbb805a827ea5dcc633d1f19b7ededb165fe8c675f4eabbac24a07ade000d57401b4253568a5b1ea950152f26cc84a1251b2d9247609880a529bbadca7076dea32d17b37609676b0b28e075e285b5d8c77c1f9cf69d9c93bf127a3fa2066a6f8ecd2a91c269f5ae5bdbe3f85767f9bfe2c2098ec695f7d85ebc663e4d4a401db766d2449cf318ea9e72194e969e729ef32ae4c22b2dea8aeca2a042f56c60aef2bef4fca200cbb89390272c0b8bc34e68b8f99e9e99d3ff1fdb4966451f2744120df9bcc26bb7ab17efd6453cc6fa5ee03f885b5d4fa2da44f5b216889f3e9617a2f55a9f9f9a338ce72d98bb9795e4bb8e6bba23f2169a15c9416c43b68622ba691328488c7b2ebfa2fb48dfad6d734738a1901b99b11b71185b58dd4c833a78f33ddeeba733095051cc0011f27eee84fe72e16842de7be17dc40f8cecadfc1cd025c880d44d309e6df9c5ce49307a14aaf84a8e82a202b352bdea0830e26cbc26843600839072222b21946f69bf3b87a04dbf25153fd6e42b6270c35fe81f640eb68651beadd5958730cf426c94218ba218f2460b4cd806c92afbb24cc72574cd634acaf34a58a6f606e59c69c825adeb8a6feb4fd2fa2e209fc8a050cede8ea70fbb4fbf29c0ea6c67baaec4c21f5a7c706a2095beca7e8895318e8a2e89abed3eed5eef4a10aea9b0615af4bd886643b161c0380399a9a850c9326689b33f1a792521de049355e29ba7c37e879fe9a1ef5508d7018d29ce76bdf365a03d65faddb91806ce4f8c7ce4edd5a36ac7ddd9d5d954583b6df81871c1f8007d394e358e166b1e8951f8b0d98eff819327bcfbaaa5e697fa5f9a06e37762bfe44c3595058ab9345f684695544968d70bf8cc94fcfa2aeb3f3c96c295ff946cc10f46d9f394498033d936f95a894d57f11d3a81a0fde6fa4f52ff51250b4fb93b375ea3559efbbd6647f0e74f1d7168158ea1846a69d86786f96b2125a8fc06c956e2d87d5cd9e0ee2ed61218f7309a00b1a08835d6514797887d50aaa4f4fed279763cb10d6d49704d4c87d72bd0011911b480af5a1b397a36c34eecb5cdbba3b0376b3053728bf09739c0d45c44f5a4f27c38b907bf05dd247eaf58e0c6fab299add36eb1c0c072297cf003a384edc4806cee462b08bad103354e836d7d0439726ac3246578ee8bb84525a12d698de528c7b9efa21881b89f2b4a2d2d3585b45d90c013f32261b6a9f2954fc314d0332b74d73511147a4fd08091ee2195ec0184fc0a73d8916df49f8e52c2b7f2135b55fdb9bb6bd717fc1546fb08e765eb441ded505a21d2342aedb0f916e35480334fe256ede4219db029aaaed1474e63d4d1b535ca7aed68d9b9148cb59512ab3250f73097a27209b7c25a3882ec4728b964b0671e87950f2d3d0fbe2fed0199206e2b9f2f0708aa1177166783897897269def27cb7a5d5592213cca24892f85e151abc1cb2b9345761eb7d99974ad13d433998be3f8c6e8c6c790d669f7a5890a1d161e4d9f477f8af0a21231923da377607dabdba51a42db7fbcf5bfee623a8cafb62c34e49d7c882550a5eee393e341244330df01701d251e81b6e1e09bbd25adff80152cda23fed07879533338c51da91642904d27d2c9dc4d757fc3c4f0a3ef5ec1d3c830dccbfca7f024cab86f4c998b7bd0267a6069f4d6207a08790913010997f630b9dc93c4e4a46089a338cc68e4f7d19718810606befef83a2e5a6c9166b22fe5562ca5708bba7c5a01e3aa892afac4d122a5d2fecba4c1d0344835f3e661650581d4521c8e34b96fa64cd07f01713e2ab47ee2026e6584f4f18e25d8224991a3d1e44efd426273109ff8ecc42a192e951c81745c20d0d0da1ebdc584bbcf5245405e6144183b8b6ef678027049c71baad8b7ccc778793e01a356c53bf11cf5e6ee84899ebea9bb7daa15eac40af67fb7608e03c1f6250223e948e5bd5cfc489e075d4193bdda97a8eb5e56c3815e31d5fd5c4d6bd07c2ce820fd558a976c7d9907f8e5ff2ad0e2fcc80e631eb273374cb6bc951112492d8e489d9804436b2de8b8230f953ef34daf8e3d56b3c12d8b28927076866a24678559d65441401a08f61168518698ad108e162fdf58abea8ac1434abc23c35e627e6d5d39a832d656abf92ecb29e9c49c37cb8866234430834739bcb2131595180defd99cb2d5ff655fb874989ca13fbcc358d65feb0decb47f1cbbad638a07f785cbc249d3f4c1cb90aed443ce84b3bd17f2d81285ebca56e7447d9b70f238288cf816e62e0f78ce2444ea3ee33f0c02a6a8c9e4a453cc97534c70a5b668e332db038b778695d62212fce6accbab8fa9bf47bd7c7f4930f50f76de14d27a27d24d31e57b6cd1ceed8955784cff7e021e5a8b986dc326731187ebd37892f4dabf552744ae293af767d4b94ee1e5b6f13cc17199c1db45227cae05dd41814c10e3e96ca3db4633e65a655c9150ef0fcd67904a778f7a83d06730d8db34af0c1860e57eca1f2e1a7fa2bbae1f375423f8192addb9e6b524130cd10c6313915a63cd0530de897fbb4a714d13cd8196b7762ecb46bc4271baa7967de0ce7b478b9979db2db577c69d3dc21a9bb22c291e0651f969765b74dec992fe4671c31f735683f16028dc08e750dfd8cba68a19a5aba7cec9c885e7af3da3729336fc9d48b3f0f434ce9206fde56079378b7df818dc03c2c3f05f91afb47b3e947132dd9c7c59c86d0d42284e9b86456de8123d1df586c8b54465c523ed79b641224fc568bc13b1b150d45ed02c69f00c6572274ca058596b1218b92fbaaed862cd10d81ab925160a57471ed78db083fb5770ff6be3c9cf47b3675ca475cc47b1a9fd216b2ca5889d9ff216e701797f29beda5f7fef0528f3e1d8c1a151cc6978333059ad517661c865ce3a10420bb5040bf85294a8134b3297925a9d467313bd9a53ebcb1f0b8891aafd829bc3ada7d6425513f4ac279ffafd1e13a127ff156547e5ff778074cf46932e8e5b25659c2d01abbcd40f8e4f89c64c10497a9809957db9afbecdb997a8668b5bd7149d5bf72bc3addcf58759ca84b9afe3b2648d24d4fef7f00051df951dd454637b451a02e83fc79159945ca08f933df29582cab2f959046536728edf9b72753df211cea070158ec17b62bc8b9605281b777fa670b21bdb1a7f8b6bd4d298ae9f41cdabbf1f88bc67c4686cd376c6805fcc9d37521029eb174e210bb4b310392b820f21cffe997b3389873120fb532889f88955529251cf3a3f343c7da21b03b9092685a86a28f74ada12e7fb8a41035c8cf01182459d447378917fff0dedc640f7abcfa50e8963b922bf45f011158162f2f476731ae1512c5591965a1a2b388353e3ad349cac19e790ab42793d5852a157f661ff3092f610a104cf2e1346076acab7abd717146115ed88f043fad846036d827e2a62735f4746d0b51f425b56ddb5cd004f510e0cfe4209cb45e082a31e06698b9bc5f7a31e255af4757c888a8ec27e4e614d130eb01cf54c57658321b2d174a5059d0d5e42c27f978b2dad031d8be0b731eeaa34a71e324f5c247448530a70621cf1fd2528c18cd57a15af152bd611fb1f644d47d0ae06e6402a784426954840441fb40227474b3891f54a3344e3f895cac4c9ae7f9288af4e965b3abe67d18942c93243a07ff02d3f429918911d00eb690334f9283d47d933566a824c0d3f6d69a23fe4806eab4ce5e2380c82dc622e355d7a5130218e858822ebdc8a5fcd6bd064e6596b5df263b8376768a4ad0d0a7de79337ae33fc4756b06dd35dddde65362b02df8011662a9b418d7409a11568b07f8667fb6ee6dba22d55fc8edcdb22482540858d6301405e747eddd87392969d3782dbb29c64d4cac19cc1f516dc03cc1aecd1cc79a4adb2e2c16a36503d6bd0c93aea53da1c4a2c44cd90b58209159c20d69a3508edc75d2078d7b3a814735a5cc98e8ecd1e2d550d53a1aabea0c4f47878a27e532ce681b29fb6363863e8b0699e857d89f3d6dea71d65bac48a6947d6afe41dfafe6d81e734fa7c8c0390a8db75aa0818ecc39405d2f8e52e4462fb92fe5c3759390c9c539f86144b2eff5bf31d637e179fcc48491ab2050c31b4c", @typed={0x8, 0x16, 0x0, 0x0, @pid=r1}, @generic="dedf94ac3f594ce9f400b3c06b03fa3eb454486aedaf99d8373bf8ebc024f67564bb0c2e066fe279883a1c0a2cd8cf530e5dd65d950627a0fcef43f281638b58a8db6c71025dee581c7303d937cb75b92f800d8f79cacc2a31ad08c02cf4", @generic="88b28c4d7b8ce67de54287231248f3b8c779b9b4672824866aa3dd4ec3ec433b7dfd396de2d33a049520fd7b3e9b193a9dd87d274290d0212177738cf73af744c04d45297aaed6985cdb7e147ed218f047baa3ae19b8bcc57e20b4702404a5a91f62f97f4ecfe10929600ae6b94ee56e9431afecf072963d738dadf0a4e3f892714a7c62b5c8b731f1", @typed={0x8, 0x8c, 0x0, 0x0, @u32=0xd}, @typed={0x4, 0x44}]}, @typed={0x7, 0x61, 0x0, 0x0, @str='!!\x00'}, @nested={0xdc, 0x39, 0x0, 0x1, [@generic="c5d4873cd55ccd91c5ce5fe0300d44c028d53c1a9e0391dde5a64b55daa86189c6dc1f52f6bcd32d953795a67dbc768feb24365e426d56b1208de2db00c242570053a15ff2275ed218ed754cc13e117f03168d2741a781194da7da72fcb37fd8f22a826bdac0a70b3c0e7dc2db27418ce8c6536af8cf9402cc92cfef933a2641152570d7f0aa2d516be32c0b81bbb64274dc3d20c5fccfab127fd2e8c405ff017978b1adde3300960586d5c149f6b89c243644ce4c5bd6fcc2ddc4feb59222724b14bc6cade0e8f454bdcbd9572ceae902ed8eef83724306"]}, @generic]}, 0x1288}, {&(0x7f0000001800)={0xfc, 0x29, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@typed={0xc, 0x49, 0x0, 0x0, @u64=0x8}, @generic="4a65335d261fe9ddce402a2838522483a108a669f910e839453c0e68138cc068a670cb915008bc2195ea551180b7b4443f6da14bf2072fe85c85cd9b24b8b8bbbc60d0666209d75b52097f789a0e648e61eceabd48ce22153cebcdf45f3ed780cd97f36d37ae0028af1156faa79dfbbb69d3e2e3c29bbf347a9b8f1b8891c6ca9ed7fd246c3613ce5125b42e9404aafa3c55f7d52c24f3327c22af36", @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x25, 0x26, 0x0, 0x1, [@generic="b70c610196288ebf8db19949eed6ff02d94aa7319d9d2bffcbed", @generic="093d19018abb35"]}, @typed={0x4, 0x6f}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x8}]}, 0xfc}, {&(0x7f0000001900)={0x5c0, 0x34, 0x100, 0x70bd27, 0x25dfdbff, "", [@generic="e5309951014629603cd9cc0c9877a24296c7c046fd7e8c42f8352c34f4cfa6ba323a8cbd5b363aca7b8bee4e25b3c86092c57655e804b49f1f8eaf40644437be558f1370368820f1c7", @nested={0x135, 0x86, 0x0, 0x1, [@typed={0x14, 0x60, 0x0, 0x0, @ipv6=@mcast2}, @generic="8763979e5746719a0dee1e63b561e46dbf624faac2cd434a185d81fb7e137a982a2c07918991b73aedd4e872b1ede33f28e352acc379faa2b9bc1b05a41874de176a6c2d6c483d7e9ed582ed060bb791b2379969f7b97a78e569da3bea7cc47592d776bafbeda5165909ffe9212be9e31f284c0b5f09cf53ac6687256408bb5c51a4f69e70c36edce50e56d262f234e52a23a18d073bebe3a674f05e335bc33cc3a818fe2cf94fc7df57f9eb71214c9ad7749b8baabc33a7477309ea2cee9ac8", @generic="5c4c1ed29ee6e55b72dfe2ded74271e485fe375ff9056ffad9021651ab246bb1deb8fd86d922146710cb257bc88d921308576a5c18d1e4f1c10b169a4e7a3c652d2e5b9aa20ac3168100a4a269ad7220e06c795cae", @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x2bf, 0x5, 0x0, 0x1, [@generic="c632d57df0710377b882172507bfe2d7484bc76deab0094e13b0340e3f9952607ab9a14e0b0bde4948ae069c535b703354151eb8a662cdbc53868454cd04a6a30c896b9194abb63b", @typed={0x4, 0x33}, @generic="0504834293c9708f5b9acc15600f7bf3bea0601ac303f94a9274eba6d0fe71a9cd6623cd09e1658e5a123656b2894085073802ebaf05409ec0d73fed27a29bb2503b1ea3135c8cd049107fd3f63c6cd08ba529681af3b1a489c4114976284729c1c3b3f55496c334cfbf53aeb811124edc05675f20a1cf0d9eaf98a538bf89a3dd47b0699921fd0155d44450d3dc36de6de439606f052042bd404b503866a64181d1936211ec9dfab549eb83c85f219ac0ac825d4b3ee994dd8872cf4e5195912480e2498bff32d78ce9ae5f2ac4110f9b14ccac96e0c3fb88a7bfb1c16cc3b70711", @generic="29b37d6d73a0b3257648547db38ce656965dddf95d", @typed={0x8, 0xb, 0x0, 0x0, @u32=0x7ff}, @typed={0x8, 0x18, 0x0, 0x0, @uid=r2}, @generic="f63ac9127d7e712ffc4e27904dc3e73ca4dddec9f7877be764111f77de7324a430850d4bb9d4934b275f6552305df804f532bc14d7ca68b557675235e87052fbaf46b67055df954afdb56f7cd1ec84ed6adcb2224ee68a1427b93e1fda5dac2650a0f209dcd4775411b882d127595295539c0cb5b7f39be73a30b630b6bb0d21dfc9bf5fa76519472d3b25534eb75166ed83721b0f72771dcab0fb4feedbe92853bf8bb5b59a", @generic="7a33da65ece30b61e50f78e69ad4e250ff305fcf677abd0e35ac180f3d7281628a3d534f4e75bcbbe1dea1d81fa6d9dccbc94c9f452dc18ac456139f5d90b3774dc506bd511c9230e158b05a36e088bd27b8054889497a07af0b030f57bf907c3c289866b475134249953a46d19390e8a2b1f54ca14a6c9171e1846c0310e678f9bdd5b2c1696ac6f0f9a7694f5580417cbc8aba1262fc8737c68684662603826dc862b1dc2ff25bc90aba699f720936a3866eee7bb9eb1038e69487dc419c4a7d6c"]}, @nested={0x15e, 0x53, 0x0, 0x1, [@typed={0x14, 0x28, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="114beede5876b14e9b78791519e3d708de4342377178690d613db7ee8fb2e02c84c238b1ff67b3f26408c92abcca7f3075e7efa926a0d30c96aed55ff66ea5b23852fab2cdb3c2a4f990d046501ef3ca3ed3d5f0c45f94286d3906d943e80f95fd343a1825479c169b4f769c757a6c58e331c3c9371c527d1757255d46b346ebc70bdf674f2dfe955c1dbc866a8a5ebeeec33e07309bc7273da11efef977c878e24afd6e3a7b3f566f2dcc43039473e83c2b", @typed={0x7, 0x8e, 0x0, 0x0, @str='!\\\x00'}, @typed={0x8b, 0x1c, 0x0, 0x0, @binary="38dbcf6e585e34d332d5b75ec8ef01dd1b03c4a5ae69f54a3b8404966a358709cddec7bcaef952108265dd9fc0700b8633aa3d9414b9440e64ef82f5f902b83992a696ec94c8f3823a1f66e4f1cc0525ef68586af0af97436b0e63088f82bcbc01fb164a698138da4bb69e1dc7c87f362411cf2adaddd189c8a4d0b429b5ce4c17529927edf207"}]}, @generic="3cb6", @typed={0xc, 0x42, 0x0, 0x0, @u64=0x20}]}, 0x5c0}, {&(0x7f0000001ec0)={0x150, 0x1e, 0x805, 0x70bd28, 0x25dfdbff, "", [@typed={0x4, 0x1f}, @typed={0x8, 0x31, 0x0, 0x0, @str='/,$\x00'}, @typed={0xfa, 0x47, 0x0, 0x0, @binary="fa4c03119449d5efe89ed1c56ec25f2259cc6bb710095381757c4248cfaa736ee12ce93d9f6b3fa70ba5efcb8664ddf159225e08396b830c22e56265d686f78fed5aadc001dc1cf5eb93e2ddbf04bc22d904b0cd901a37e2fdf40b771cd8608d023005a2e75d78f8a3d0f48c44df7a0638964aaa4a4aa6a5b3f54452147731c1bf61be373800d16f100e571bfd0d68e0980531f29e9f40a28ad56010a1a1cb17457fed62170acd10bfbb45f10b79fc218868b09a64464b8709cca917a101b5683be2613ab49c7413d0baf20ba237a504a823ec59f6b4317adeb3182a955c136a0ab385627b662254a07244a691d2e5889d0f8b23bc58"}, @generic="7790b427fee2e6eb790cbe5a15e2c9c1c5c7650401dab4533f93de310da5253c4fcd814de698d39c52d7319022937b3bc0982255b8"]}, 0x150}, {&(0x7f0000002080)={0x1568, 0x1d, 0x20, 0x70bd26, 0x25dfdbfc, "", [@nested={0xc0, 0x1b, 0x0, 0x1, [@typed={0xb9, 0x5d, 0x0, 0x0, @binary="52d3661eb67b90c6d6b30cdda7b37ca8675fc2cbe947e4ff53f8a49d5a290b909404c21ffe656bfdf6d2f17c0f355f9204511eb547fa862ff1c5ba92217bc2f0ba52dca7c6ba809de9de11af4d381e23c3d573c736fd1d9fb21a1c9c20973ea7ea70df2138da790a0c3b1785263cb7a06f1bc17084bc57414bda4cfdc68dc5d571e1ecce5e5020fb5325222ae826ab02ccdd762f971488390c1f7cdf59199ca8f6aab96ae3a6df12f5b053f62ea3ec2a155cb4911d"}]}, @generic="02e71c8e857a045fe284b4a5953a3e9efb853d3d8b4b01f8c8b65457233bdc6b3b95d50c4ea4c66b36d0556e29896c5b128740394adbb424d007944618d27af8e3853226d163bee5c1685f83127e4563e6fafe227eda8c97a87903751f4b84b3596c73eec39fbc426943088c6327a97d0f6df66b8bbaafebbf19bdf7ae0d72fac84170c355dbd820fe37fd82e0f2741f6fcd68d62b3d34c8eb8540d13b89a8f10912af07b5edce6e94674afd64c342d38d82f9fee711e2f73b3841453be9f5364a0e", @generic="2a501dc28933ea798ca0506226e61382b7e6a4cf0d5e6b2ff03aa8e1f1f3d75673511f7c38d37065c8", @generic="46bf98ab6fd21e89404ca94cc709fe5dde36b8945996c6b12ae7135b113abf751a11b2ea98e40f1368e62f0bb88fde113f2ccf0f70d39e0853da11af3959298a63ca4d9d02cbc54e1cbbcf7ae8e4823edc490601afe0b6fe855ad3d9f703889d08c181f352b1a57e9405b25a440f68f76135bebba12f4476429dbc54e2fa598c415ed2e810b8d83b1e2b4e3b02ceb6aac73e9529b43eb36e71e8ba82be5226678050745fe1d0d5c8713f2846ce5c2cd4c2a1cef4e1b8c48fc1394caee33d2599717171d29e35b26ee860ee9abfed4d642287bc1ee5764ef4320a33c24b1e54c94f60da227024", @nested={0x12bc, 0xc, 0x0, 0x1, [@generic="79c3ba49726641b8eb6f1b7d2859cba5c6679f8d716ebe2f53ef0d85", @typed={0x6, 0x53, 0x0, 0x0, @str='@\x00'}, @generic="281815ee07fc043311229e0094e7fcfe8148e9040b678e0959f4de3be0dd1da3fea6845cd7157257f00952f6d1810e84b781a9abd843cd0ec5a88cd1ad5439fd981f3c1e441c2c3b94bab9066fba9647fcf8b1942932399bed98e20bee359fc009bc99f8fbca9ac0f8314d35ee614ead77af7cefa8908c55d8a85ee13eeb008871ddd80eba02b7018cfdb735ab9aa721d71ec7913e28f452a78c324226d3e41fa88178603e93375998329797910d5f35108fe19ff67674c416433cfcbb5b8d1276ced13568b129b9403446e6963a13b5b6fa91230e49362fe0f0ba7830a9f3a400ee125dec828a27f9c36f326c7bad7b546dfb05d6082c", @generic="59ec2704cf9eaf9cdb85846bdbb84d24aa4ed05a3924227936d8773be67dc0b17201277afb7fb567ecb81269d2bdf9949cc02cd4b574164fc60094ab85d81f576c383c9119b9f38aa033ec25ed1ad6cf", @generic="e30ccd572ee5ed482b2f874dcf792f21816c81e0e007c5fc106145537c77f34b1b04ae31dd5ba14bd5db49fa515bd899b9afecb04374ca0c6460063ebd2b9cbe87f101385194d79415d690f89085553e6d1b9b7389c4452643db4f96b6f52aa45c919fc0d8c5eea3db508c3b928c23d9f0e04746c9671dbd21c5b0c6e4fae7c3faf0b7c7b48140a7506cac77925aad67e6ae729687cf5a954e727cfe3c1d8f3ad178e885b9b2a11f26ce380a37e809a3", @generic="1a8a206aee36f7c677a09ebe0eafc1ed8426eacfb78f9e9d036c79739d30355b944651838cc6296218c913b41ea03db5c828cd2e71fed9ed3b22ed6865f33b540187be8530e89b935e7ffc7709f32fd39d3dd7cac9688a1c8dda9045b7abdb35e66d1decea4d5f41a9ecd00d171d7fedc9c9e5132c8a19bb3932b858d168be0355b63933b6be2dcc534d472d59a73e676e59ee4d0ed97225afca8ed8f1f7848921746fd8f3c0506b4bb296f50fd5b41793251ded775fdec9e879c2e45f441d9b5c59d0c0b93d9c48bd89c87a85289d57f6c3b90fae49779e5824c538d2c38361959fc33c435e52f8a92fc705480f0886915e180d8289a11909307f44621ef02069fe1af035567f666ba1ce79170213fd0ffc2917e062fa0d0ab49c59199cc237bb555c5281e148ded249520faeb1e5ec55256a60cdc2f50a53d241445e12453ea3db86bab0fb25d2b1ab5559e3136f90c2fd8d948e5ca14ee3b86b247bd891df6f79c25b35a420d841372861a0f0cffdaf1c459428d0ca20f21cedf788129d3555b681f87cff48134fd6f2e52c86dcd4531cb6cede3c974c23bf8583be736132f10f8dda72fbf349f556b43ebcfdc4dcb80662b80423489e3ac4e1b7767b5694f89beb1afed9a53246606c0dff64f24e79b7fb1c96948797991961613434144d9a6b8dc5730e50b55b83c183bfc4c5bbb32976585119ef4a892f84057363aa7c0f55a33f515ed938d0fe5b24a0f4beb1f92fecbdcc85e2bbf9f7c5a86af74a5ac77619e638a613c1f1059b5f540a5489ec3d9503a3ee8dbf712cf7baf65d237c732580ffae3f3ff34771627b15d6facaf7567ca5e07f33300a99b4f838d0938a1ae3677bcb852318ee81767ad43cc515055a497aebd4422444bbabc691d64b6444009fd15a5133e3e906d10c98c5c8665d23e4f2f655ec84363d3f58d968dbde5b11a1e7b779d0f5cb20368f76ee46fe6fc8d95643fc188023869b6ce99833ab49d5f34c056364f28a0ad1f9d5f569205ddeaf18a41795df64feb83d75bd684804b2eab2dbc360dae4e146ba09729b83a789b89c9ee634ff80e95cb27b444de63022026918a2853afd1f2493db277b3ea22d431b9f3027c2b192e3ba68bd8f1a0bc9f0a6fb68cda044c1724ad0074f401d8086c730b0446be5b73d6e23d76ce929b079d862f6e736ef38323fc9ffe3b5da8c32038950594824c6b5c49a06f764c81147b1fc60e59ed2d913cbfb4bcea28643fa48ddc6922ecd8bdb90179674816b61adcb5b33b3146e96ca597777c2a18aae616c934f5c86b62a4a2f1edd036b41e3dd95ee1c289e2f8b97226b48f99edbe8a62f4358c8b4ad3744b26708cdb67832240ffb64d459b84ce73c5cb995e2c78e691b1dd084560f7802590b732abed6dfd72b17ed2be4b556e3e5c45292bb64bb81c8ef7210849a6a65042d6aa58d9234642b97912f2955352818b03f2106ed93db068c6140bfffded79a0f31bc74d98d4741f444626d221ea0e21f5b0c08d107e5863a830067baa523a67ee555e9acab45fad580669fefa63afd32e9931f139f08cbf252407066733ea6a3737cf30b7ecb846162882a477feb55b959b7f093b5cf1337df1bdf9597817dc345a695189f2a33eef187843368ea309b6c2061bf016551b9e8f324416550c1b69bf436c60aad0facd342a3f818a65f0619a8fbc2be89bd14214d3338e484cff3fed31381436371b46771b63624b218ef2d1ed310c1ac0fe43e88191463127912a81ddae36760c46d50b36d5de0849a1fd3d988e1bbd2ce8104726122f4afbd4e9f31eecd06a23842c068dca4d1f9dcf3746914566c8ba728af1253b0f1a112b1e3eb6adce0e0e16af153cbcad0d7ad9078521a5389a6ec598923c66cdb5c16a087a411bbbcb9c14a9b5ee44800602d191a68fc726447e4e1097fe6894c59b54280d0c3411509216d788c3e908a061ace1fb11e204e996ab4892539bd2a3a53134973c3ba835bca7c047f60a107e151851286c3169f665ae3335c6c3b71d60e070755491138dac747a01fe25d74a51ac19a51cfc2f90d3760061b676aaddd4066fe7d710c0a70851dfac01f0c4bb07f1bc1a059577c8b413747953e4211b5caaf64af8a35bd8c07439753f6afdfbd8af0d54aa78944d4f414c9d76a98a710a378233f1a6cbf51c0eaaaa2a1ecb9171b05473d0dd67436e6910a741613e88360e4c02ae1467b7c860bfd09ca9f982dfecb47c6b3f946fcfdb1ee486243cd2ae320bb3728f92ab4bdda846ed91d50c02069324308cc3d84a9335a1ff84ead058e97bea8fb31d690de761133d51bb16509f56386bd561d1b9683ae388b1c6825154b8a938bac68908eaf16f747585d0d59af205145caa00a964e7c6b3905c5ae6037dafc326e5c993cda49d34c13766f09f79a2668e91a03cd19871085559c1a498d3d8d5c4d8d7d6f9ae83063e6550396991eee1127db1da76438da55b68ec974c5c156b9f981b07a32becbc9a62d415136d0c56e8b9a0e45ef36bc945c00a17426e40b10b1375481c7576dcf833e0716bd211e02d8f57c66e137ddda8670880a1ad85abf503ae5eb4d02c1aa3bc601738e03943aa2f38b60c494161e2eb1113fa7e921aa1b590a694e655ca543c86849b6f94419e4cbf836c24ce691cdcc0d0ec09a21110f6f76c7699b36c3c94889f80200d3fe68bc7eb88e8864e4c6bdc416ede1ce629d36fe8687d67a035cf415b68e9da5e6145255e918d2dd6422b473ade153310d0184615531ac61b43a66f2c77b9fd76e97b6407a465a305c986c2cb289c75e687df23c7145a6c6a0105cb6e8683f5baeaae7f832f8bf22ed8d20a916df0de1a99583a69aabe4987b5d98df4e864c856c5860dc93ae8f2b073a7d3b49588c1ad7a6666155e50f181909021b620f77b3cd0abf6eb487e2bed77d607e6d143b922a0c497b9a61a157ea2637f0a4cbba32b23cdc7c1d32e34003bcf090b1d73d8dc9f82efacef8178bc6fdec3c0115f190aaefef4d1e3325d0f44c536ce06cf614b0d8368be3e164eed24ae4e81356fda7f885455607d1deb24aab4da96eb92ce21979e4428ab59753037cf3bb8f5db494c7a89a34b074cf39bdd086d83672c6c69e11c910306e87abfab4e3d5dce0255cfe4b862d95af50a5b06240f48986239b08452795b68b792f4c0efd7622151085b4859988bf207d32e20836720273fbcb08173b75a749f0077a4a9b7a59363152ab49a019f417171e9e400cf81629827ff4c9f29cb6dd81dc3e7daa8633e47ef404f2aa347addf6946eb5234ba89f9dd3015b872e089db745a42d80f7188b034cba062af0e0d33bf70d78f0abb66522742b34ec56afdcfeace730fd42c7819dab19630774ea04b4ace8c79e6162e6200242e144711475a0f55332536a29028bf8eda6559c6d1bbe3f7443d3ef02ecb0bdf7326b30a3099388ed11adc037714d67840c0544071ecbb582b58d3362787e5faf21b3038216d0747d8638d08e30b6e0ab6a0900d27c551879c7c1f2957602376b6dc14d9730e6136ef8eb38f78a592103c4c3df233ff05ef509d2136403e47223eb841f10969a808ed71eed009f18e2e05a6d258e7a2654292fbd495cac683f5430aaf54ba179cb590533d473b600f117aa096de2110edd74aba95c0ffb42e772f62e1c7920a397a5ca6c0cb4e8fb4c7ee854ba26c8bfa5d3c5d797d7256dace23dacc59cc46cb755a6583f3102ea8ecd8b1080043f0705e7656c479a539c75527fc45d5af91dceb5eae20170da9aed0c0150f9f8f7337872b3b1c17f6494b5053621effd0f72a965ac3377babd1e63f9d3af8963864a9744dea15e9875fe1660b307d33d1fa991b36ef28e485409294f9f6ed136a8e6c5c1d0f2183d854467b9e1f6ede1366a27635eafd548921dfabdb1c3c81f75e231bfbca15af2236c739be7074e95bb93f3dae8c561701997ab1bbd1f3594e0cf585115af545fc766b7f3a96a9d93152620080d049a2a8208668ada5e3fa59b46292d99f9bd5a965209373e3fc0f95c405aeb7222cb721f80f76d0c7fed3df75386a0dc3c6e80afb30363b95efb0316cf3af06f4030ce097819f68257a1dcb3e30bf7629f6f68b481de58bf27c75e861b468391eb9f2b1948a067fdb33f3b508e8c84d9368aa10dad9b49942f5896b03dd8a5f3abc94d83b14fbb2f2602c2390780215657e9dddc314997e52a5f65613332c7422069e03620177a6728f1d8f1cb915852cf547468564c0b93108347d79d39f7153b1c1ac87e320d0e7e6308a076df6b374db1c1f950152c29e167d2b2fed0426d7dd9cc3f8bf180a02c0f6c607115a9671c28daef7946cccfc0a14b65544cdf89e63e8515a71221fcaa3c19e82e9fe8caff99102cb974d34c28f5708bafb52219d1f047b3b855cefb1e63ffe9ba3563bd8587ce5692a3e2f12b8f84d878e15ebec93d0e9892935ed1deec76296bf96aaeb89cdc3648cc49a077a242557f3c102b36122569a59889612d0ad86c648ff22cedfb9a6d00bb96961a2d60dee83457f0e6ea739c592b849d4e56205655119d7d8a82efbb2f948d68f4c3c62ff05c267a9589ecc76bffd5a7652f9e6c671a973489babc7cab73973ec582ebf6bf817c3a53402e0f56634d5b8d087a7a4f10eda8d7bb81af7e83682ffe7c727a49dc8c9eaf086edf5c49e9dcb245ee1d4a43aee4cb154eca56eba58773692e16f225849bf5647ce419c8e53ba0f749312a161dd2a223c3c97c61f317ea8b73841091fd979f472c2e2677259715476b53bd6f71c474c314b426533dd649b31f92dd941e281ff6a06602ae600226c06f5331c9f70d1328057450853dc86e72029c4a73066e48e31fe59cd3a7a7e01c3e897fadd50ae890a97772ddd7c922266718c64f0214f85f1b1b656ec716845725b3658810945e669a27a0bde5e299526cf0914580dead588c68d42516e409d176aa3ae8bec5e9fd3d6ea6c3bffd6ec3b5b9b2eaab83d4b5d4051c13714a7e00d37982445bb2c5f44edcaaa0f77cb424b9b853f4039872243e33ff39b28f31c1b579fb6b32e3888ce5a029f32f133b17a7214f1185ce4dab4b6fe2d053ce794c5bfaa74a7754ef6acdd330245cf6bee8cee76b212b59efbdeb42fc8a6f727bf22be9647bc94b4960407c4453a007fee7fa6923ffddee9d4003a0a6a7f469e5b51490a886fc3a50fae619adcf7d21a47225c4a01053dd4b983ead877182e705885b303b323e0507590fd85a701fcf9d51a8ee3ea1c7a7fb304462cd40d8f62c210f224e2a0d879bc7b5aebe485ff3a6082f9d95c347d9d16dfe2cbbfe8ec3cf0f7cd7e9fbf4397b8a8fd5351ec68e874c27f6e64a13f4d80e67e3073025ec07462f1949a516987e6e23d5c0b3a98b78dedfbbaeda34419d3991a7082e3d46d3d57a0ec9f1728d1b62df6dc78ca2a752f8f0a6d622e5c76c755450a0fe9a9543d9840e3be6460f890a28f7e3790e185064421b7c2485cb941e7923367e7fe9fe39631df758ca0214706d69c564b96deeee6d74c6f01a7853b8409cc62d2f524dec0444acd1e3a804ec0b598b4c2e68d314cc06b52c21f19fcddfffe2930a1e19eea350dbbee3f5000f62ba0e7b896c73790c6cc239cadd4d348735508007351609a5655eb0653b6b0fe46bb50a1621aa4cb4ecb76c532d7e3c2db75d1f4a86b3165c60678dd15a02d7e24eb1f8c7fc36d2acc64bef693c1c9a6f2ba8dcc6a7abc6d5a6a3bc54fc858286d9c0dff947126f5ff6694bb90ff79a8a884388ca2ee29d924443be6e93a737603165ed11", @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="e7cec5aae3fb145ffb0958f89336f8e7691ac45d0f450a54c48d1824dec55fd7d64bbfe2fb24c42efb340db7f1b612fbf03d2752a36ca377f3eb2ea46768dff8d4a30438596990f6416b6af40e535632a03154505bed29df1aa8b42e0f73512d80115c6ca00f233e89c907e7d50f710617d2b2ec515e447ded055e9e6371e88b85133e8eb1cc89f088061c1173c8653b9f037c6eaf"]}, @typed={0x8, 0x75, 0x0, 0x0, @pid=r3}]}, 0x1568}], 0x6, 0x0, 0x0, 0x8494}, 0x80800) r4 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000036c0), 0x721081, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000003800)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd=r8, 0x3, &(0x7f0000003700)=""/217, 0xd9, 0x10}, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:56 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:57 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x1f00000000000000, 0x0, 0x0) 09:28:57 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x1}, 0xb923) 09:28:57 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:57 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x20000000) 09:28:57 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:57 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x89, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:57 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000480)=""/155, 0x9b}, {}, {&(0x7f0000000380)=""/113, 0x71}], 0x5) 09:28:57 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0xfffffffffffffffb, 0x420440) mmap$IORING_OFF_SQES(&(0x7f0000a56000/0x2000)=nil, 0x2000, 0x1, 0x40010, r1, 0x10000000) syz_io_uring_setup(0x3cd5, &(0x7f0000000000)={0x0, 0x826b, 0x1, 0x3, 0x161, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000cf9000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:57 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) 09:28:57 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x6, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:57 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xd4e9, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x40810, r0, 0x10000000) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4000, @fd=r3, 0x6, 0x1, 0x1, 0x13, 0x1, {0x0, r4}}, 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x301, 0x0) pidfd_getfd(r5, r3, 0x0) 09:28:57 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x9, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:58 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2000000000000000, 0x0, 0x0) 09:28:58 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x8, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:58 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) syz_io_uring_setup(0x2431, &(0x7f0000000000)={0x0, 0xb065, 0x1, 0x2, 0x15c, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000300)={0x0, 0x989680}}, 0xdee) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:58 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x21000000) 09:28:58 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xa, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:58 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:58 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:58 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0xb4d0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:58 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r1 = signalfd4(r0, &(0x7f0000000000)={[0x1]}, 0x8, 0x80400) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 09:28:58 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xa, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:58 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f0000000200)=""/15, 0xf}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000001680)=""/58, 0x3a}], 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x12, r3, 0x10000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, r3, 0x10000000) r8 = io_uring_setup(0x6053, &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x11, 0x14ac000, r9) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r9}}, 0x10001) 09:28:58 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xb, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:59 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2100000000000000, 0x0, 0x0) 09:28:59 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xb, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:59 executing program 1: r0 = syz_io_uring_setup(0xabc, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2, 0x17d}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:59 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x22000000) 09:28:59 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:59 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xc, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:59 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x33fe, 0x0, 0x0, 0x1e1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:59 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x70002022}) 09:28:59 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xc, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:28:59 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x2000)=nil, 0x2000, 0x1, 0x50, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0xc4c3e71168b14270, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)="51f21b6924718de5b0a2425b8fe90f13f82457dbe91971af04761ef0930ca5549ea7ec4136da7d1b07f41e6dfaf127006d3a5bf72c32f9dc75c1fe8324a219ea82f09d91d1b4375d4b4b58bdad9fecac8ac8c6783b", 0x55, 0x120}, 0xd35) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000480)="246b9ab4d192de59c31881ccd6bc15abf6bbd7f5684ea679e3abc3376a1f4899316533510084a9a89767f9352b4dad4e5bb738aeb38c7b7af541b65c32a9b7470407aab4c6bd5884e9b64626", 0x4c}], 0x1, 0xfffffffe, 0x81) syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000), 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:28:59 executing program 1: r0 = syz_io_uring_setup(0x43a1, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400001, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r0, r1, r1, r2, r3, r0, r0], 0x7) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x10, r0, 0x10000000) 09:28:59 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xd, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:00 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2200000000000000, 0x0, 0x0) 09:29:00 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000000001050000000000000000000000000006001240000000008957eac3d443c00d48a2d17e374f22ad41509c8bc6b97a9d405b5a82d2d19e2709358c9bd87ceb05a5c31b2220fb2b31832ce1832d8bc58102a2bcb6f450c012af8d8317ec5991e92165017a7fde06456f1fa1e14ac4813267835b342f3b0201665f50f549b5a3a6fea38a86210c06796dc54fce2afe9436e691c453ba62bef12d192c2dd6c6408d3c73f8825e696e967cb369040fa25a921b42bbaada028177b979a8a469ec4eb64878569020890e19e0d0de2e9581fe191de19579114315a35513532952b22dad41ac"], 0x1c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001480)={0x1b3c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b10, 0x3, 0x0, 0x1, [{0x838, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x34, 0x6, 0x1, 0x0, "5f7e619081749263238716dd31df8ba2ff1d0e23b9c50d4eaa81f58ded608cc36e79b9da050732bae376f04c2f352e42"}, @NFTA_SET_ELEM_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "cc0fc464f2f3a013c6b008db59e59d769499547c89244050217e3f94c1791fe61347448a1c7f121953b8bc5c13ce2b209a2074246ad7c638a93fc7267ffee5351551573b76356d08c6e3f7748b3e6a67b00a5c2905f3f230bed8ea53e6b0e17950c70f975ea0fa6c25c3e67bb516e5f671cda876283842d1979fa7b5d0ed0f044e65fe44732ced1a098c894a3fc91a988c6fb02acf5153a9fcf3ca71348660f8a7f4f51f404e6abf29a5e282c836d9722ce361bbdd30dcf5c4908e4c4d96e5705e48be79a2eb8e3dc4770d"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "b4b20650a049c8f534eacebedc9613d45b8f6ab06fc3608958423f16ea46afc7e550af4d1c541f1cad0918e0c4eb1f18aff1f8d23f22ac8d754d29e3ca4b38e900c9f0cfc6b71011a0b81530a83d47cf2188525c9f54559ebdebc083d3e2e35152087bfcee9c7d5f245980d145271620cdb858cce0b0807793ff8390036882dfd9ec3d3030ace29c9d681bcdc639b15d8276aac810cac8c2de7403d3cd8453d2cfbe85b9e2d7e7331f53fc93ecca24b2dfbaca3d69de354ed0"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x97, 0x1, "3eb9d53999e06eb6ab727a935461f0d8ea0dad792d63b8e266ce02da4969c74ef145f27345b3e63269cd7ee6194e6691e998e0d49c2872141dc7d52f2423dfc4fb56b4374f4edd3468a49c2868fb9919f5f38eaf2adca1ddb780cf9369f73e2ea9cafcb9d0f462d874dadee91617ddd1d4cb176dffd16521ceb5aaf9912e4f791af2ba4b81f793f1010ba7d60076793598e25a"}]}, @NFTA_SET_ELEM_DATA={0x37c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "99fe29ab91bc8371a2edad72c71d7fbfe2dadb2f251ba88b7bd5debd6926c08fb6ab83a72eab72380e8a385fdef7736be1bf04432088cca73a6c8c59d4cdf6e9f186774fdc846eac7b2280107d2ba5018e5a29733ec534b5ac2ef87197a8b46c93d546153101ea5d973d2f4d171bb6453bef9ca93327b0080d18dc6886142fb642faefc57faab68fa3b9f926b9eaebbf887eb94864dce2f17e0048c4c854c6fc0b3fddd114605e1248373b68425957f3bc1a7adf535080b33e23d4c6a69a462f3d0512d3fa72f0663124b7"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "45f912e95efea03a595229a5791fcb73fec8c9703d2518010524a87e438a28432e1197634e145bcc7d2e3a57b0ca3f17dbaae2380eb5827c6267edec30a24466b5e721aca8170a67b18d3f0337c469a3c0bc7d1672f1f56564eb08c3d50f71acc1eda9b5cdbf92be6d177fc2f14f90e3f45becd432e85a7db151ec07537c658cd8f9947473e06fe999f5e768100d149add83822eca7a2eab5130f6a936ade0d26b77b9f2723ae3fc368e8813e5256f592a040f1335716dee26302846213eb9ce72b6567bd80d1a3ca13c76b7bc0cd7674a1204f4060b1ca5f0140ad6f82003381fbedf4f18e3f7fc60dae047d85044f95f4fe88ee96608"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "db6a9c062869b14736ac9efe3a3d6d6c4a3c26e22ebaec04326316517a"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "36e533d2c745a9d4add77b35b30e4988b5bd1d440f8cc726a32b42eb7f77417671d5e248078b4a51abe9261ca816d639de80bcfed9cd585364dd61d65d35a42a2ecf6f9cf19b6e9f0ef8fefff29aef4e422be36a802d56a470fc3fd8e5e1ea7257f2f89d63db51c3a1f24ef751512c31900b400da05800fa464100d6ea621cdf06dc45d58d5569f4d8b688acba70fe5caa6e3869685f527cb0cef272270cf28216df4cf9a099717ea786af3e5e8e04cbd4e20cd9266c3d4592514937c5109fc0bc331e012e3247746c86de7d9f273b3fb411f511f6b5d1771c15344fc8d1b18c91dde478b9097b3531b8b153f0d33382ea9a45a6b09214e3f6"}, @NFTA_DATA_VALUE={0x2e, 0x1, "699a477580f56332607673632057d8d64f9a2d2b2ce5b1a4a775e830ce5e5988695428bce50e7fc9ed3e"}]}]}, {0xaf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x22c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "605f657614437bc173ff9bf9748ae955c4f352c3f1b6994492b53f6902c84964c24f7d9322800c71444bbbeb972accab5b202369d042a062e84bc4b2920cac61a3bd3dc67173293b2e0d11e939a2afb28077795f0b31"}, @NFTA_DATA_VALUE={0x5c, 0x1, "a90b558fa9271af356e348161b5c0715eabbdc93c10548599fcad290cafca35709215e2d2e188b3437ac83c7e4fa948e3e7c7beca27e70361f4df8ea226255cf804a5afc6d214dfa74b441eba15694dd2ce8514673226d3b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "a1221f28d0c74cba71906a53fa7c7c087c4c4d21fc7e72d96952c7efc6b69a5087671be468b32fa7dbd8a1d74262c242188270c23755afcce9423b9ac9ea34060454439a925a86ae9f0456ae9eb09b0e8ff2a203347b3bae69e934e9f0b35661dc7ceb38babf60332ac29ee30b1755e28bf2b28eb64e85c56668676bab86342c544c21e0b1dcc39c3cc887c9e5dd6c761939038166d3bd2101cc830ecc36d94380d5e0092c0924908816f5b6e0dbebc07536b36853e1b24c4aafa304667ac2ea3fec5835a274ae10804e48e3e5b5e31014ddb1ecd93f3ef18310f5a018f5f96c"}]}, @NFTA_SET_ELEM_KEY_END={0x1d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "3954f14f440e7db6ddc957ce4cfd410ee8d98df30ab722f2d2af2dba3979f69dfbe8a54354de5deebdddd4bb2c264bef17cb60d1d30843ecc61858e553eb45609dd0067f5e9aecad8a79ec"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x89a178ed8a151517}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "ade305195292152fcb70ffc936f20c02a65b95e9040bff24d2010a715c913512c7ccaa9dfd97ec84c9fda0762e4975e96da21b32e88d633eaf73e4a75ba37b368e44b0384fb2b35a94d2de7c3a936c845f08f5df16597eca84afe8c836068b37c66cc31c8a0abee8ff9f170619a2ac7611fe411847c16079d1d4d3cc30ff8be24296652f8bbe241383"}, @NFTA_DATA_VALUE={0x9e, 0x1, "48a6753f49b9c3bea27f1fecac78e692555bfcfb2fd65be8820806a38d4c2b24a18b07e6ee84e19be7551ec5b63ed00d9563d17ad292ce76454440d7f23fad25eeccbe3c26c5dd88d92ce138a754b911bb70f84b898ab671a6fcd31c224620ccffb13009b637cfe41fefea01b15c329b0f288b07925e70f56ae2e90d8086eae49a4048338c816e777de3fa17dba2d7c94e65689dad6b75ce3679"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x11c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "4e918f8d6be9e4a68cb53bea6e1af406083ed876789cb5ea81d1c9e7351909744f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "514a42c64c8ef5d598b30d58181cdae6056bc8511ca76cabe494e27a239135b4806d2b1183326c375c1ceaf8d01ee73a1b2e918af6b71624db950e0a566e17fbcb35cd7427930f48c73470268a5d3debfebc2ff013435db9328a"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY={0x1d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "d597a19e77596f19307e3e6c9c271010826a406acfc51f1c748790310612b01ad47e93ef07ccd01f444364193a4eeffef91fca6bb5de19be3cfa4adb1cd4319eef8cd0edba36247ad0e065b03a03679897b0552fb56d66396b9d448ad9346fb15de7b489f13a313650"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x3e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "9e7ef2d8aafff3fb2d3ed0f8f355ac2fcf96d693347274ec5b39e3f590c947f61f24d4e5293a74a06ddc5403c30774881bce7eaf08ef1ff4483e9c20eed048db16d487ae3f97233475f001288a68306b0c76d6cbad0d3da3bfab54ed068d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "8a7014291d52570cab436d00e211511ada6ede115404d0eeccc4f18a1053f02919c27b80c09a2ed2168db7dc9f1a2950f5af5f87b23d9853ef6236dad594ef4775ab03d260d65535966dd4a98bbd465981ca42b19b2e218d2d44219c6ad4fcba986ad8801914fba1c32cf941cec37f3d74d5d03906f91066fead5bd29de6965c271303af6a7534069b90f1"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "e77fe02246aa0bc90f9070e2e461e9350c677f92eb16b8d91c563fc38920804902056e62a9f9f151739d3344dbed366c2fd42f4a7ca11cec5b993f80ef7dc00adbd0a73abad91b52d4d53136ee05a2c458c7a6f6fb58b5de4889ece91e6fa5509597b0ceeac814bc6df45be4897cc0f10d6625e6d7a5a0c3fb20e2076552f7cd5b55aa7900630c4f7c0195fcf8b8845a55d4d56afb1ec8ea"}, @NFTA_DATA_VALUE={0xf8, 0x1, "9d1dd668b586e2aaf176bd848fabd02b9c6b62ff9a3450e47b2e841774fe0b68a971f265a2d0eb2b54c4513fffa40b1d1fe9fbee727ac2479b570fc5a0c1821a6aeb6f8d636fa8f49d1ffa8fcd6e3fcf5bebd3e942c195297fee35e826c453d977cd8aad2b6f508db2728d4d2f26f374da22c2eae260d8105f0336aad386d718b2a36bc792c0420b2863d8c8fb5cf4d5fdd5b065923f95c4588fcf6575dd43cee964aa00cd239f28d1eb83322d73f363691c44bec5380301d03b77a8bb5b7062a60fa1adcb69fd70e0d1adc739f5d93d64ed8e31b79f9f32a42a91f5a29a7cacb135e20f8fb04e0710ac39d1ec8f14a3f6b778af"}, @NFTA_DATA_VALUE={0x81, 0x1, "c5a48c7d644bf3a45a2f547522f223bffce9fc54e7a711f075e313f9f3e28c02c8d75ffd8ae17fa13b50cc5f26dbf4ce1ead30377a8b2843a0c57b2f88c8ca6eeda235af0493d05d824fddd4b09d1d3047563b4bc4557b4040a424d04352805b66541198b1f06a8a0c601687e3319454eaef80909dd3f28bc92c715768"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "cbe0cce78aa0bc5a98b2772140b780"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xc4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "d5add28720eafd8a23b7ed53f6"}, @NFTA_DATA_VALUE={0x4f, 0x1, "6c012550ced8d16c49e9d31bc38cf7a68726b2fec2089ffaf623bce8794ad38c076137a304c69eefef01b4968a725984994a3e7c9295174770839f2d6789ee263158b9d8f378877ba32a29"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "6b5fee8bf84645e5f16bfd5d83bd56adb5f16fcd21151676"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "c404c56129a643fb8c1a8f490e067093db880287c4f4a89b67b403fe16406a95ee48e5be3c7e85b91c4213018aa06e62b96efe047a0ae282c2a81a22c623497f98133037cc853c2925f120527d3da27d4c7117c3e1d735f8332256769e73ec453f77f1f291"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7e, 0x6, 0x1, 0x0, "86d73fc55130663230f099bd38942a80b59b961185aa1573d7c1db91c93a812ad134dcfb45e0ab13ddebfd0103795b2d485585cedccb173784649f7e10605152e835bdf01ee9073790143ff38ac342ef971d5506bc42602c7ec69c976917218ae5ab6c9a85254e2b444feba07361f27298c59f795349f5884914"}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x74, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x44, 0x1, "2d262d206e7a398f970d66ce14cbb3364c112dc32af5c9d84460c2681c18e7250e4164cb88ac945b87f8e83d95d676dd2d94aff149c18fec18f259265494b931"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x580, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "efebd90aacd26bbe45f507e08e6d836ca05ee2b37efaf52a1745ebad0b8ac7f5a163ef9e82ba4f13b69e9fe753b1f11ed98669989866d3c777"}, @NFTA_DATA_VALUE={0x4d, 0x1, "7ad69cb59c83816e38bb429c58f8da0ee7bbb22788022eb3d1276dd596cff7f854f80b83e04f1b807b3321dc71a62330e9e82d1b3d959cc8ee1808fd4f18a4f17f786dccd0702b733e"}]}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "855a27d58ba97d23d1dab1fb187958a899858d39dada281b9054acb40536b194cfce8371e0e638a66676d8dfdebe8bd1e699668894e6e8af8aed5a304a1158e945e4fb1a7a376b51ddf71f887d3afd2c74f25b8327066e501b3cb4d04cd4a6c61aeb8da302a725d5dca2eff9040b9d2b767d10ccc5cc8483677ca5795698b4bcb294f32d72f6b53ddd0838185af2c096c6500206fb3797a863b60371ed62fceed5864615202e3c58f51591d9e4ff4a0cd9e1c8c62e74251355ad2039a0d2b49d964b5f1ab7034de5146917ded019d439eb1959b8f2c87109bc98554c6b8d0ad9"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x3f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x75, 0x1, "d136b91dfac7c1cb87ac0858e971a57d37de1adb21b09ddc6b005907230cc8241c7e47dd90ae97bc45f7a60b86f14abe6824599561d6bcb69d7bb6e9507f848320b8f4de16826ddbeb859845be07e12a19de8f4206bd6121547c6ba4117bf033c6486ba3deb5bd5e0fa897045cccd28cdb"}, @NFTA_DATA_VALUE={0x9, 0x1, "b8774b5aac"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "5659850aa41df3dc4f2334baca89af0bd9c29f76a1f73286754842edf5f884623cba331b9f9754ae1ddfb6f56aa4df13602f6ec941a2b10724adafe455f6b834f8d9b298617195ee47114dfc1a0ac5e1e8005b11df0885c20e8634ebb90fa614eb574c095290c06cbbf20adc7ce3c0426d668a97cb49cd8b7baa936ea35802c2495aff52f7b2968fb0e390a958708d6224f6a5abeb4c4c24dbdc317a76d602b68c05a2d86fb31b5714df16d258069e6aa26601a9e6ce3cb0e5d12ed0639e55b63517f086774ff669a58252fc70249dc66cfb0077f6cb9aa349d1de6ac5d55c8d491d0c2c67be58ec28afeca0b68cda07d0"}, @NFTA_DATA_VALUE={0x93, 0x1, "08730892880f7d8bb815e02f1f051e7554f536f839502ae32a8e82d0021a71e3c060d28bb06044df47bf9674346acf6a283cb3264b250d537722d280831da6938c46c5436cf8dc9242104e04f40f56c3df447ca2c5762fdbb77f05b39460279f09145b66fa1d54aa98968596a771fabf8810f39a9e0297dfc0e9254265630b8288ddc4afa232c84f4e4c4709ab8e83"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x25, 0x1, "18162a3d48477cda9e4f6ecf2f6a279de7f41cc52b9ca11f0beab751fa5bf2cfb3"}, @NFTA_DATA_VALUE={0xf9, 0x1, "fdc7876cd10d813f11c1f0518baae5e2c91afd4b16db99a668760f492ae58dd29d80a9c765eabc155514312056f826a8d6996ff413e5ec923f46a6efbf7cd88f010fd8ced40d36888b50407bce3df8580b0d436d121208d7d20415dd3e30c2dc34130e08011812208cc838e54b2aa8f2e0df52ba3380ec20ab4c049220efabdb4bab5644c67f67bd2623fbdaded2a394203211040f57b15404ee2d48163183cc5f845a36fc389ea38135d152e18f9687f91b7b1c40e2fdb8b9a06893b9194711dcaf7ebb104a4e408b7e714ca66d2d2c1b2bdca011854916017b41a69e90fe99d2c6b77d93193135022f9f4b15f657ed90c6f59c77"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}, 0x1b3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000380)={0x0, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) flock(r0, 0x2) 09:29:00 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xe, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:00 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x23000000) 09:29:00 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xd, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:00 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:00 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0xf, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:00 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x22) 09:29:00 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r1 = io_uring_setup(0x4b0e, &(0x7f0000000000)={0x0, 0x3387, 0x20, 0x1, 0x27f, 0x0, r0}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xa) 09:29:00 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x10, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:00 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x11, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:00 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7b76, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x1, 0x1fc, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000105000000000000000000090000000600124000000000"], 0x1c}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000400)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r5, &(0x7f0000000300)=0x80, &(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev}, 0x0, 0x800, 0x1, {0x0, r6}}, 0x0) 09:29:01 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2300000000000000, 0x0, 0x0) 09:29:01 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xe, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x0, 0x0, r3, &(0x7f0000000380), &(0x7f0000000000)='./file0\x00', 0x80, 0x100}, 0xff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:01 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x24000000) 09:29:01 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x12, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:01 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7fff, 0x4, 0x40cb27af, 0x6, 0x401}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x2) 09:29:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r4 = eventfd2(0x4, 0x800) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4b0}, 0x1, {0x0, r5}}, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r6, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000fdac814813230297f0130045000000000000060012400900224b040000dd2dff0966a118f6620900000000000000018b0e2fa8ffea9b0d6667f97af0ac1299af1d72cbc2d110b78ac8baea7740c26b1f1815014a8ab748c78112d1381a660a8a94d798daae"], 0x1c}}, 0x0) r8 = openat$cgroup_devices(r6, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) close_range(r7, r8, 0x0) io_uring_enter(r6, 0x7483, 0x1ba2, 0x0, &(0x7f0000000040)={[0x36d]}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:01 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x13, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:01 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0xf, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:01 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000e40)=ANY=[], 0x1378) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r3, 0x2, &(0x7f0000000580)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='\x00', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000180)}]) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r5, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x80000001) r7 = syz_open_dev$vcsa(&(0x7f0000001500), 0x2, 0x54c201) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xb4, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x10) io_submit(r3, 0x7, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0xd6, r4, &(0x7f0000000000)="dc0596f77ef760a72e94d142f38d9d41e4e7c862ce2d53de51527ebc960ab10a8ed9505340ab202f902ff8601c5179ff8f75156685f16e509302d35398ce049bef428fe8efa05b4d1532fbed7a4907761234fc", 0x53, 0x4, 0x0, 0x2, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000001d80)="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", 0x1095, 0x1}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f0000000300)="69608c8cf3e412c904411da9f5eb35eeb96069b07774f2486938cf8b26696d7fce70ca47527639f49c5b67658dadb35bbaf83ecc21ef45dd09bff1b61e350e7f", 0x40, 0x8, 0x0, 0x3}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x3, r6, &(0x7f00000013c0)="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", 0xfd, 0x9}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x4, r7, &(0x7f0000001540), 0x0, 0x6, 0x0, 0x2}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x5, 0xa38, r0, &(0x7f00000015c0)="e742fc23d2c3f895c1ad868a2b521c58a34abd7bf1e145440fdd52cc60217855b1506c5745dc2103af00fdb97bb4b52ed648b44a89e24c87046dc7ff45df02e3805cf4a80da37ebe1a44cf944e4fa84c89960a9f31e455f8abd3b10275a7b41c350ea8ddf7a51c801d827bff72acdb5594d57c104e28dce5ed177c3459c94e73b3014465a8ce5f80fafd60074fcf4bf556dcda03aea8f4d8715c329aceba337c5c18d407d52854892085100527c7f9b2774a263d04ea2e5586b47888d253dd937d00430fe4f28b32957b5408bbd0159e8c4b50c5e4107d8cc5a2a0316049be0f0c4f5e1b", 0xe4, 0x10001, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x8, 0x4, r8, &(0x7f0000001700)="f7196793fe58c61cc1e531536b372c49c1dc2026785c27aec45605f71ee8d06e70fd9e21cdc1a802d2130fb062abb5ab442c101dc6052542f8812f8ecff868cc7a6487b489dd6f52c3d2716b005db75f0b87b51d542d6fc58fac0b403ee01f43244b3ec9340e3eabb140", 0x6a, 0x5, 0x0, 0x1}]) execveat(r5, &(0x7f0000001540)='./bus\x00', &(0x7f0000001840)=[&(0x7f0000001800)='&\x00'], &(0x7f0000001980)=[&(0x7f0000001880)='\x00', &(0x7f00000018c0)='[!@\x00', &(0x7f0000001900)='\x00', &(0x7f0000001940)='/dev/vcsa#\x00'], 0x1000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:01 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 707.537852][ T3372] ================================================================== [ 707.545951][ T3372] BUG: KCSAN: data-race in io_submit_sqes / io_uring_poll [ 707.553085][ T3372] [ 707.553091][ T3372] write to 0xffff888135444070 of 4 bytes by task 3385 on cpu 1: [ 707.553106][ T3372] io_submit_sqes+0x493/0xde0 [ 707.553129][ T3372] __se_sys_io_uring_enter+0x20d/0xb30 [ 707.553150][ T3372] __x64_sys_io_uring_enter+0x74/0x80 [ 707.553169][ T3372] do_syscall_64+0x44/0xa0 [ 707.553191][ T3372] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 707.553212][ T3372] [ 707.553216][ T3372] read to 0xffff888135444070 of 4 bytes by task 3372 on cpu 0: [ 707.553229][ T3372] io_uring_poll+0x8e/0x150 [ 707.553247][ T3372] do_sys_poll+0x4b8/0xad0 [ 707.553265][ T3372] __se_sys_poll+0xf5/0x210 [ 707.553281][ T3372] __x64_sys_poll+0x3f/0x50 [ 707.553298][ T3372] do_syscall_64+0x44/0xa0 [ 707.553319][ T3372] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 707.553342][ T3372] [ 707.553345][ T3372] value changed: 0x00000020 -> 0x00000040 [ 707.553354][ T3372] [ 707.553357][ T3372] Reported by Kernel Concurrency Sanitizer on: [ 707.553362][ T3372] CPU: 0 PID: 3372 Comm: syz-executor.4 Not tainted 5.15.0-rc5-syzkaller #0 [ 707.553379][ T3372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 707.553388][ T3372] ================================================================== 09:29:02 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:02 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2400000000000000, 0x0, 0x0) 09:29:02 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x10, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:02 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:02 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x25000000) 09:29:02 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) lseek(r1, 0x0, 0x2) 09:29:02 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) write(r0, &(0x7f0000000280)="973f78fa667bd0e0d8f84d7dfba5064d9873a9aaca2df9b0d82686e3acd8c1bec4e773dd3aaddd68d527eeab541213d1f44f3dc2515cfaa640b9cece4b81c9e0f826a6094b6a51c46f6f80c1f7311d7146fef4090961e601bbb7cc6abac14f01e28770e975998336f3ec4521d3e9cbf9ec38064a1f33ca1ab15551ec1df2738f1fa1c38c6db6c4a35178fa578219ed2e257865deb95af9a9a5e6ac1b2d32d2e54dfe8c4331b21a50ee586a788946bb49fb71a474ef92d8", 0xb7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)) 09:29:02 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x11, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:02 executing program 1: r0 = syz_io_uring_setup(0x400182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x1f, &(0x7f0000000380)="2e57463994af3dceccacbddb27fa2570db4447c9b76c6c75660c3abf2bf7ef58413f7a283732e40798c4bce95084c872ac0cb301262a339e553dea4c42b0153ca7b84ef93cbd01a0ed14b792868fcbf6c63aedc0a91fd79e46412742580ceb811524059351cd220a1ac59b13ceef761a9835ccea03a6f400cfc8a02b27bcde765c93e0fcc7f3882a0e88fb121ed44ec8cbc336b3ce50f85740dff1867b43cee90c4aa83e1b381404699939dd1540872206bc367b111ede5120ca14568daafbed515b1ff85db29fe0ee3fefa55ba3f7c6ba2486a18059ff5fef4409c6d3f5e4cbf741facfe1c543", 0xe7, 0x13, 0x1}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:02 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x700, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:02 executing program 1: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x7}, 0xffffff01) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000147000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x3, 0xc, 0x0, {0x0, 0x0, r4}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000215000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:02 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x12, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:02 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) fcntl$notify(r1, 0x402, 0x1e) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:02 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2500000000000000, 0x0, 0x0) 09:29:02 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) pidfd_getfd(r1, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:02 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x1000000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:03 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8f, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:03 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x13, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:03 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd_index=0x4, 0x81, &(0x7f0000000000)="5bb1a9bb750ec0f3085bcf3aeea9f5ee34ec3926333c816ef172ff45e34cf674b9c7e1b9", 0x24, 0x8, 0x1}, 0x7f) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@private1}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd=r4, 0x9, &(0x7f0000000380)=""/204, 0xcc, 0x2, 0x1}, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:03 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x26000000) 09:29:03 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x30, r0, 0x8000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r1, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x5}, 0x8) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000105000000000000000000000000000600124000000000b0f5002699dc8df6aba75792db7da2409d74d0305bf0b9124143d504d517fb2e"], 0x1c}}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x7, 0x0, @fd_index=0x4, 0x0, 0x0, 0x9, 0x0, 0x1, {0x0, 0x0, r7}}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:03 executing program 1: r0 = syz_io_uring_setup(0x9ec, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1c) 09:29:03 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x2000000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:03 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x382, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:03 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x14, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:03 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2600000000000000, 0x0, 0x0) 09:29:03 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000280)="d4c88c4b4dc950b596aa97d709f0432f231c7797d6596acc72ac60974dbe19848c2c61ac2243488f4d8c2671a49d5b2db05837fa9717ac9fec1b594c2f1769b0c8d282609036", 0x46}, {&(0x7f0000000040)="249b", 0x2}, {&(0x7f0000000380)="ce87035249e3fb564fde5383a74f02de1cc741756e2f88f6d84f56526a001bc7edd66a2c185e31dc45fbbc9a28e450c758ffffe608218a8ef3f7bca2498075f3c90cf672c59944eeba2fa034eba928a65e9738d0434d6599d888287f429e", 0x5e}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:03 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x15, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:03 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x90, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:03 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x7000000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:03 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) poll(&(0x7f0000000000)=[{r0, 0x200}, {r0, 0x4}], 0x2, 0xfffffff7) 09:29:03 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x27000000) 09:29:03 executing program 1: r0 = syz_io_uring_setup(0x17e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:03 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) 09:29:03 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x16, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:04 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r2 = io_uring_setup(0x6053, &(0x7f0000000080)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x11, 0x14ac000, r3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x5a5000, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x9, 0xf, 0x1, {0x0, r3, r5}}, 0xc) 09:29:04 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x100000000000000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:04 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x2700000000000000, 0x0, 0x0) 09:29:04 executing program 1: r0 = syz_io_uring_setup(0x74cb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:04 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x91, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:04 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x17, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:04 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x200000000000000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:04 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) fsmount(0xffffffffffffffff, 0x0, 0x1) 09:29:04 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x40000000) 09:29:04 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 09:29:04 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x18, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:04 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = io_uring_setup(0x6053, &(0x7f0000000080)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x11, 0x14ac000, r5) syz_io_uring_submit(r7, r1, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0xfff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:04 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x700000000000000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:04 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x19, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:05 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x4000000000000000, 0x0, 0x0) 09:29:05 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x92, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:05 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:05 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:05 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x42000000) 09:29:05 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:05 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:05 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x93, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:05 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:05 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x700) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x1000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x4200000000000000, 0x0, 0x0) 09:29:06 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x94, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x2000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x43000000) 09:29:06 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x21, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x7000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x95, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x100000000000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x23, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:06 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x200000000000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:07 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x6400000000000000, 0x0, 0x0) 09:29:07 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x24, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x96, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:07 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x700000000000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:07 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xf5ffffff) 09:29:07 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x25, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:07 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000700)=""/77, 0x4d}, {&(0x7f0000000780)=""/116, 0x74}], 0x9) io_uring_enter(0xffffffffffffffff, 0x7cef, 0xfde0, 0x3, &(0x7f0000000240)={[0x3]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:07 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000008000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd2e, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000008000)={0x0, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404001d}, 0x8000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44008008) r8 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000240), 0x0) 09:29:07 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x97, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:07 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x26, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:07 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x3, 0x2000, @fd=r0, 0x2, &(0x7f0000000040)=[{}, {&(0x7f0000000380)="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", 0x1000}], 0x2, 0x1e}, 0x34f3) 09:29:07 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r3, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r3, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:08 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x27, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:08 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 09:29:08 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000014c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r6, 0x0, &(0x7f0000001480)={&(0x7f0000000080)=@xdp={0x2c, 0x2, 0x0, 0x2f}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="70f43e9c7f9eea38797daa00d2d4bda25f0746d2eaf07499e69f4eeb1eed0ce6e61908241d06c46a258a3523eac1c31f622b9f55217ca9cfe202f6a83bb8e63ffcfacdf706b37717fc828c982a718e72866832e5648c7afc5066ee0d7e08dc8a2ba1362b1130f4eb2f9d47a354ac62694ca015eadc7d04d5c9b128bf3a7a277ad78f721cbe7845d453b5d2b89cdfc57ffaec416bf9c1abb4d2acc29499af01c0fbd22ba06e4d69757f53be782afdf3549d4f25c77878f838249a495dd523b7938fb53597765ce088c319851ad7fce24a135f83441a8bdb0a6a125e5d1583d3171c73cbf6f041ff386d0d0a", 0xeb}, {&(0x7f0000000380)="30a9389500d539836d18924c5776b56615c5253052ee8f136af95f05adeb44ab2006115eeed9a73379152fe9114272174b566c5608ba1a7fb457feef75e1a25fb568ab245015b1126dc29658408ad766ce9d74dc0665e89dc03e7ed1f3dd1d8d3cc0bd1e70d5f557b7f6908ee69c66b043920e33782ab650087a9aef2791cc2f6ddf87d3173b8ea43f8271919910b1c5b15b4d2d149845e1054931d862", 0x9d}, {&(0x7f0000000440)="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", 0x1000}], 0x3, &(0x7f0000001440)}, 0x0, 0x44000}, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:08 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x321142, 0x1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{0x0, r8}, {0x0, r8}, {r7}, {r7}, {r7, r8}, {}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {r3, r8}, {r3, r8}, {}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7, r5}, {0x0, r8}, {r7}, {0x0, r8}, {}, {0x0, r8}, {}, {r6}, {}, {r7}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {r3, r8}, {}, {0x0, r8}, {}, {r7}, {r6, r8}, {}, {}, {}, {r4}, {0x0, r8}, {}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r7}, {}, {}, {r3, r8}, {r6}, {0x0, r8}, {}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6}, {r6}, {r7, r8}, {}, {r6}, {r6}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {}, {}, {r6, r8}, {}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {r7, r8}, {r7}, {}, {r6, r8}, {r3}, {0x0, r8}, {r7}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7, r8}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {}, {}, {r6}, {r6}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {r4}, {r6}, {}, {r7}, {0x0, r8}, {r6}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {r6}, {}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7, r8}, {}, {}, {r7}, {r6, r8}, {r7}, {0x0, r8}, {}, {}, {r6}, {}, {r6}, {r7}, {}, {r6, r8}, {}, {}, {}, {r7}, {0x0, r8}, {r6}, {}, {r7}, {}, {}, {r7}, {0x0, r8}, {}, {r6, r8}, {}, {}, {}, {0x0, r8}, {}, {r7, r8}, {}, {0x0, r8}, {r6}, {r7, r8}, {r7}, {r7}, {0x0, r8}, {r6, r8}, {}, {}, {}, {r6, r8}, {0x0, r8}, {r6, r8}, {}, {r7}, {r7}, {r6}, {}, {r7}, {r7}, {}, {}, {}, {r7, r8}, {0x0, r8}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000280)={{r3, 0x10000, 0x7, 0x80000001, 0x80, 0x2b, 0xd6a2, 0x1287, 0x4, 0x7, 0x8, 0x5a, 0x8, 0x2, 0x12}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r9 = syz_open_dev$vcsn(&(0x7f0000000400), 0x2, 0x208000) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x8, 0x1, ',%$\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x880) 09:29:08 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0xfffffff5) 09:29:08 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x98, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:08 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r0, &(0x7f0000001c00)=""/232) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='schedstat\x00') io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000000)=""/185, 0xb9}, {&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000001380)=""/168, 0xa8}, {&(0x7f0000001440)=""/168, 0xa8}, {&(0x7f0000001500)=""/182, 0xb6}, {&(0x7f00000015c0)=""/178, 0xb2}, {&(0x7f0000001680)=""/160, 0xa0}], 0x9, 0x7, 0x7fffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) close(r3) 09:29:08 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x28, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 714.723166][ C1] sd 0:0:1:0: tag#3569 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 714.733438][ C1] sd 0:0:1:0: tag#3569 CDB: opcode=0xe5 (vendor) [ 714.739766][ C1] sd 0:0:1:0: tag#3569 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 714.748814][ C1] sd 0:0:1:0: tag#3569 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 714.757827][ C1] sd 0:0:1:0: tag#3569 CDB[20]: ba 09:29:08 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf, 0x110, r1, 0x10000000) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:08 executing program 1: r0 = syz_io_uring_setup(0x1903, &(0x7f0000000080)={0x0, 0x8b68, 0x8, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:08 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) syz_io_uring_setup(0x44fc, &(0x7f0000000000)={0x0, 0x204, 0x1, 0x3, 0x222, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:08 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x29, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:08 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x37}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4142, 0x0) pwritev2(r1, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 09:29:08 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) setresuid(r2, r4, r6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:09 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2) 09:29:09 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x65fe, &(0x7f0000000080)={0x0, 0xda38, 0x2, 0x1, 0xc0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)='./file0\x00', 0x40, 0x6000}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:09 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x2000000000000) 09:29:09 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x8d17, 0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:09 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:09 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x99, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:09 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000380)={{r0}, "ae580fcdaf53754241e337b62af4b41d17eb46d8b76e2dc516dba006c22550fd3e6f1d5c3ac002e390621cf78a0260c18eede129e7fea6a329c7a69022062a0e6148a86f8256983d0b2c5f4fda3b3cb6a6d11a842a8402478a2ed51d6bb88d1b9331252adf95c0354040cd0cda0c0787c90eeaafaf7a0a4ca3038d72a75b8a1eee8cb080bdefb407083f76c3932590839f8d6cc2d4b1a6ede66b7d7706980d314d35cb9e0f428f7a5e92a498112eb914c2932bca2610492c5c9c85e28df8115c8fc143e21f9e9073f0e736c4ff1b37cab7e70e690cd9dd40d0cf6d0a299228e6d44c79c90fd85646120b992ea6d88eb0ff6c9d74c6c5438bf8a9480d474de467ad23bdb3d645e07bee92e1189cac43fc90c07bee108eb13a6ff7a36f7ccb8fbb4f38e31cab4b69d92ce5a7e578c6d616c64186efeede3536a559a752f6e4673dd55d994577af4de83a70137112ea25a0c3bdaee99e3e927c84a3389abc3dfb5b5ca6c758bd016ca8a7da793ba59dcba588e0fd3128f993970005d328766577f954641aac965b76ef8879b730c301ac5518359249cb80ab95a704d819b332e9117c12ac6446566fe33e78fd069cdaf27fc8d243c98ab8095a6b135721617b59407ec4e43ec22784880a33ae924e3d3e02e8c1fe952bdf5d72f0ad417c0344e308397412b50ffa89fbb5ef46dbe2ec7f3746cc598fa5e67914bc0f8a6f92683741d7b300c4e646a116412edc31d18869ae7c96083721f08945289c101b579c015267068e63e49bb34d8085ce69dbbbedcf927995c9f2374ba7c3bf1623124025993ff3d7d8779041477fc66959e75da2b9756182394c44d227d9d0e70482f4d4d4f8d28b5d3d1480d45fbb59638f705b1346a37e7fc6ebc6838447e13c61f69b0a14a53c37f22add23f91cfd5d2bd72605e7358e02ab3cff9fb72f09d937ee100e9ec0a515a064beb7c10654b255f0e98fe29796d6e9499efa11139569be29f586b0eefd225f4aed499a3920322d6802224e697393b8cc73278b98a555edd95c2c8f9842bb85dfe766b26671d4a194c88296a636e767b6e7706633664c73f01ecc6c116b69d23460d8a661a79b9d4c7df9d5037d27d53073feb3c710692ae2e4f970c07927d5b163792c5f600f378e67b93976709b3dc2dc841ced8ff8fb03a1c11c0c43a4a1497d5eb25dedbcfba0f02506dc689e9dbb1c39f1c8d4b0a6ccc550dc3314587e2cbfc1babbe983b0c6f1659474c19bebef4ef0cc032bd62f1f2cab4b29bf29ca30c5f2682b2d5903380c614b9a942b162760827da16ff3419214fc63817b06b1f825390fcba11cc45d8ed3cb4caa435333e0425afaa110f0504b4636aaef54d856f245d48a4f3b0689cf7d66ae1f251cf2e1ed4f6d619698a562568769150aee2fbcfca143c869579a2e746222e10d3c30758e6b8a8024068aa54595420a7d3dd69925e8643a0326666fe79fafdbf521dc8fccebfe830816f78dfbbdb941404e5ab97d31615a5ea768e5cdbb6e55a407322453266ddb64531b97a12d4c2b7f95c6bd917362c872e47b3ae88e769be88a1b5e3a6d3dcc802533e2c8d907a14ee53fd15e67cdfaa539107a41e7e56a35480771e85ecad64020b118596b23d8a5379f3cce759b6d06921deebe24e0f3b26116d888b27f4e3f9a28d24c5523730cbc586fe049e7fa5651e44b895de6bac74b8420fe0af6cf2310983187a556a9e858d40740fdb45d31814c6491e9b42ab6409ed9768db5c7b031a293e323a3e61150f916db0a4cca8d6dbeab498c166cc047edcf742baa1dff5767a8cd3408378172fae83695bf3dd514f01a88dc2b19f4c6dbd1aa397ecdf82d1cec20d59cd23b3f0f2629050b31b0701919dc64314dfa0cc2824516d7b7473703957565fd2ada83ee99d7ba97417df91b9d2e47633392357d3724c5daaf3c620347a7f9f9df6e1debf4059c15d96acca22cb8cb562e777f593d8526783624881e09ea02600c3fe7ac809e47bfd90dcf876a51cfdbbe1567132359bb0493690a34de0aca678595fbdf748ae5a03c4ae08a4ed829bdc110c7d89160a91d97a122163428bc723f39f40a46dab9f47a7fe901fdc6fb66f295d7a6c4d344298b8d51adf7afbba8def4e6059142a2ba0fcae93d03df7eb7cefd39b07c937c793f0c1f81bb0ecb081d1db96c27df3fccc6e15ce63b7319df4c8ab5533c433037cf2d265f375033cb80f14ab921a53588b9d482fc9953cff5c1ee2e21fc769767a2c956d270a1457a3c3b29c9be2388de400fe26677f797470b660bf97c04613abc48089f60337052e07169cfa31f88ffddd5a2d2eae657d5ef014bacb7df031f1df0615a9eea720c977dd138d76fe780d6de8d6debc459580414720cffa70c23232d286628979dfb5b54dc25a596bb847778e4441c6d8066500fb05a19e2c8b120627dc35227e0ca0ca7509937f92da3c2d1b19c571b0d27a8884066f3a4a590349a30025a69e9d30c2a341374396fb12f1daa3f6c1b90ae5b3f0bbe8d43c2f0f9a9f3bb8a5802f1c38a55a891c57a76cf91f06b0b18f586cf68a2da6b32d60ef0d67a8e6ee1cac3c7a45ebc933af78e6850798af120055d81c090242fae5afc39ea7616e0bdf6b50712e844fc07c262f40f88011cfcb7b23b8329f83deacda6de98778a33ac00cfc97d61f42f12c39e10d03922273c5e8a46a74d3b79dc9d56f80af18ff3c08329102e1071d6bdeb35cf8e097b36031bbf07a43f537ded479ec80ee122e251c1833388020ce3ba3f4ea11c49c69570fbd18e91d2134a6b706ac0da7c2cec166760d56efaa45fb5f7a11ced04aa7b1e7e0e418b008d1e5d7164c74af0ba875a7b1a678f34c1043b637e9e03229b542a45a8e9743d586c303e021a3952894a36831543561e804973e3fe3bda334293b315c3028b62e7093ae21217f2a72594c88b34bfc472e8b52526508edad878556a48bd589e4a2390d763821cb9fe703aacc9e35268c52166d26869c722287af55f74c4b240c364d87980026e14914310e704d4cff5f050d87db794883b7fb2fe4d8c4c5a7ed09d37604993cc373070725b08df7c90606ee0af64562a7b078be2c2b545183e500de76e258efe2661791c7c7e58fa316dfe7606cc88aeaa74591a7a98ccea3e817f1044f4fb96a9bbaaf905c2dc42f8607632d36b4e4063ad661343ec5661201bb28463d515917d47a394ed2a158c12c3d8fd05dd474355b8dc7ee1b2802eda9c3368115f87acc66a4a33f225a0fdc59ae3ef28b4b57bff7e6ff6cb9dd325f4b1386211240460b89d866a747d226b52249ae037dea5e4c98eff40a1ef33bcff2a668c5ab65aeabfdc32e13f3e54e78db2bf5cff8993a0c6f96a8cca5b24235d26536529c36213bbddb2d2f750384e08e8542953ef50935f809c5c056dd43c71d05c82ae8ba76b02c9ed93c81053f0b93a64d72eefb2e446c2219178b8899f0cb4901c3bac9e41a092e748d878bd5700834c14aad01a9d86277d76d32eb9dc242aabe944adab212534a8061a49614a4b33b191d4e305ccd0cbe3e7589008838f33da52cf29645932f2a027966dfd857292f2707098a5a39af87da6b0ac32b9cc6641c544a4a55624779b2d4065e50831e67feda85f00a4f58dffba2ec3b432d0d8e54e60937590f72b6b855d2b73411f9910ee5ab241f1656318a4e882bfad6be043f7519ca6efd5831659bcbc56c3f0c12ea1f0d9545e0c5a305d27e827c925e61ff09a02a3ccf25044a10fe09e7b41de70c64827fe3c47fe7166e8bb53c4b1eff28f0c6607423b841464e7392c98af5a8581a9fe1a82437b1f58db8669f23bdccb3c3bb10b6ce3b6fcce5b5b0bf1652e1b6284a473c06a1a8746bd9c2bfd1a645bc594ad3f2f2eca37657ba8feafcc750228a0d835e6a0d832f59266a3df1be96a11db68b03cfc413e3fef370c99e3fe1389b72654df60bdd463dddb853bd57f7a6095fe96cb041415fa2408a76327cadc4792cd5250cb7e9115c60d4f248ab0f7c3e2a3f6a960a087057d0b05ac93460bb8b9aed3d83d5e3eae72b48d945dd21d73c36f43be3808f705cffe0fd27143dd49d599dffba7b102f70b3deb315f242a400077851ac8578d2282c8e5ec6308d548a5507da24b61470f3fe305932c7a4081eb4c88b7d9cd68e5e30a27a6e94bcf296db14ad0d13ac5b6531bf52cc215e7e03703e9d95e765d5e96306df7a5fb38cbc5ce52d2654d43c72a7f7f6918b8934425e6b82f9d1ded7f97f6ea33e66f8daeb5e5419eafcb263cd250e46f7f29f7b0b4484338b08e6bfb06e5575c1a80c199008d4cf6fe1ed2b7f779d7184e741a4e355568f5714806addb9a3385be22932430b09c1df2818ae928dee4cb8dd2b320f53dee78847384ac5f27579b573b42cba7e86fc6754487df95868e95df6d98dbe21d0805cbde85d41c6f39ff264f428e0b6813deb7b6aea8b201b7db38b20922ed7bef047242df425df0451c17de12d29f011c7ba8c712bce636fab5c5495735db1ae175ceb6e7a43bb224252c3d689b342c3eee1af2725068a3b893862c4321c513a01f54e7938173aadee6eef1b7d7ba8b61f6338fd38446bdf993ddc4ebd3cd699b4422aaef52a7c9fbc047887fdc6c2423ff2d0f83d63bebbb9c22d8ff9a14bd277c22c42f0e76ffe894ca05aaa0aececa87b3cfe646816fd89239e5bcfc4a0cf92fadfbed2d13036b3c4669d69ff3a916d210f98fc44906974ee91ae728d270dfcbe729e70591268db1408ffa54f92a238f50b769161203077285c14c1d3357256c07b4837617a21f7293f3f7500137fd68c39f4162b0a1ab0e7ea0afd88da23317f2ccb0d3b15965dfa615fa9bf040cbbb820458a550ad14cfcd0ea2f47595ab7c1b2fcd8fc8ece38efbd00111e4aff21ed30c655959c84782f84ab12c0a78eb77f612f8414f777529d6647619baa40e48d156df9ebf5edc3e0a1831b74f40a62a4dc1b2564d2caa5d9cb20d90244b0ce7a66ab92e35ad5c283b880a6b29f5dbfccc95f467e16291a4e7f2016c4b5f8ef9b6e87b83296c2cabaab1e5e2a498a729fe102e7d77ef667d8d72b182cb9cde5f7df0c217ad926c83f5daaefc85abd8b4effe7927bb343a7dbd77c89d0d130e8f960e66ba5576960dda3840af9d3d62d41ebbb26ffc696021f3465b4daa804e248ada6b7bf0eebb6ee6ae422da6692c6fb1ca4d1dfce3276a3012c5e08829bf26997db6d9b19525f3b15936efd9deb9502e06b0b7cda7486b0b0fda4adce55b20c0a30f62165681c3fc94abe42fecb5bdfc59e181c992c86dd13ad8bc951d56a32da5baaa430652aedbe0876494aaa8818bb0993c8e047af31c1cead1b86bbb4ff2607e988d48e16fa6f3e8e8aa05c1da9d8e0ff5e15ad38865a4233e9767e3f6ee3ee65d0a99f517d12b13c67fec7fe2e1496aee2e08521b9d6189a06e068edbb9d195743a7082444279457fec66e101096d436ae0a953b40c74b61b20a8aa06c372d4b51276d15d56bc11dd5b35903154c51cdcb93e0a601285d9ef7d67c516a4050234ded5fc9907af43a659a4b0fb1f78077e7e5b2a02d8bd4d36d7bc3b3d68408f972494311084183a985068f4a750808247ff3f476682acae2f19fc6e0907971dc2bad41acd2d572c0ea2025163d5431a260536c915b7f3e5ad1b2d55785d3ebb912374a1470e8013655fc835496fde796b04a8e6f9c3d57c77a460652b85e356eaeaa2d44802bf11606663e8d77ebff0468470d6dd40a805cd979d2494e702e868be28dccbd217d02eb6"}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001d40), 0x0, 0x0) pwritev2(r6, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r6, &(0x7f0000000000)={0x10000, 0x96, 0xe}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x4) 09:29:09 executing program 1: r0 = syz_io_uring_setup(0x21e8, &(0x7f0000000280)={0x0, 0x3, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:09 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:09 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:09 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:09 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x6, 0x5, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x65, 0x0, 0x3f, 0x29, 0x0, @broadcast, @empty, {[@rr={0x7, 0xf, 0xf8, [@remote, @remote, @private=0xa010102]}, @lsrr={0x83, 0x23, 0xf1, [@private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @empty]}, @timestamp_prespec={0x44, 0xc, 0xcf, 0x3, 0x0, [{@multicast1, 0x3ff}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000480)={@remote, @remote, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x98}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000090) r3 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) io_uring_enter(r3, 0x40de, 0xe709, 0x0, &(0x7f0000000000), 0x8) 09:29:10 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x3) 09:29:10 executing program 1: r0 = syz_io_uring_setup(0x1c2, &(0x7f0000000000)={0x0, 0xc17d, 0x2, 0x0, 0x9f}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{0x0, r7}, {0x0, r7}, {r6}, {r6}, {r6, r7}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {r2, r7}, {r2, r7}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {0x0, r7}, {r6}, {0x0, r7}, {r5}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6, r7}, {0x0, r7}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6, r4}, {0x0, r7}, {r6}, {0x0, r7}, {}, {0x0, r7}, {}, {r5}, {}, {r6}, {r5}, {}, {r6, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {r2, r7}, {}, {0x0, r7}, {}, {r6}, {r5, r7}, {}, {}, {}, {r3}, {0x0, r7}, {}, {r6}, {r5}, {}, {}, {}, {0x0, r7}, {r6}, {}, {}, {r2, r7}, {r5}, {0x0, r7}, {}, {0x0, r7}, {r5, r7}, {}, {}, {0x0, r7}, {}, {r5}, {0x0, r7}, {}, {r6}, {r5, r7}, {0x0, r7}, {r5}, {r6, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5, r7}, {0x0, r7}, {}, {r5, r7}, {0x0, r7}, {r6, r7}, {r5, r7}, {r6}, {}, {r5}, {r5}, {r6, r7}, {}, {r5}, {r5}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r6}, {}, {}, {r5, r7}, {}, {r6, r7}, {r5, r7}, {r6, r7}, {0x0, r7}, {}, {r6, r7}, {r6}, {}, {r5, r7}, {r2}, {0x0, r7}, {r6}, {r5}, {0x0, r7}, {r6, r7}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r6}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {r6, r7}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {r5}, {0x0, r7}, {r5, r7}, {r6, r7}, {0x0, r7}, {r5}, {r3}, {r5}, {}, {r6}, {0x0, r7}, {r5}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {r5}, {}, {0x0, r7}, {r6, r7}, {0x0, r7}, {r6, r7}, {}, {}, {r6}, {r5, r7}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {r5}, {r6}, {}, {r5, r7}, {}, {}, {}, {r6}, {0x0, r7}, {r5}, {}, {r6}, {}, {}, {r6}, {0x0, r7}, {}, {r5, r7}, {}, {}, {}, {0x0, r7}, {}, {r6, r7}, {}, {0x0, r7}, {r5}, {r6, r7}, {r6}, {r6}, {0x0, r7}, {r5, r7}, {}, {}, {}, {r5, r7}, {0x0, r7}, {r5, r7}, {}, {r6}, {r6}, {r5}, {}, {r6}, {r6}, {}, {}, {}, {r6, r7}, {0x0, r7}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={0x0, r3, "c484ae5d1b94ee3a671bbceed7a09e052e53066f36fad793bd91778675a7f0937dddeb7109e6b928b2ec3d4599eab15c478a68eb02977e6c9dc148672717b9c9e3e5b00016c09669f388a36f469edb2b14e0c063ca20b98a680101cd19838cced8a7a8b256d466e51d251a08b64ecc4831e1e96908ae86276c860aa44c23790b32d0a9c5576b75d0d3f88ced0e90a4ae76e94d63e2ac08afa59e137a7efdfd9401057b656f651ec265b1e751e24947414cd64cf1b6b361d7d7d2495af310ac1b5d8c925d6abf40d6cac083ec28a6d0ef9c054752a9ffb6a600cb84fb7d32eda68cc99bfc088d61ba9d1b96e712361945636964f38f01e4a8d7021fe309275af2", "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"}) r8 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x9, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="5b589337d22450f4f3c7f82ab053054d2c3b8b286dd4", 0x16, 0x3}, {&(0x7f0000000300)="bfbef9f3af25b8a52dd4865e76d7cd74cb3793b2e5e899b7bf4afc6e0fdc78882a7713384690fa7d1402542c2ea37f0945a415e999fafd1f29b46a55073d3570b9bd1604ad89b2d0f159c47e4a0de134b1c68e1d19557f6ac81c9fcab72fcbc2c64571bc207f6503b50b", 0x6a, 0x1}], 0x22, &(0x7f00000003c0)={[{'\x00'}, {'\''}, {'*{\'*'}, {'\x00'}, {'\x00'}, {'\x00'}, {'\x00'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '[&\xa8$*/'}}, {@hash}, {@hash}]}) ioctl$int_in(r8, 0x5421, &(0x7f0000000440)=0x18000000000000) 09:29:10 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x4000000000000) 09:29:10 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x9a, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:10 executing program 0: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x4000, 0x22, 0x1}, 0x18) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0xe608dbb816b63934) r1 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r1, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x7, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r1, 0x6fc2, 0x0, 0x0, 0x0, 0x0) [ 716.528843][ C1] sd 0:0:1:0: tag#3527 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 716.538882][ C1] sd 0:0:1:0: tag#3527 CDB: opcode=0xe5 (vendor) [ 716.545318][ C1] sd 0:0:1:0: tag#3527 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 716.554340][ C1] sd 0:0:1:0: tag#3527 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 716.563369][ C1] sd 0:0:1:0: tag#3527 CDB[20]: ba 09:29:10 executing program 1: r0 = syz_io_uring_setup(0x182, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_SPLICE, 0x10001) syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r5, &(0x7f0000000000)=0x80, &(0x7f0000000280)=@xdp, 0x0, 0x800}, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:10 executing program 1: r0 = syz_io_uring_setup(0x3b9e, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/39, 0x27}], 0x33e) 09:29:10 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2d, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:10 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3d01, 0x86b8, 0x3, &(0x7f0000000000)={[0x800]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) fcntl$getown(r5, 0x9) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:10 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2e, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:10 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x9b, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:11 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x4) 09:29:11 executing program 2: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2f, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:11 executing program 4: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x1, 0xfffffbff) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x100000000000000) 09:29:11 executing program 0: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x7, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000880)=0xfffffd0c, &(0x7f00000008c0)=@hci, 0x0, 0x508e446ad095c857}, 0x527) r3 = fcntl$dupfd(r0, 0x406, r0) utimensat(r3, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) recvmmsg(r4, &(0x7f0000000800)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)=""/186, 0xba}], 0x1, &(0x7f0000000440)=""/82, 0x52}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/12, 0xc}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000740)=""/9, 0x9}], 0x6}, 0x3f}], 0x2, 0x40000020, 0x0) 09:29:11 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x6c56, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x9c, 0x1119, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x6fc2, 0x0, 0x0, 0x0, 0x0) 09:29:11 executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000008c0)={0x0, 0x0, "43b2ac750eab322d2b8b4438914ad9aeeac9f13d2f2069c06a00d56619887bdb46eaefd4c49e68cff416c63d18d7d4502963fc0ed6aee29b3039bb712bf24309b1f3ab57259c323823942d60df101bccee8a59c97f34acb6646b8fbe6384aea4ae908a5ebbb1916068ba2493a41f3e06f8db9f666f0e69735f681bf1deab65b73443cd2937bba5c76db6e00d8d79f41587c779129d8a903bf4a7d1cb8f5106999d109678266410981840018c7d92ba131ed38ca38dd1698fe183d7c9dc6a337383e8f79af088c72fe49c1b8906f849fe6caf4a6b692fd5debb914d42f918232371a5ac652bd55aa402a0f9e019e5cb3fcc7f4453d0d531c20c150891b63ad685", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000444c0)={0x0, ""/256, 0x0}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{0x0, r7}, {0x0, r7}, {r6}, {r6}, {r6, r7}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {r2, r7}, {r2, r7}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {0x0, r7}, {r6}, {0x0, r7}, {r5}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6, r7}, {0x0, r7}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6, r4}, {0x0, r7}, {r6}, {0x0, r7}, {}, {0x0, r7}, {}, {r5}, {}, {r6}, {r5}, {}, {r6, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {r2, r7}, {}, {0x0, r7}, {}, {r6}, {r5, r7}, {}, {}, {}, {r3}, {0x0, r7}, {}, {r6}, {r5}, {}, {}, {}, {0x0, r7}, {r6}, {}, {}, {r2, r7}, {r5}, {0x0, r7}, {}, {0x0, r7}, {r5, r7}, {}, {}, {0x0, r7}, {}, {r5}, {0x0, r7}, {}, {r6}, {r5, r7}, {0x0, r7}, {r5}, {r6, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5, r7}, {0x0, r7}, {}, {r5, r7}, {0x0, r7}, {r6, r7}, {r5, r7}, {r6}, {}, {r5}, {r5}, {r6, r7}, {}, {r5}, {r5}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r6}, {}, {}, {r5, r7}, {}, {r6, r7}, {r5, r7}, {r6, r7}, {0x0, r7}, {}, {r6, r7}, {r6}, {}, {r5, r7}, {r2}, {0x0, r7}, {r6}, {r5}, {0x0, r7}, {r6, r7}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r6}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {r6, r7}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {r5}, {0x0, r7}, {r5, r7}, {r6, r7}, {0x0, r7}, {r5}, {r3}, {r5}, {}, {r6}, {0x0, r7}, {r5}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {r5}, {}, {0x0, r7}, {r6, r7}, {0x0, r7}, {r6, r7}, {}, {}, {r6}, {r5, r7}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {r5}, {r6}, {}, {r5, r7}, {}, {}, {}, {r6}, {0x0, r7}, {r5}, {}, {r6}, {}, {}, {r6}, {0x0, r7}, {}, {r5, r7}, {}, {}, {}, {0x0, r7}, {}, {r6, r7}, {}, {0x0, r7}, {r5}, {r6, r7}, {r6}, {r6}, {0x0, r7}, {r5, r7}, {}, {}, {}, {r5, r7}, {0x0, r7}, {r5, r7}, {}, {r6}, {r6}, {r5}, {}, {r6}, {r6}, {}, {}, {}, {r6, r7}, {0x0, r7}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000008c0)={r7, 0x0, "43b2ac750eab322d2b8b4438914ad9aeeac9f13d2f2069c06a00d56619887bdb46eaefd4c49