0, 0x0) io_uring_setup(0x6898, &(0x7f0000000000)={0x0, 0xfd56, 0x20, 0x1, 0x275, 0x0, r2}) 16:55:35 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:35 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x1f31, &(0x7f0000000240)={0x0, 0x3e9b, 0x4, 0x3, 0x2d7, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x100000a, 0x50, r1, 0x0) r3 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000300)=0x2, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) syz_io_uring_complete(r2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r3, 0x8000000) 16:55:35 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) io_uring_setup(0x8, &(0x7f00000000c0)={0x0, 0xc3fc, 0x0, 0x0, 0x9c, 0x0, r1}) 16:55:35 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) getgroups(0x5, &(0x7f0000000000)=[0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01]) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000340)=[0xee01, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000440)=[0xee00, r1, 0x0, r2, r3, 0xee01, 0xee00, 0xee01, r4]) 16:55:35 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000001c0)={0x5, 0x570}) 16:55:35 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x420002, 0x0) syz_io_uring_setup(0x43cf, &(0x7f0000000200)={0x0, 0x3093, 0x20, 0x2, 0x1cb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000280)) r4 = epoll_create(0xd4b) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, &(0x7f00000002c0)={0x2001}, r5}, 0x8) 16:55:35 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x30, r1, 0x8000000) 16:55:35 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x8}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) mount_setattr(r2, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x100000, 0x100000, 0x20000, {r0}}, 0x20) syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:35 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) r4 = syz_io_uring_complete(r1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004800), 0x1, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000004940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004900)={&(0x7f0000004840)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf25020000000c00030083100000000000000c00078008000100", @ANYRES32=r2, @ANYBLOB="0c0008000554eb4fedfe5518dd000200d8000000000000004400078008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00060007000000000000000c0002000600000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="00004bd0", @ANYRES16=r0, @ANYBLOB="000428bd7000ffdbdf255c0000000c009900030000004700000008006b003c00000008006b003700000008006b001400000008006b000000000008006b000a000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) 16:55:35 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x6023, 0x1, 0x0, 0x2c9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) syz_io_uring_setup(0x56aa, &(0x7f0000000200)={0x0, 0x8257, 0x0, 0x3, 0xb9, 0x0, r0}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000280)) r1 = io_uring_setup(0x10d1, &(0x7f0000000300)={0x0, 0xff83, 0x8, 0x0, 0x1f8}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000003, 0x13, r1, 0x8000000) 16:55:35 executing program 0: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0xd1f9, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 16:55:36 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:36 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = io_uring_setup(0x461c, &(0x7f0000000080)={0x0, 0xf51e, 0x1, 0x3, 0x169, 0x0, r0}) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r2, 0x0, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x3, 0x84, &(0x7f0000000340)=[{&(0x7f0000000200)="dcdca1a2f359ebdcb0491d2cf37f72ffa695bd20d0ef6b48025cbc638e931caffa06c813361db227e31982f21f56d78f2dbcdf87a1e47b91f6e93d31ea4aa478e23a35de08650bc5233f73c49e0a34b7056b517d3c6330e4bce7ccf7839d45a4d8a13d1214914cc1d2a9517f5a4c", 0x6e}, {&(0x7f0000000000)="7ed6ef13bc806093acf8fbc8bc", 0xd}, {&(0x7f0000000280)="71907a0e4882463d4023b6a924e846480e5b0125a64371a43ce0bd830201eb5a601385b3a7c432e0607575f6e7e02c93a708986861b57df340eaf208784c44f7b00d7d2006ad3d7e9c3e5d4d9b901f16c20fc951d0359c9af1134ca963d04497c193af2a480d7220cc2d93abce192f58a7c694b1eedb17b5c4b24631107359abec7fb56d52fa09693bcb589c65dbd262c90ffdd5fd04eb98319f5277dec58f9da06eb523942dfc0b4aff", 0xaa}, {&(0x7f0000000100)="77a2acd416af0d50e32e5bfec0479d", 0xf}], 0x4, 0x2, 0xa1aeb678063728ef, {0x3}}, 0x0) syz_io_uring_setup(0x7753, &(0x7f00000003c0)={0x0, 0xfb7f, 0x4, 0x2, 0x382, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 16:55:36 executing program 2: msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:36 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x0, 0x8, 0x64, @private2, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x80, 0x740, 0x6d, 0xfffffffe}}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r3 = syz_open_dev$loop(&(0x7f000000afc0), 0x31, 0x400600) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f000000b000)=0x81) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f000000b040)=0x1, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000ac80)=[{{&(0x7f0000000280)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/154, 0x9a}, {&(0x7f00000025c0)=""/9, 0x9}], 0x7, &(0x7f0000002680)=""/244, 0xf4}, 0x9}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000005880)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/105, 0x69}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x4}, 0x1}, {{&(0x7f00000058c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/254, 0xfe}, {&(0x7f0000005b40)=""/230, 0xe6}, {&(0x7f0000005c40)=""/213, 0xd5}, {&(0x7f0000005d40)=""/140, 0x8c}, {&(0x7f0000005e00)=""/194, 0xc2}], 0x6, &(0x7f0000005f80)=""/151, 0x97}, 0x8}, {{&(0x7f0000006040)=@can={0x1d, 0x0}, 0x80, &(0x7f0000006480)=[{&(0x7f00000060c0)=""/135, 0x87}, {&(0x7f0000006180)=""/162, 0xa2}, {&(0x7f0000006240)=""/166, 0xa6}, {&(0x7f0000006300)=""/64, 0x40}, {&(0x7f0000006340)=""/78, 0x4e}, {&(0x7f00000063c0)=""/174, 0xae}], 0x6, &(0x7f0000006500)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000007500)=@ieee802154, 0x80, &(0x7f0000007740)=[{&(0x7f0000007580)=""/223, 0xdf}, {&(0x7f0000007680)=""/3, 0x3}, {&(0x7f00000076c0)=""/112, 0x70}], 0x3, &(0x7f0000007780)=""/17, 0x11}, 0x4}, {{&(0x7f00000077c0)=@nl=@proc, 0x80, &(0x7f0000007b00)=[{&(0x7f0000007840)=""/225, 0xe1}, {&(0x7f0000007940)=""/158, 0x9e}, {&(0x7f0000007a00)=""/25, 0x19}, {&(0x7f0000007a40)=""/145, 0x91}], 0x4, &(0x7f0000007b40)=""/161, 0xa1}, 0x2}, {{&(0x7f0000007c00)=@vsock, 0x80, &(0x7f0000007d00)=[{&(0x7f0000007c80)=""/77, 0x4d}], 0x1, &(0x7f0000007d40)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000008f00)=[{&(0x7f0000007dc0)=""/203, 0xcb}, {&(0x7f0000007ec0)=""/10, 0xa}, {&(0x7f0000007f00)=""/4096, 0x1000}], 0x3, &(0x7f0000008f40)=""/161, 0xa1}, 0x5}, {{&(0x7f0000009000)=@phonet, 0x80, &(0x7f000000a640)=[{&(0x7f0000009080)=""/150, 0x96}, {&(0x7f0000009140)=""/81, 0x51}, {&(0x7f00000091c0)=""/253, 0xfd}, {&(0x7f00000092c0)=""/152, 0x98}, {&(0x7f0000009380)=""/174, 0xae}, {&(0x7f0000009440)=""/94, 0x5e}, {&(0x7f00000094c0)=""/15, 0xf}, {&(0x7f0000009500)=""/148, 0x94}, {&(0x7f00000095c0)=""/87, 0x57}, {&(0x7f0000009640)=""/4096, 0x1000}], 0xa, &(0x7f000000a700)=""/169, 0xa9}, 0x7}, {{&(0x7f000000a7c0)=@generic, 0x80, &(0x7f000000ab80)=[{&(0x7f000000a840)=""/197, 0xc5}, {&(0x7f000000a940)=""/26, 0x1a}, {&(0x7f000000a980)=""/50, 0x32}, {&(0x7f000000a9c0)=""/196, 0xc4}, {&(0x7f000000aac0)=""/138, 0x8a}], 0x5, &(0x7f000000ac00)=""/113, 0x71}, 0xfffffff8}], 0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f000000af80)={'syztnl2\x00', &(0x7f000000af00)={'ip6tnl0\x00', r4, 0x2f, 0x1f, 0x5, 0x2f8c, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7800, 0x7800, 0xfffffff8}}) 16:55:36 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000080)=0x1, 0x0, 0x4) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) 16:55:36 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) write$P9_RWRITE(r2, &(0x7f0000000300)={0xb, 0x77, 0x1, 0x8001}, 0xb) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_setup(0x4110, &(0x7f00000001c0)={0x0, 0x4a13, 0x20, 0x0, 0x52, 0x0, r3}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:36 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) 16:55:36 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) syz_io_uring_complete(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000600000000c00990000000000000000000600b10000000000"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000005c0)={'wg0\x00'}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=@ax25={{0x3, @netrom}, [@rose, @default, @null, @bcast, @null, @default]}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f0000000080)}, {&(0x7f00000003c0)=""/84, 0x54}], 0x3}, 0x0, 0x12143, 0x1}, 0x81) 16:55:36 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x4540, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:36 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0xfffffffc, 0x387}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:36 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x40000, 0x13}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000600000000c00990000000000000000000000000000000000705c640386e2febd"], 0x28}}, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:36 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x810, r0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x40, 0x1000, 0x1}, 0x1) [ 1572.438632][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1572.500025][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:37 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:37 executing program 2: r0 = syz_io_uring_setup(0x6627, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:37 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_setup(0x3431, &(0x7f00000001c0)={0x0, 0x8f1b, 0x14, 0x1, 0x2dd, 0x0, r0}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd=r3, 0x1ff, 0x0, 0x2}, 0x5) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x4, 0x20000000, 0x400, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) inotify_rm_watch(0xffffffffffffffff, 0x0) 16:55:37 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0x35ca, 0x1e, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:37 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000300)=0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) syz_io_uring_setup(0x6d29, &(0x7f0000000240)={0x0, 0xef60, 0x8, 0x2, 0x190, 0x0, r2}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x90) r1 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r1, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x428802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000380)={0x690, r4, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1c3, 0x2e}}}}, [@NL80211_ATTR_IE={0xca, 0x2a, [@mesh_chsw={0x76, 0x6, {0x40, 0x3, 0x29, 0x800}}, @tim={0x5, 0xbc, {0x3, 0x9f, 0x3, "5ab9ba7502f5069486159fcd304cac1b1f4a1939de79bbf97ed984459e2b067f4066ae33e6aba1fc6887c0a21583fe0988f50b962be896d5ffaad60f956b85ed916ea5bdbeee3cb8bae8d3a76672118d97a069588c10663fe938e80cc742762b58ac67b9f465e7184db836d045bc1b512bf06ec0d32298c7528e8a54816689890f803f5d9abad835ecd6a956730c7ae48e4b834c51a81fb1fa2fe96484c89c56fe8d80cf9ee3964f0da65c1739e83865f09f689da87a19f329"}}]}, @NL80211_ATTR_IE={0x90, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0xa1, 0x7f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x20, 0x8}}, @peer_mgmt={0x75, 0x18, {0x1, 0x4, @val, @val=0x2e, @val="af3ec26bc198fe3fb4291121bed7f465"}}, @measure_req={0x26, 0x29, {0x80, 0x1, 0x6, "e893b018a45d50910a4957e05357708e39badafb3e2a47b7b1dcfc4483fc46b8897550fb7b30"}}, @chsw_timing={0x68, 0x4, {0x68, 0x401}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_chsw={0x76, 0x6, {0x4, 0x5, 0x20, 0xfff7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xa, 0x7}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x97, 0x20}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0xa4, 0x2a, [@preq={0x82, 0x62, @ext={{0x0, 0x0, 0x1}, 0x5, 0x9, 0x1f, @broadcast, 0x0, @broadcast, 0x2, 0x2, 0x6, [{{}, @device_b, 0x5e}, {{}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0xe53}, {{}, @device_b}, {{}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}]}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3f, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x35, 0x9, 0x9}}, @challenge={0x10, 0x1, 0xe2}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x41}}, @peer_mgmt={0x75, 0x4, {0x0, 0x8, @void, @void, @void}}, @random={0x3, 0x19, "1546a68d3178db86284f205a73c42fdc661a7603cccd269968"}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xa6}]}, @NL80211_ATTR_IE={0x10c, 0x2a, [@ibss={0x6, 0x2, 0x800}, @ibss={0x6, 0x2, 0x3}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x0, 0x81, @device_b, 0x5, 0x14000, 0xe2}}, @measure_req={0x26, 0xc7, {0x8d, 0x0, 0x40, "c6d9f0a65e6909291aaab4910f9cb19c634d8c08abab323e3d6690f159cb6de04c721223c4fffc1007fc70a1cf1bef12faaaffab4f6da83875a8e35f72e3134eaccf364402573d65c8f289fbb331a72fd51c7d6e198e2ebbfb9857dd414d217ca790e45fa84a1403241d109a7c4f6cd317800f960da417fbd4f95c0d91a543f0a328500b3cdf71e56f4f9602804b95d38d1367f1a6efa773988425e6ce1efad5266dbb56bda1025109d9996411882845f9f6d7597128d8fde8460a9d712ffee835d42a84"}}, @supported_rates={0x1, 0x7, [{0x2}, {0x12}, {0x6, 0x1}, {0x16, 0x1}, {0x4, 0x1}, {0x5}, {0xb}]}, @rann={0x7e, 0x15, {{0x0, 0x58}, 0xdd, 0x65, @device_b, 0x6, 0xffff0001, 0xf1}}]}, @NL80211_ATTR_IE={0x31, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x7, @val=0x8, @void, @val="44192c8f523a5b1ee1d5a24e9819f96d"}}, @channel_switch={0x25, 0x3, {0x1, 0x4}}, @supported_rates={0x1, 0x6, [{0x5e}, {0x5}, {0x6c}, {0xc, 0x1}, {0xb}, {0x16}]}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x315, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @random_vendor={0xdd, 0xd5, "bd3768fb42714c815c34225343de367dceb16cec2a394de5a9ebe095383c7f6779c7889c0ec4bccfde248e0f814fcf54cb0f2d8a7332fc145e5c0af7e816549ff4a03f7010fe51790b85bbe2757ba56f0da71028b39a5edf2bb778422c0e8814215230dd8604f2723db301393302d92e1fb7f3a1a954ee9b172e13bb39ed25518f75397cbd45c9a4e0a004cb480ef051060af21c35b0a36447fb7f56dfa8b6aa09031c5f53c3ba2f3ab869d295f40e63ab777868343ee81a9f1256328ac003f5a5fe0848f9cfee6c4df263c68b8d0294004d4505b6"}, @random={0x8, 0xfc, "0712204718fe23723a97256d4d6aa4be6b74b293c2f08864904b22d8cdd00ce3491aecacdab70360482f1c688572360773b19ddb6160b9067f50be67cc84b855c42acc515cc4d4ddd128f459426f067c065b7a3da03544f3cc65be20e8fe277492d8f89ac50505e3e45ad51147a21494594653872a756af5f216f493b78e1bdf84727ef3766f6a6a74a0e936fce283ad4de1c26b45856e7106c3bc8e890574a26d58e58fdb048d36b4771dd492c789bdf0a4bfccabf45616c7344797c8106fd1b69a8a6bdf30016849be3455702ed7370ac8c9aa8eac4f0621ead606ca436c2200db15de9ea97caa1971696b7a2f39a0b4a883b2cd784a4bd568d569"}, @random_vendor={0xdd, 0xf5, "f7cf46ad2cdd973f122dbe492cda60045f74b2ef196316336f361228aff105e7b5359eb8ead36b70811f567b9ab6c1f4eadb1e4af4293784245dadd84bb18e5588255213a9d36c403ea41492c937d799cedc6daff860e5dcd4837ac6a522992d0d1d75dbe1a51d4501a10e721d31cbf3f46c9b2f8e8e4190e9510c4feb418520ee45048aef25b7db41737328b50ad2fa1502412f5f6299a3b7594ad517921ac02db55a89f4e293322ed6a2e11c9986c472c224f5bc6577c033c8d67ade8aafa0128f98600c1b055567413fcd52ab85ea7626a7317b07e49bc629eaecceb35ae6bf1ee91bdb6b3254f894288a0704766efc2efaccd2"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x34}}, @peer_mgmt={0x75, 0x18, {0x0, 0x9, @val=0x4c, @val=0x11, @val="9e70cb918187faf518e015305208a958"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x7f, 0x40, @device_a, 0x0, 0x7, 0x4}}]}]}, 0x690}}, 0x4000) 16:55:37 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 16:55:37 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000200)={0x7, 0x1b, 0x1}, 0x7) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x40010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) r4 = syz_io_uring_complete(r3) ioctl$BLKFRASET(r4, 0x1264, &(0x7f00000001c0)=0x8a7) 16:55:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80060}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_PMKID={0x14, 0x55, "bd201d3407da783bc2caf66fe633edac"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x68}, 0x1, 0x0, 0x0, 0x14000015}, 0x8000) r1 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0xfffffffc) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 16:55:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x634c}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x3000c040}, 0x10) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004811}, 0x400c000) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44f60008", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250d000000080032001d000000000030000000000005002e00f2000000050029000100000005002a00010000000800340081000000a0524ed673a93505e327352df66531099635ed8a22daf4c63423e2fc22a611cfcb2e1974865a6f750a2213e4e19c358a3695401d9c061188"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) 16:55:37 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x588d, &(0x7f0000000080)={0x0, 0xf395, 0x2, 0x2, 0x19d, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 16:55:37 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x4109, &(0x7f0000000280)={0x0, 0x1c03, 0x0, 0x0, 0x209}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000009, 0x20010, r2, 0x0) 16:55:38 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:38 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0x4, 0x10000, 0x23456}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:38 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) r1 = io_uring_setup(0x349e, &(0x7f0000000240)={0x0, 0x3ea9, 0x2, 0x3, 0x391, 0x0, r0}) io_uring_setup(0x6257, &(0x7f00000002c0)={0x0, 0xa571, 0x2, 0x3, 0x37e, 0x0, r1}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x9e) 16:55:38 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x16}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r2 = syz_io_uring_complete(r1) write$P9_ROPEN(r2, &(0x7f00000002c0)={0x18, 0x71, 0x2, {{0x0, 0x4, 0x7}, 0x2}}, 0x18) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7a1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004000}, 0x5004) 16:55:38 executing program 3: syz_io_uring_setup(0x7e1d, &(0x7f0000000140)={0x0, 0xe5ec, 0x4, 0x3}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_io_uring_setup(0x524c, &(0x7f0000000080)={0x0, 0xfe7, 0x2, 0x2, 0x22b}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 16:55:38 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x4010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:38 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x15b5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:38 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) 16:55:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="000126bd7000fcdbdf251a00000014002380080006000000000008000610020000000899a4aef19679dabbdd5de70f062c6cf3fb9a188965a34e2300397ffab5da5f3a02f7d41267283d7712f4c73a5f376b4ba53e1e74a0a470438e5186bfb4433cecb48eed5bd22bbf752a5d263e9446f7cfa7278d787ec79cf16ad11809", @ANYRES16=r0, @ANYRESOCT=r4, @ANYRES32=r4, @ANYRES64=r0, @ANYRES64, @ANYBLOB="4d1d283ae4b640ce8f9be8991176d110e57934b804d94f28cc6265c56b730ee32827e1a1c26de220f4f740eab791de0441ef35ccf75b9702faaa2682c0c61ec1add3340e412d5ea724179a688f8ef5b5b1ca7f4ed6928b05e3b4de0c4f77aba58f17e18d52fa25871b05c340e37deb3f3227e710cd2a726b06a153d5e2893738a7e856d6f06743"], 0xa0}, 0x1, 0x0, 0x0, 0x14041}, 0x4020040) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x24000014) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2c4751b7}]}, 0x84}, 0x1, 0x0, 0x0, 0x8002}, 0x481) r8 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2004004c) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) 16:55:38 executing program 4: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x40000000, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "968ac0a29e62cfe4", "25ae12c296759127ce2cfff58ff1b76d", "9e083f74", "d203c76f492a07a9"}, 0x28) r1 = syz_io_uring_setup(0x48cf, &(0x7f00000002c0)={0x0, 0xaef4, 0x0, 0x3, 0x1fb}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r1, 0x8000000) io_uring_setup(0x2148, &(0x7f0000000240)={0x0, 0x1e5, 0x20, 0x3, 0xb4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x8080, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x10}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4002090}, 0x40) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="140f0000", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="200028bd7000fddbdf250300000008000300ff7f00000800020003000000"], 0x24}, 0x1, 0x0, 0x0, 0x40881}, 0x48000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x1010, r2, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x1ac) 16:55:38 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xcf1, &(0x7f00000001c0)={0x0, 0x13ba, 0x10, 0x1, 0x239, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r4, &(0x7f00000002c0)={0x8b00, 0xc0}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:38 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/245, 0xf5}], 0x8, &(0x7f0000000b00)=""/87, 0x57}, 0x9}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/211, 0xd3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/5, 0x5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/41, 0x29}], 0x8, &(0x7f0000001fc0)=""/203, 0xcb}, 0x7f}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/63, 0x3f}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/157, 0x9d}, {&(0x7f00000034c0)=""/52, 0x34}], 0x7, &(0x7f0000003580)=""/108, 0x6c}, 0x6}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/147, 0x93}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)=""/93, 0x5d}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/7, 0x7}, 0x3}], 0x6, 0x42, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000061c0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006180)={&(0x7f0000004c40)={0x1504, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x17a, 0x7f, [@random_vendor={0xdd, 0xd0, "3f66a568c10e9192cde49f54cb28c2298c483923e2c454dd8fe54986399e871f62eda77f2a973e692751a009c0527c83aa6de8d617cb642f931b8d2940d8c977f3b64c37fbf25bfe3e7c8e23be26c09c16cb8d6db2d7f60ebf3f04dba45d0c00f63e76cb8aed21364e3f7202e25d4832aab3e3a3c303be3e8fa2e02180a74f12564349c337a16c3388d7a2b5a1832c6d99d4477144967278101ae7420588a0223a5914c3b401fe59047ad358a0a1ea5a10b3130ec1b0363be6b3499aab6c35c3bcdadb1325e32186d53da347c101acb9"}, @prep={0x83, 0x1f, @not_ext={{}, 0x3d, 0x3, @broadcast, 0x80000001, "", 0xeb, 0x1, @broadcast, 0x5c}}, @measure_req={0x26, 0x79, {0xd2, 0x3f, 0x14, "eb5491bde511377d22c66fcc4cab8f66f2bdde30354163627586540e1499f4bee6b2fd517a98f0239343efd1e707500e17c7c6ef6ccef0f9f5f4838b2d0f62c7923c1fc0d2661af3564b81a8aa988548b78900f86b686b2f9e4f02d68376ed6e9ea8676d48a9e18f38a8d4bff7146d40a423513e39b4"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x3, 0x37, 0x6}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x117, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x80, 0x7f, @device_a, 0x101, 0x590e4934, 0x101}}, @random_vendor={0xdd, 0xfa, "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"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1010, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x243, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @broadcast, @initial, {0x3, 0x8}}, 0x6, @random=0x1, 0xe418, @void, @void, @void, @void, @void, @val={0x5, 0x46, {0x3, 0xad, 0x20, "01e75fb1ffda44c52ce2e27c696d15714c0000e937b0baf511cd7777b7ef82d036a5dda0356f3dfdb2b8d20c961b9a273be6130acc6e5936d862d14fd8379b5932963d"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe0, 0x99, 0xda}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0x3, 0x34, 0xbe}}, [{0xdd, 0xbb, "ba3c01bbcf115c3fca579a123d8384eb335eb4106466f51615bd0977f64df2365d2a47df1867b70e0c60ebc670c8a227b82d5363c5b69250fc8be75417263dcf6e9ed1471f07ddbaee4b2ae5b6b592dad30d194db1ac9117cb8575761c784128fa806c5bacf3b0fe69f0fc630c2d13bbcf389caf8e0aa572a15ae6ec5b52af4eb6cb359e53246bd5307ea86f784f993bf85decfbabbbd0e60430ebac4f047ee386869c4596b2e367eba193fe6969e05cbfbbbce29dccdf4dbd2e9f"}, {0xdd, 0xfe, "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"}]}}]}, 0x1504}, 0x1, 0x0, 0x0, 0x18}, 0x20000c04) 16:55:39 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:39 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_io_uring_setup(0x47ed, &(0x7f0000000500)={0x0, 0x592c, 0x2, 0x2, 0x320, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_io_uring_setup(0x7586, &(0x7f0000000080)={0x0, 0xa91a, 0x8, 0x0, 0x1a5, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x3, 0x6, 0x40) openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0xa80, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r6, 0x8, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2040}, 0x20000001) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r5, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x198}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0xc00c0) 16:55:39 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x8000000) r2 = syz_io_uring_complete(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r3, 0x200}) 16:55:39 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) syz_io_uring_setup(0x7e3f, &(0x7f0000000140)={0x0, 0xe967, 0x2, 0x2, 0x8f78, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x70040, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x184, r5, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_BEACON_TAIL={0x21, 0xf, [@supported_rates={0x1, 0x7, [{0x16, 0x1}, {0xc, 0x1}, {0x2}, {0x12}, {0x16, 0x1}, {0x48}, {0xc, 0x1}]}, @link_id={0x65, 0x12, {@initial, @broadcast}}]}, @NL80211_ATTR_FTM_RESPONDER={0x138, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xdf, 0x3, "fc8a961a098a2c2e74491a4fca86b8f0b613043f75dad11d34a0e0f243ccacb246ed6f6cc07aa77899171d27db272f7b880aa48fade6431f7fabca67f59ddf56c20ad34e8ac87f51f3b03edc1be72f4e2d180bbf0c5182b63e93391a9c9eae4cceeb02fb991ae92d275734a12675ed5940765ee9bbcf9cafc740f97b826cb548682af30a5c84da11d588347be398f4a17adc032498505f9f0cf99627fa13e4ad96b2e90849b1f14dcdd21c88f42f52c55b6512cf65bca9cadd26549b8a5e297dc4f785e6a90b9cfcad7093deb0aaff00e3c6285e9bc09102b6afca"}, @NL80211_FTM_RESP_ATTR_LCI={0x4f, 0x2, "1635f2c085a9d2a5fd3da92b441898310c260dbab190d3cf0d4aa35afebf7d325dbfefdee5a49ec700b19ad161884d1c3988cf03457863f8c2a6a834c03e395ce687c71d3f7ba863e4935d"}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4008000}, 0xc080) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000c005) 16:55:39 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000015) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r2 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r2, 0x8000000) 16:55:39 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48044) r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) io_uring_setup(0x1787, &(0x7f00000004c0)={0x0, 0x6678, 0x8, 0x3, 0x2c2, 0x0, r2}) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x8, 0x2, {{0x3a, 0x4, 0x0, 0x3f, 0xe8, 0x66, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "df38c3"}]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}]}, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x2, [{@private=0xa010102, 0xfffffff8}, {@empty, 0x3ff}, {@remote, 0x4}, {@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x15}}]}, @lsrr={0x83, 0x23, 0x24, [@loopback, @loopback, @empty, @loopback, @empty, @broadcast, @remote, @rand_addr=0x64010100]}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x5, 0x5, "782ccd"}, {0x6, 0x4, "bf93"}, {0x2, 0x9, "32da424e724bb5"}, {0x1, 0xf, "f26d7aee20d82433917ea6431a"}, {0x5, 0x10, "d1015956978b7c644d629a2d665a"}]}, @timestamp_prespec={0x44, 0x34, 0xbc, 0x3, 0x3, [{@local, 0x59bb}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x1}, {@local}, {@private=0xa010100, 0x1}, {@remote, 0x400}, {@local, 0x8}]}]}}}}}) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d090}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:39 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:39 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) io_uring_setup(0x5111, &(0x7f0000000240)={0x0, 0x853, 0x2, 0x2, 0x349, 0x0, r0}) 16:55:39 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000004140)=[{{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000001440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000001480)=""/4096, 0x1000}}, {{&(0x7f0000002480)=@x25={0x9, @remote}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002500)=""/192, 0xc0}, {&(0x7f00000025c0)=""/106, 0x6a}, {&(0x7f0000002640)=""/21, 0x15}, {&(0x7f0000002680)=""/96, 0x60}, {&(0x7f0000002700)=""/107, 0x6b}], 0x5, &(0x7f0000002800)=""/184, 0xb8}, 0x4}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000028c0)=""/120, 0x78}], 0x1}, 0x3}, {{&(0x7f0000002980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000002a80)=""/224, 0xe0}, {&(0x7f0000002b80)=""/2, 0x2}, {&(0x7f0000002bc0)=""/248, 0xf8}, {&(0x7f0000002cc0)=""/173, 0xad}, {&(0x7f0000002d80)=""/228, 0xe4}, {&(0x7f0000002e80)=""/137, 0x89}, {&(0x7f0000002f40)=""/170, 0xaa}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x9, &(0x7f00000040c0)=""/75, 0x4b}, 0x7fffffff}], 0x4, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000004280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100029bd7000fcdbdf250d00000008000600", @ANYRES32=0x0, @ANYBLOB="08003b000200100008000000009500000800320009000000"], 0x34}, 0x1, 0x0, 0x0, 0x49c7e8e83a4e5ad0}, 0x40) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x3c, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c001) syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:39 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe3f, 0x16}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x59}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "f74434745acedf15c682408d75d7f7fd"}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 16:55:39 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x20, {0x4, 0x1, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x4, 0x401, 0x30fd, 0x7, 0xffff, 0x5, 0x5d, 0x0, 0xfff, 0x6, 0x4, 0xfffffffffffffffa, 0x4, 0x14c, 0x1}}, 0xa0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x23f400, 0x6, '9P2000'}, 0x13) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x100810, r1, 0x8000000) 16:55:39 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000126bd70de49e7e34b5186a500fbdbdf251a0000000c00060003000000000000000c06060003000000000000000c000000030000000c0006000300000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 16:55:39 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:39 executing program 4: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x11c13, r0, 0x8000000) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) write$P9_RREMOVE(r1, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7) 16:55:39 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8802}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:39 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r2 = syz_io_uring_complete(r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x598a, &(0x7f00000001c0)={0x0, 0x8a9f, 0x20, 0x3, 0x237, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2b, 'rdma'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'io'}]}, 0x14) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000280), 0x0, 0x4) 16:55:39 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0xb566}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000040)=0x81, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:39 executing program 2: syz_io_uring_setup(0x2000662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000040)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) io_uring_setup(0x57d6, &(0x7f00000000c0)={0x0, 0x5e30, 0x4, 0x7, 0x151, 0x0, r0}) io_uring_setup(0x5a90, &(0x7f00000001c0)={0x0, 0x3e17, 0x20, 0x0, 0xf}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r2 = syz_io_uring_setup(0x3b68, &(0x7f0000000300)={0x0, 0xd7c2, 0x10, 0x3, 0x368, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)) syz_io_uring_setup(0x1eea, &(0x7f0000000380)={0x0, 0x47c5, 0x0, 0x3, 0x11f, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x0) 16:55:39 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x22aa5e3da641cc3a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x17c5, &(0x7f0000000240)={0x0, 0x360d, 0x4, 0x2, 0x15d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) fstat(r2, &(0x7f0000000300)) 16:55:40 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:40 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r2 = syz_io_uring_setup(0x45cf, &(0x7f00000001c0)={0x0, 0x3, 0x10, 0x5, 0xfffffffd}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r1, 0x8000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x493c, &(0x7f0000000240)={0x0, 0xf4fd, 0x8, 0x1, 0x13a, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000340)=0xffffff31, 0x0, 0x4) io_uring_setup(0x6df7, &(0x7f0000000140)={0x0, 0xf516, 0x20, 0x1, 0x3a8, 0x0, r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r5) 16:55:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xec3}]}, 0x54}}, 0x8010) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x400c0c0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x10, 0x18, {0x8, @bearer=@l2={'ib', 0x3a, 'wg2\x00'}}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r2 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x8000000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000400)={0x9, 0x6}) 16:55:40 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x803, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_setup(0x13eb, &(0x7f0000000080)={0x0, 0x9f64, 0x1, 0x2, 0x11d}) 16:55:40 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x267}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:40 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:40 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_setup(0x1691, &(0x7f0000000240)={0x0, 0x289, 0x1, 0x3, 0x5c, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x3, 0x0, 0x0, 0x10001, 0xb, 0x0, {0x0, 0x0, r1}}, 0x7) 16:55:40 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:40 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x699c, &(0x7f0000000080)={0x0, 0x40ac, 0x8, 0x1, 0x3df}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x53ac, &(0x7f0000000200)={0x0, 0x12e9, 0x1, 0x0, 0x155, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3}, 0x6) 16:55:40 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x8, 0x3, 0x8}, 0x5}}, 0x18) 16:55:40 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffc, 0x2000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x50, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x39d2, &(0x7f0000000500)={0x0, 0x660, 0x10, 0x0, 0x2f4, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000580), &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000006c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)="784f66dab88beed593dd80c47fcd899913726a0c50bfb52937e7b15c6434776d91073ee8cf9664e68bc3d8b943b6234d656ad20cf3d6a85e6082a53c52c3313b114eb54bf39b9bb1a9265142879adf5b759b8a23ef30b15e5206576a7b813f7b6fe94132f6c1f71754728e890b4d8168381a07ee5e55f49bee5fb288bd4defca86167a54c211e162b5f9ffd023159936d9a38567f811a403ae40702b8e921fd6fb65eded68cfd6ba843767871cd93ee3f3df", 0xb2}, 0x3ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2b, 0x1f, 0x81, 0xffffff96, 0x4a, @rand_addr=' \x01\x00', @mcast1, 0x7800, 0x700, 0xf2c, 0x7f}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) fstat(r3, &(0x7f0000000080)) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x181001, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}], @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:40 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_complete(r1) 16:55:40 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x4789, &(0x7f0000000200)={0x0, 0xaa91, 0x0, 0x1, 0x9b, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000280)) 16:55:40 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x2c9, &(0x7f00000001c0)={0x0, 0x69fe, 0x5, 0x2, 0x8c, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)) io_uring_setup(0x2919, &(0x7f0000000280)={0x0, 0xfe2a, 0x0, 0x3, 0x141, 0x0, r1}) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:40 executing program 2: r0 = syz_io_uring_setup(0x5838, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'rdma'}, {0x2d, 'memory'}, {0x2b, 'rdma'}]}, 0x14) 16:55:40 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x80010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000000), 0x0, 0x4) 16:55:40 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000) 16:55:41 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:41 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000040)) io_uring_setup(0x22aa, &(0x7f00000000c0)={0x0, 0x6dd1, 0x2, 0x0, 0x336}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'pids'}, {0x2d, 'memory'}, {0x2d, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2b, 'io'}]}, 0x2c) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_complete(r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x107002, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000200)={0xffffffffffffff81, 0x40, 0x4}) 16:55:41 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x20}}, 0x40081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) 16:55:41 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0xd2f, &(0x7f00000001c0)={0x0, 0xe742, 0x0, 0x1, 0x2d7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:41 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x64, 0x0, 0x2, 0x70bd2c, 0xd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x479a}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3476}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8c1) r2 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r2, 0x8000000) 16:55:41 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="050009003b89655d47dbff8d8475db4ab6e6124cd8fb03c29f14288c7c8bb42d182f71de2b", @ANYRES16=0x0, @ANYBLOB="020025bd7000fedbdf255c00000008000300", @ANYRES32=0x0, @ANYBLOB="08006b000a00000008006b006e00000008006b003700000008006b0068010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x64, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf250400000014000300fc010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) 16:55:41 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xe72, &(0x7f0000000400)={0x0, 0xbd0c, 0x4, 0x1, 0x387, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d57000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r2 = syz_io_uring_setup(0x52fe, &(0x7f0000000140)={0x0, 0x7fffffd, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x7d, 0x100075}, 0x20) syz_io_uring_setup(0x5e43, &(0x7f00000001c0)={0x0, 0xa4cc, 0x20, 0x1, 0x1a4, 0x0, r2}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r5) syz_io_uring_submit(r3, r1, &(0x7f0000000380)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4004, @fd=r4, 0x5, &(0x7f0000000280)=""/228, 0x112, 0x5}, 0x7f) 16:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x30}}}}, [@NL80211_ATTR_TESTDATA={0xfb, 0x45, "5dfbce985fcf3debe6a66f72cb92da5f88fd4b506c27e63bdc081d3ff506000000c47e9718923817058a7c6c6a814507ee14f25f42c26e8018098a16c2b54201c294566f3e22af5a2b215d60bff80c533d38a505799b4266ebdcb4cb53e0a2badc475528e6b7ff4d79c5575dd8fc88845c63a78937b6c0699f0947fdb57b01abbb9d2a4c7d5680ed2788a088d60f552c8c1ce1460a16bc366dfce491f6077f9d0305f57e1bf105ad132fd13d7bbbd06b095fe23d14c1654a47d9650a53dc9b7245fcadce1f91a8abbce071e3956db386cd9d0c3cdea7f096ea4954b41375f1e65b52bd72a54f9a493d14f600"/247}, @NL80211_ATTR_TESTDATA={0x6d, 0x45, "25e5196745b252c0473c870a31f273862399f057b7fb852f3626152fe93834d2b874bb07c795759b6a63de73a277aec93ccb0da1aa713e859a1650378ba75eebae331ca1a78e6babb31fedb8a868f386904801486aedd604fbb2d81c639ec92d8c3f2f7c48899ba8f1"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r3 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r3, 0x8000000) 16:55:41 executing program 3: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1b0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x78}}}}, [@NL80211_ATTR_TESTDATA={0x100, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x83, 0x45, "a2af543934096023aff1c5b59a6389917cf70157b12772102fe1963b8d2358ed1afb8f275b8f016f4b1f0310f7d30764bcfb28c34d9c4b243234f50670fca66546fe749b32bb380266ed4e6225516b8e6cff0a10f992631bb4c703b4a3bf68ae1760948ffce3609d60a0f1984092df716acd7aa19e59091b70c28840e1260b"}, @NL80211_ATTR_TESTDATA={0xa, 0x45, "7075c88d592b"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4004}, 0x20004040) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r1, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x5) syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:41 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082bbd7000fbdbdf25140000000c0006000200000002000300080001000000000008000300", @ANYRESOCT=r1, @ANYBLOB="0c0006000294002100000000"], 0x3c}}, 0x40000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b602d3223e00b1f45686b1cbb64525d7da7bfc1a84620bbfa9d9e6a32af110f89fb5d63c7b97d119ca077a", @ANYRES16=r2, @ANYBLOB="000225bdffffffffffffff0c00080005000000000000000c00080000000000060000000c000300fc09ea31000000000c00040001f0ffffffffffff0c00020005000000000000000c00060000000000000000000c0008005a890000000000000c00020002000000000000000c0004007600"/134], 0x8c}, 0x1, 0x0, 0x0, 0x4c040}, 0xc041) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000a, 0x810, r0, 0x8000000) 16:55:41 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0x2100, &(0x7f0000000200)={0x0, 0x2c08, 0x2, 0x1, 0x251, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) io_uring_setup(0x7df9, &(0x7f00000002c0)={0x0, 0x1a32, 0x0, 0x0, 0x14f, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0x8000000) r3 = syz_io_uring_setup(0x2900, &(0x7f0000000480)={0x0, 0xa5f6, 0x20, 0x1, 0x58, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x0) 16:55:41 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffff28, 0x40) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000001c0)={0x3, 0x2}) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) 16:55:42 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:55:42 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) fstat(0xffffffffffffffff, &(0x7f0000000080)) 16:55:42 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, 0xffffffffffffffff, 0x8000000) msgget(0x2, 0x44) 16:55:42 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x28220, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x1010, r1, 0x8000000) syz_io_uring_complete(r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:42 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x2c47, &(0x7f0000000200)={0x0, 0x8c76, 0x20, 0x3, 0x1e3}) r1 = io_uring_setup(0x514b, &(0x7f0000000280)={0x0, 0x46e4, 0x0, 0x1, 0x3c7, 0x0, r0}) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:42 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_setup(0x2874, &(0x7f00000000c0)={0x0, 0x52f0, 0x4, 0x1, 0x1eb, 0x0, r0}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x3, 0x8, '9P2000.L'}, 0x15) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:42 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x2, {{0x1f, 0x4, 0x3, 0x22, 0x7c, 0x66, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, {[@timestamp_addr={0x44, 0x44, 0xb1, 0x1, 0x4, [{@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa210}, {@broadcast, 0x2}, {@local, 0x3}, {@loopback, 0x6}, {@broadcast, 0x1ff}, {@empty, 0xffffffe1}, {@remote, 0x1}]}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x53, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@broadcast}, {@local, 0xfffff1ee}]}, @generic={0x88, 0x3, "a6"}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf252600000005002f000100000008003c0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x192010}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x10, 0x70bd2b, 0x2, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x40040) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:42 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x1, 0x0, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @empty, {[@rr={0x7, 0x13, 0x4b, [@broadcast, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end, @generic={0x18d, 0x2}, @timestamp_addr={0x44, 0x54, 0xf4, 0x1, 0xa, [{@multicast2}, {@multicast2, 0x10001}, {@multicast1, 0x1}, {@broadcast, 0x9}, {@local, 0x3132}, {@broadcast}, {@multicast1, 0xfd}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xd3c}, {@private=0xa010102, 0x3}]}, @generic={0x8f, 0xd, "16ef403aa0eedf4ac036d7"}, @lsrr={0x83, 0xf, 0x76, [@broadcast, @remote, @broadcast]}, @rr={0x7, 0x17, 0x6c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @multicast2, @private=0xa010100]}]}}}}}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x850f2d9ab61a05ee}, "8d96a3dea90ae5c1", "0fe8e52c8c898ad08040b2e3f68a1827ef773742df6ff9ad94f5d0066d05fbce", "c050f1b9", "bb9d25865a255b1f"}, 0x38) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 16:55:42 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x6ee6, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:42 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0x810, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000080), 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000001540)=""/146, 0x92}, 0x1f}, {{&(0x7f0000001600)=@hci, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)=""/158, 0x9e}], 0x1}, 0x7}, {{&(0x7f0000001780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001800)=""/57, 0x39}, {&(0x7f0000001840)=""/73, 0x49}, {&(0x7f00000018c0)=""/46, 0x2e}, {&(0x7f0000001900)=""/51, 0x33}, {&(0x7f0000001940)=""/87, 0x57}, {&(0x7f00000019c0)=""/30, 0x1e}], 0x6, &(0x7f0000001a80)=""/4096, 0x1000}, 0x4}], 0x3, 0x40, &(0x7f0000002b40)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000002b80)="06e237ae9ed19002262b663da9969003", 0x10) r4 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r4, 0x8000000) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_setup(0x591d, &(0x7f0000000280)={0x0, 0x7b01, 0x4, 0x2, 0x268, 0x0, r4}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r5, r1, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x8001) 16:55:42 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080)=0x101, 0x0, 0x4) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f00000000c0)=0x1, 0x0, 0x4) 16:55:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14080}, 0x4001) r1 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r1, 0x8000000) 16:55:43 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x20000048}, 0x0) 16:55:43 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7249, &(0x7f00000001c0)={0x0, 0x59fc, 0x10, 0x1, 0x127}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:43 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x153003, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:43 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0xfffffffe}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8094}, 0x8000) r2 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r3 = syz_io_uring_setup(0x48a4, &(0x7f0000000240)={0x0, 0x5189, 0x10, 0x2, 0x187, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_setup(0x7510, &(0x7f0000000300)={0x0, 0x27a, 0x8, 0x3, 0x2e5, 0x0, r3}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r2, 0x8000000) 16:55:43 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_complete(r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:43 executing program 3: getgroups(0x2, &(0x7f0000000080)=[0xee00, 0xee01]) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x145082, 0x0) getgroups(0x1, &(0x7f0000000300)=[0xee00]) getgroups(0x9, &(0x7f0000000340)=[r0, r1, 0xee00, r2, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, r3]) syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:43 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200)=@target={'target ', {'PCI:', '1', ':', '4', ':', '5', '.', '1'}}, 0x13) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000240)={0x2, 0x9}) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0xfffffffd}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x0) 16:55:43 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x351e, &(0x7f0000000240)={0x0, 0x1914, 0x10, 0x1, 0x122}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000916000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) 16:55:43 executing program 2: r0 = syz_io_uring_setup(0x662d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_setup(0x51fb, &(0x7f00000001c0)={0x0, 0x5412, 0x4, 0x0, 0x1c7}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) io_uring_setup(0x79bd, &(0x7f0000000080)={0x0, 0xf37e, 0x4, 0x2, 0x14c, 0x0, r0}) 16:55:43 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:43 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x2943, &(0x7f00000001c0)={0x0, 0x13a4, 0x8, 0x1, 0x32}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_complete(r1) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:43 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x20000188}, 0x0) 16:55:43 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45d0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:43 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x9904}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:43 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) 16:55:43 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x4abf, &(0x7f0000000080)={0x0, 0x929, 0x2, 0x3, 0xa3, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_setup(0x4f29, &(0x7f0000000200)={0x0, 0xd04e, 0x2, 0x3, 0x2c3}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9ba1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8abf88b9504fec20}, 0x8880) 16:55:43 executing program 2: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x8}, 0xf) r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x8000000) 16:55:43 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x4}, 0x0) 16:55:43 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x4000010, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:43 executing program 5: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000300)) r1 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r1, 0x8000000) io_uring_setup(0x49f0, &(0x7f0000000340)={0x0, 0xbebf, 0x20, 0x0, 0x26e}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4040004) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0x8010, r3, 0x8000000) 16:55:43 executing program 4: io_uring_setup(0x6897, &(0x7f0000000240)={0x0, 0x444, 0x20, 0x0, 0x139}) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="100629bd7000fcdbdf257c00000008000300", @ANYRES32=r1, @ANYBLOB="0a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a0006000802110000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x81) r2 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r2, 0x8000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000004ac0), &(0x7f0000004b00)=0x4) 16:55:43 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) io_uring_setup(0x1ab2, &(0x7f0000000080)={0x0, 0x2219, 0x0, 0x2, 0x17b, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) 16:55:43 executing program 3: clock_gettime(0xa, 0x0) syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00080002554a6ed17490f2ae26b7d2e0524cd3a7305ef29985d4e16bebf80f0678462f", @ANYRES16=0x0, @ANYBLOB="200026bd7000ffdbdf250200000008000100000000000c00060003000000000000000c0003006a6b0a28424e1bed2dfa09dab3e27f458ff2e14f6be3d9b88f59f8d9b6d0ce1ada9f82a1e80c91d0bd03b615"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) 16:55:43 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200880, 0x0) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_complete(r2) ioctl$BLKRRPART(r1, 0x125f, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:43 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0xffffffff}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r2 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r2, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x8000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000480)=0xffffffffffffffff, 0x12) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x1ff, 0x20000000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) write$vga_arbiter(r3, &(0x7f0000000500)=@unlock_all, 0xb) mq_notify(r3, &(0x7f0000000380)={0x0, 0x33, 0x4, @thr={&(0x7f00000002c0)="f746a1315461fce74ffb6ed1232df68f5e0bc7eaaa3c530125766b3b2c6c9be0c4fc257d2826ad53be6e2a7aa0d590f02300d1ec0ab080e1e918e980b48bcb3def04bbe87f4a254c3cf929e1ff6558ca2d13de49603fd86e53e6e842a16bac3962b0692b9c6d35e31294f96a43a8747bbd4a1465c8ca22fc8ad7babbd67579faf09ef6d8527212eaf0474bfbffbeb381fa970c434c72c820c29e22d9425c6cef", &(0x7f00000003c0)="d28b8b2b7d81711b7cbd71eb8ef2f266a272151aedd827d0140ff297fec8a09e3e673465a8fb1acd33ecd158e219c607bacdf4876f522b8ef3fd71de51337ef6227fb9d5ecad5b38fc29fd223d05de3f84047315e32adec32fff6c8ccf4db988a35181f35c97bf7269c32b42c0d99acd75e78348177892a099b725ea8f9117a7279f9b44a4e99e6eb635e53c64faa6d6794dcf517e33d261a869798536d840ed85aa34062aba872fa7f30ae6918061bbb103"}}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000080), &(0x7f0000000240)=0x10) 16:55:43 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) syz_io_uring_setup(0x64fa, &(0x7f0000000200)={0x0, 0xbcc2, 0x8, 0x0, 0x120, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000040)=0x37, 0x0, 0x4) 16:55:43 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0x4c1, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:43 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x22ba, &(0x7f0000000240)={0x0, 0x808b, 0x10, 0x1, 0x337}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000300)=0x7f, 0x0, 0x4) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) 16:55:43 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) 16:55:44 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x8}, 0x0) 16:55:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x0, 0x4, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x5460, 0x0) syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:44 executing program 5: r0 = syz_io_uring_setup(0x3574, &(0x7f0000000200)={0x0, 0xdd17, 0x8, 0x4000000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2d6b, &(0x7f00000002c0)={0x0, 0x3669, 0x8, 0x2, 0xa, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r1, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x80000000) syz_io_uring_setup(0x3e41, &(0x7f00000000c0)={0x0, 0x25a4, 0x0, 0x3, 0x290, 0x0, r2}, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:44 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x9d, 0x2, 0x5, 0x8}]}) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r2, 0x1, 0x80000}) 16:55:44 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 16:55:44 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r4, 0x3, {0x0, r0}, 0xfff, 0x0, 0x1, {0x0, 0x0, r1}}, 0x8001) 16:55:44 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) 16:55:44 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r0, 0x20, {0x0, r3}, 0x78dd5edc, 0x6, 0x1, {0x0, 0x0, r2}}, 0xd257) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000080)=0x400) r4 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r4, 0x8000000) r6 = syz_io_uring_complete(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000016, 0x13, r6, 0x0) 16:55:44 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x57}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000200)={0x100000000}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="00012abd7000fedbdf25030000000c000800060000f8ffffff000c0005002e000000000000000c00020005000000000000000c00050001000000000000000c0006000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40) 16:55:44 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5571, &(0x7f0000000080)={0x0, 0x16a8, 0x0, 0x2, 0x278}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) 16:55:44 executing program 3: syz_io_uring_setup(0x7e39, &(0x7f0000000080)={0x0, 0xe869, 0x8, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000100)={0x84, 0x4, 0x0, [{0xfffffffffffffffd, 0x8000, 0x9, 0x8c, 0x2, 0x8, 0x8}, {0x2, 0xff, 0x8, 0x6, 0x1c, 0x0, 0x9}, {0xce5, 0x8, 0x65, 0x7, 0x7, 0x6}, {0xde7a, 0x4cd1427d, 0xfffffffffffffbff, 0x0, 0xd7, 0xf7, 0x1f}]}) 16:55:44 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r2 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x40000}, 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r2, 0x8000000) 16:55:44 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xd}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x734b, &(0x7f0000000200)={0x0, 0xf7b6, 0x0, 0x2, 0x3e0, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x1010, r2, 0x8000000) 16:55:45 executing program 3: r0 = syz_io_uring_setup(0x7e3b, &(0x7f0000000140)={0x0, 0xecce, 0x1e, 0x3, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4000810, r0, 0x0) r1 = io_uring_setup(0x2a4e, &(0x7f0000000040)={0x0, 0xadf6, 0x10, 0x2, 0x14a, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x10010, r1, 0x8000000) 16:55:45 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r3, 0x0, r0}, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x68}}, 0x40080) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100c4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x800) r1 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000480)={0x43, 0x9, 0x1, {0xffff, 0x5, 0x4, 0x4, 0x5, 0x100, 0x10001, 0x5, 0x1}}, 0x43) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) 16:55:45 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2b, 0x4, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0xf96609cccbc951bd) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3}, 0x9) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:45 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x800000}, 0x0) 16:55:45 executing program 4: r0 = syz_io_uring_setup(0x591d, &(0x7f0000000240)={0x0, 0x60a4, 0x10, 0x1, 0x286}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) 16:55:45 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xaa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000200)=""/4096) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r3, r1, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r0, 0x4d5a, 0x0, 0x0, 0x0, 0x1}, 0xc8) msgget(0x2, 0x22) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001200)={[{0x2b, 'io'}, {0x2d, 'io'}, {0x2b, 'io'}, {0x2d, 'memory'}]}, 0x14) 16:55:45 executing program 5: r0 = syz_io_uring_setup(0x3574, &(0x7f0000000200)={0x0, 0xdd17, 0x8, 0x4000000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2d6b, &(0x7f00000002c0)={0x0, 0x3669, 0x8, 0x2, 0xa, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r1, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x80000000) syz_io_uring_setup(0x3e41, &(0x7f00000000c0)={0x0, 0x25a4, 0x0, 0x3, 0x290, 0x0, r2}, &(0x7f0000fed000/0x12000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:45 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000004c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000240), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x38, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x4000840) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)) 16:55:45 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0x8}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:45 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0x2100, &(0x7f0000000200)={0x0, 0x2c08, 0x2, 0x1, 0x251, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) io_uring_setup(0x7df9, &(0x7f00000002c0)={0x0, 0x1a32, 0x0, 0x0, 0x14f, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0x8000000) r3 = syz_io_uring_setup(0x2900, &(0x7f0000000480)={0x0, 0xa5f6, 0x20, 0x1, 0x58, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x0) 16:55:45 executing program 3: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r2 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) clock_gettime(0x6, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000)=0xfd, 0x0, 0x4) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_complete(r3) 16:55:45 executing program 0: r0 = syz_io_uring_setup(0x46629, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000000)=0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000216b1db6fc7217631d0000009720337775515ff198790e8b8c92b1fe17dc2f0a6c05f641ba3562b2d0600000", @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf2500000000080005000100000008000700ff7f0000"], 0x24}}, 0x40000) syz_io_uring_setup(0x7de5, &(0x7f0000000140)={0x0, 0x10000, 0x2, 0x3}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r4 = syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0xd8, {0x0, r6}, 0x6a7, 0x6, 0x1, {0x0, 0x0, r0}}, 0xfffff801) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x4000010, r4, 0x0) syz_io_uring_setup(0x2a88, &(0x7f00000003c0)={0x0, 0xa88b, 0x4, 0x2, 0x2c1, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r10, 0x0, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r10, 0x0, 0x0, 0x1, 0x8, 0x6201eac0d09da87d, {0x0, 0x0, r11}}, 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:46 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x4000000}, 0x0) 16:55:46 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) socket(0xa, 0x80004, 0xffffffe1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000080)=0x1003ff, 0x0, 0x4) 16:55:46 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffff28, 0x40) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000001c0)={0x3, 0x2}) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) 16:55:46 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:46 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xa1ac, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:46 executing program 0: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000240)=0xfff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xc4080, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x1, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x32a2, &(0x7f0000000280)={0x0, 0x72f7, 0x2, 0x1, 0x357}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r1, 0x8000000) 16:55:46 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x35}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) io_uring_setup(0x118, &(0x7f00000000c0)={0x0, 0x652, 0x2, 0x3, 0x7c}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:46 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r2 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) clock_gettime(0x6, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000)=0xfd, 0x0, 0x4) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_complete(r3) 16:55:46 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) io_uring_setup(0x72e6, &(0x7f0000000240)={0x0, 0x5e0f, 0x10, 0x3, 0xfc, 0x0, r0}) r2 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0xc8200, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r5, 0x0, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r2, 0x8000000) 16:55:46 executing program 3: syz_io_uring_setup(0x2e37, &(0x7f00000000c0)={0x0, 0xe869, 0x10, 0x0, 0x3c5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x8, 0x3, 0x1}, 0x7fff}}, 0x18) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) 16:55:46 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x46626, &(0x7f00000000c0)={0x0, 0xdcc7, 0x0, 0x3, 0xfffffffe, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r1, 0x8000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 16:55:46 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r2 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) clock_gettime(0x6, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000)=0xfd, 0x0, 0x4) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_complete(r3) 16:55:47 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x8000000}, 0x0) 16:55:47 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000200)) write$P9_RSTATFS(r0, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x401, 0x5, 0x5, 0x4b7, 0x8000, 0x2, 0x4010000000, 0x9, 0x20}}, 0x43) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x98, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mail_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = gettid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) r6 = gettid() syz_open_procfs$namespace(r6, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000ffdbdf251400000008001c00", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000200000008001c00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08001c00", @ANYRES32=0x0, @ANYBLOB="0f001c00b15e7a67e580a10901de1be425e13fe144b41aedeff42992689a49d645f9dbd3dee26f3f8b530940084b30ec7cfd6cbd6f994d214184374a955b74402bde52433a7af78142d8947c8d03745ed0e14737a295f0920e22b61ef7f987d9", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x8000000) 16:55:47 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd_index=0x8, 0x0, 0x0, 0x0, 0x4}, 0x1000) io_uring_setup(0x80000, &(0x7f0000000080)={0x0, 0xf9d3, 0x2, 0x3, 0x328}) 16:55:47 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r2 = syz_io_uring_complete(r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2e67}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x400400c0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:47 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r2 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) clock_gettime(0x6, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000)=0xfd, 0x0, 0x4) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_complete(r3) 16:55:47 executing program 4: r0 = syz_io_uring_setup(0x73d5, &(0x7f0000000080)={0x0, 0x73b8, 0x0, 0x1, 0x183}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) syz_io_uring_setup(0x5dfb, &(0x7f0000000240)={0x0, 0x75d4, 0x0, 0x2, 0x2ed, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) 16:55:47 executing program 2: syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x60}, 0x4000880) r2 = syz_io_uring_complete(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x8000000) 16:55:47 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r2 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) clock_gettime(0x6, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000)=0xfd, 0x0, 0x4) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) 16:55:47 executing program 3: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0xf1dc77c5d119155e, r0, 0x8000000) 16:55:47 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1f2a, &(0x7f0000000300)={0x0, 0x26c2, 0x4, 0x1, 0x36a, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) syz_io_uring_setup(0x3825, &(0x7f0000000240)={0x0, 0xe94e, 0x2, 0x0, 0x31c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:55:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000075ec2f9ffb91a376fb9fd4776e14d1b60b63a669db0522230bf0567cafbd3c4831", @ANYRES16=r1, @ANYBLOB="000127bd7000ffdbdf250d00000008002c00e1ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) r2 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x670, &(0x7f0000000140)={0x0, 0x15bd, 0x2, 0x7, 0x1e9}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r2, 0x8000000) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0x12) 16:55:47 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x2e8, 0x0, 0x20, 0xa0, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x24, 0x45, "ec0533dccdfd63b73bd35b3e45816a48bc46d0e8583c5142f4b4e2eb879a3f0a"}, @NL80211_ATTR_TESTDATA={0xeb, 0x45, "ff14829d927c96aa51eec4e62eece74712631c761c39027eefbeac9127ee6c4180528577204ade42defac85c788c04812bf8e5efaa7299c39e811e40751d11b715f0cdd1596ff5c069c4760bea7869ca3c0b50d63f03ded909b46cb21ec2601bcd3650079ab7b7822d2f33f6d1ebbf28f022cecee5e3b2dd61185db949b2be65c25d08d487f1c4c1b8d3c324c0d83c305d16f05973347e9fdc37c734be213a86d5179ff2bbfd790dc893b40fe6c21f058244c4cd0e13f89229d5ab7a3f18460600efd1eb01dfd98cdf4188d1b587f769646fbeef3f0260c4ff86dce3d038ee1e8e84a7614f19c1"}, @NL80211_ATTR_TESTDATA={0x62, 0x45, "35350fcf93c0b52e24a10820d2546bbc53acb80a86d1bc418be5a2c368e8976907233ef661571d5f0e880dc38835b9235193ba086062f1743be606c618d49daa618d592a22e66d72cfc1cb2a159d3a3616e7c877de4b4bf7e81229a70c89"}, @NL80211_ATTR_TESTDATA={0xf1, 0x45, "e4571e7976e0bae80400c464e46385832f53df2d3edf957b8f412e62166b6c278caa47bff8ad38f21693d5adf8bd539df7e4417c0eb4493460997ebc9cd40b321d20551676a2798388d05f126177f86eda45231d5b9eb8048f1dd583b348ad81735966c817dd7a733cabea9d1bb37dcb4841b3f26582a0abfcc1e9d3735cb47a54ddf55cdd9fb28cbbfba418ef8358aba252dd439fb8e966417abd9de8fed320e41339db328a73cb2250510f69438b92e9aed27c736face4faefd77422ebdaa875b336261ab5388d234f585cf4918ee41a0e18b3bec7b4ef8d9d02e849f3515c143710734a878a26b31d077a78"}, @NL80211_ATTR_TESTDATA={0x5a, 0x45, "acb8502b14e65c6d238e53390a6c922e367e835234ca9dabcd2ef6c7d16f82ea9b102132a9acea2fb14c2b75e99fa56f182fbdce532820681dce57ebbead00000000000000002eefbb28ebc97a61b515ffa7947a15f4"}, @NL80211_ATTR_TESTDATA={0xf, 0x45, "61b17ae84c82e78eb316d2"}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x41}, 0x2) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x23}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x8880) 16:55:48 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x80000000000000}, 0x0) 16:55:48 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r2 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) clock_gettime(0x6, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000)=0xfd, 0x0, 0x4) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 16:55:48 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x4e9b, &(0x7f0000000200)={0x0, 0x3725, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000140)=0x6) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x800, 0x1a000) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000001c0)={0x2, 0x1f}) 16:55:48 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x4, 0x3, 0x4}}, 0x14) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) 16:55:48 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x10, 0x1, 0x2}}, 0x14) mq_open(&(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0, 0x0) 16:55:48 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x400, 0x365}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:48 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x6559, &(0x7f0000000240)={0x0, 0x7639, 0x0, 0x2, 0x24}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) 16:55:48 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:48 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r2 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) clock_gettime(0x6, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000)=0xfd, 0x0, 0x4) 16:55:48 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[r0, r0, r3, r2], 0x4, 0x0, 0x1}, 0x8) r4 = syz_io_uring_setup(0x1079, &(0x7f0000000080)={0x0, 0x1875, 0x0, 0x3, 0x1fa, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r4, 0x8000000) 16:55:48 executing program 0: r0 = syz_io_uring_setup(0x4949, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), &(0x7f00000001c0)=0x10) 16:55:48 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x48e0, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) 16:55:49 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x400000000000000}, 0x0) 16:55:49 executing program 3: write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) syz_io_uring_setup(0x7e35, &(0x7f0000000140)={0x0, 0xe869, 0x10, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:49 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r1 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) clock_gettime(0x6, &(0x7f0000000080)) 16:55:49 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_setup(0x7818, &(0x7f0000000240)={0x0, 0xac25, 0x0, 0x3, 0x211, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0x1ff, 0x0, 0x50, 0x5}, 0xf280) 16:55:49 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000080)={0x4, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 16:55:49 executing program 0: syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_io_uring_setup(0x6ad7, &(0x7f00000001c0)={0x0, 0x666, 0x2, 0x3, 0x274, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x118, &(0x7f0000000040)=0x798, 0x0, 0x4) r2 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r2, 0x8000000) 16:55:49 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000080)=0x1, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:49 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r2, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x4}, 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:49 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x100) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x2, 0x3, 0x7}, 0x4}}, 0x18) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x200000002) 16:55:49 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) r1 = syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x2c4a, &(0x7f0000000300)={0x0, 0x38f5, 0x1, 0x3, 0x20, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:49 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) 16:55:49 executing program 0: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x10001, 0xa2ce}) r0 = syz_io_uring_setup(0x4662b, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x2010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0xc, &(0x7f0000000040), 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) r5 = syz_open_dev$loop(&(0x7f0000000500), 0x9, 0x48540) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f0000000540)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) io_uring_setup(0x5be3, &(0x7f0000000300)={0x0, 0x1037, 0x4, 0x2, 0x17a, 0x0, r2}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="900000005ad7e86bf8e6af7e19881d569b1013f8d78ceb5b7be7f1c75146e38aec4d90d5b4e0daff8baf36aeacd3e862bda99bfc7179b47e49412c03e1f94d79e720f3de3be7de82047b63791f091c7014e8820b000164a1295173cbc952", @ANYRES16=r4, @ANYBLOB="000125bd7000feefdf25030000001400060067656e6576653100000000000000000008000400e000000208000400ac1414bb08000400e000000114000300fe8000000000000000000000000000bb1400060076657468315f748d5f626f6e6400000014000300fc01000000000000000000000000000114000300ff0200008c1a41500000000000000100900976ba4ace052a086038195837b8c800c92963711f6d6492185ed8204701130918c66a453d86cbb472929185bb85830de84f4c2412a29697f32feaeccfc2c34993d4a7107e6a02d8c26f"], 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x4004815) 16:55:49 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x800000000000000}, 0x0) 16:55:49 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x100) 16:55:49 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:55:49 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) syz_io_uring_setup(0x25f5, &(0x7f0000000200)={0x0, 0x8a00, 0x20, 0x1, 0x92, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 16:55:49 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) 16:55:49 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x7980, &(0x7f00000001c0)={0x0, 0xb49e, 0x10, 0x0, 0x32e, 0x0, r0}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, &(0x7f0000000340)=0x8, 0x0, 0x4) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000380), 0x0, 0x4) syz_io_uring_setup(0x548a, &(0x7f00000003c0)={0x0, 0xe13c, 0x8, 0x0, 0x172, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000440)) syz_io_uring_complete(r5) 16:55:49 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe3f, 0x16}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x59}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "f74434745acedf15c682408d75d7f7fd"}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 16:55:50 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) 16:55:50 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:50 executing program 5: r0 = syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) 16:55:50 executing program 3: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) 16:55:50 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe3f, 0x16}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x59}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "f74434745acedf15c682408d75d7f7fd"}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 16:55:50 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x4}, 0x0) 16:55:50 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:50 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x7f7e}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x50, 0x4, 0xc, @mcast1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x700, 0x40, 0x0, 0x400}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000240)={'gretap0\x00', r2, 0x80, 0x10, 0xd5b, 0x3f, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @empty, {[@rr={0x7, 0x3, 0x56}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r3, 0x4, 0x0, 0x1, 0x3f, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x7800, 0x40, 0x1ff, 0xffffcba3}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000200)=0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0xc000) 16:55:50 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe3f, 0x16}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x59}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "f74434745acedf15c682408d75d7f7fd"}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 16:55:50 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000004) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x302, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xc601}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) syz_io_uring_setup(0x7e3b, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3, 0x73, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x85) 16:55:50 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003e40)={'ipvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003fc0)={'ip_vti0\x00', &(0x7f0000003e80)={'syztnl2\x00', r0, 0x8, 0x10, 0x1, 0x1000, {{0x47, 0x4, 0x3, 0x39, 0x11c, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x0, [{@private=0xa010100, 0xd6}, {@multicast2, 0x6}, {@empty, 0x5}]}, @cipso={0x86, 0x46, 0x3, [{0x0, 0x11, "4f63ef6b408cd934ca71813be9608d"}, {0x0, 0xa, "77c1a290ab5fd158"}, {0x2, 0x3, "e3"}, {0x2, 0x4, "eeff"}, {0x5, 0x3, '}'}, {0x1, 0x12, "806f9daec08ccd4bb97410201c57b023"}, {0x1, 0x9, "fb377fdb293078"}]}, @rr={0x7, 0x2b, 0x4e, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x0, [{@multicast1, 0x6}]}, @rr={0x7, 0x13, 0xf1, [@remote, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xd4, 0x3, 0x0, [{@broadcast, 0xb}]}, @timestamp_addr={0x44, 0x34, 0x30, 0x1, 0x4, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0xa76b}, {@loopback, 0x4}]}, @lsrr={0x83, 0x17, 0x3, [@private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "2bb9d87c0ea4b388", "c43b85028443bbe255a1662486e167a5", "f7c760fc", "17b82ce995d0542e"}, 0x28) r2 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r2, 0x8000000) 16:55:50 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:50 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) 16:55:50 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000280)) r1 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2627, &(0x7f00000001c0)={0x0, 0xfcf0, 0x20, 0x1, 0x3d6, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_complete(r2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) 16:55:50 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xcf1, &(0x7f00000001c0)={0x0, 0x13ba, 0x10, 0x1, 0x239, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r4, &(0x7f00000002c0)={0x8b00, 0xc0}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:50 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:51 executing program 2: fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x0, 0x0, r0, 0xee00, r1, 0x24, 0x5}, 0x0, 0x0, 0x62, 0x317, 0x2, 0x80000000, 0x6, 0xfff, 0x2, 0x9, 0xffffffffffffffff, r2}) r3 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x8000000) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f0000000080)=0x1, 0x0, 0x4) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/254, 0xfe) 16:55:51 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x8}, 0x0) 16:55:51 executing program 0: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 16:55:51 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 16:55:51 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:51 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xcf1, &(0x7f00000001c0)={0x0, 0x13ba, 0x10, 0x1, 0x239, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r4, &(0x7f00000002c0)={0x8b00, 0xc0}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:51 executing program 2: r0 = syz_io_uring_setup(0x672f, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x42a5, &(0x7f00000000c0)={0x0, 0xf26e, 0x21, 0x2, 0x143, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000300)='./file0\x00', 0x20, 0x400}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:51 executing program 5: syz_io_uring_setup(0x17e3d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:51 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xcf1, &(0x7f00000001c0)={0x0, 0x13ba, 0x10, 0x1, 0x239, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r4, &(0x7f00000002c0)={0x8b00, 0xc0}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:51 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:55:51 executing program 2: syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x8000000) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20000040) 16:55:51 executing program 5: syz_io_uring_setup(0x17e3d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:51 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_io_uring_setup(0x713a, &(0x7f00000001c0)={0x0, 0xd2cb, 0x1, 0x0, 0x200, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 16:55:52 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x800000}, 0x0) 16:55:52 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xcf1, &(0x7f00000001c0)={0x0, 0x13ba, 0x10, 0x1, 0x239, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f00000002c0)={0x8b00, 0xc0}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000003c0)) 16:55:52 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) 16:55:52 executing program 5: syz_io_uring_setup(0x17e3d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:52 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) 16:55:52 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f00000001c0)='lp\x00', 0x3) 16:55:52 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_io_uring_setup(0x43db, &(0x7f0000000080)={0x0, 0x7d39, 0x1, 0x0, 0x281, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) 16:55:52 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:52 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) 16:55:52 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xcf1, &(0x7f00000001c0)={0x0, 0x13ba, 0x10, 0x1, 0x239, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f00000002c0)={0x8b00, 0xc0}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) 16:55:52 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0xe5}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'trylock', ' ', 'io+mem'}, 0xf) 16:55:52 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:53 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x4000000}, 0x0) 16:55:53 executing program 2: r0 = syz_io_uring_setup(0x15bf, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:53 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:53 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xcf1, &(0x7f00000001c0)={0x0, 0x13ba, 0x10, 0x1, 0x239, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) 16:55:53 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x8000000) 16:55:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e3b4a2e3", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf255c0000000c0099008b0600002600000008006b001400000008006b0068010000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x48041) r1 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x40}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r1, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) 16:55:53 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:53 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xcf1, &(0x7f00000001c0)={0x0, 0x13ba, 0x10, 0x1, 0x239, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) 16:55:53 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) io_uring_setup(0xec9, &(0x7f00000001c0)={0x0, 0xf12, 0x20, 0x2, 0x14, 0x0, r0}) 16:55:53 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r2 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x4014) write$P9_RREADLINK(r1, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 16:55:53 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000200), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r3) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000140), 0x0, 0x4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044080}, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xb06c}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000811}, 0x1) 16:55:53 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:54 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x8000000}, 0x0) 16:55:54 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) 16:55:54 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x4014) 16:55:54 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:54 executing program 0: r0 = syz_io_uring_complete(0x0) fstat(r0, &(0x7f0000000780)) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x2b8, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x67}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x250, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @remote, 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x60000, @empty, 0x1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9a516019b8b689b29c0cfc5934bdcca662d5fca9cc69140451ea3d227e4b5b9e"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9378d3a30087ef8a509639fa7a7cc83855bad04c7354630d6e141e699dc16513"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "21862f19bb9c23e8506ebc8fe907e2c5679ea1b5fdd3e45c56bebe753e6954fe"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x64e35be0afdc20dd}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @remote, 0xe479}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x401}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4e}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x80}, 0x20008840) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x4662b, &(0x7f0000000980)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000940), &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="451fd276", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf250100000008000500640101012600070073797374656d5f753a6f626a6563745f723a6d61696c5f73706f6f6c5f743a7330000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r5, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x10001}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/250, 0xfa) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r3, 0x8000000) 16:55:54 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0xe20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x8000000) ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)) io_uring_setup(0x7a1c, &(0x7f0000000300)={0x0, 0x3b34, 0x0, 0x0, 0x3be}) 16:55:54 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:54 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) 16:55:54 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:54 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) 16:55:54 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:54 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 16:55:55 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x80000000000000}, 0x0) 16:55:55 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RCREATE(r1, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0x58, 0x4, 0x8}, 0x7}}, 0x18) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1}, 0xb) 16:55:55 executing program 2: r0 = syz_io_uring_setup(0xbff, &(0x7f0000000480)={0x0, 0x0, 0x8, 0xffffffff, 0x307}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000080)=0x101, 0x0, 0x4) syz_io_uring_setup(0x61b4, &(0x7f0000000140)={0x0, 0x644f, 0x1, 0x1, 0x10c, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd_index=0x4, 0xeb, 0x8, 0x1ff, 0x0, 0x0, {0x2}}, 0x400) 16:55:55 executing program 3: syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x10500) 16:55:55 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 16:55:55 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:55 executing program 3: syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x10500) 16:55:55 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 16:55:55 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:55 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), 0x0) 16:55:55 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:55 executing program 3: syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x10500) 16:55:56 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x400000000000000}, 0x0) 16:55:56 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x150}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = io_uring_setup(0x7198, &(0x7f0000000140)={0x0, 0xf427, 0x0, 0x2, 0x2f3, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x13, r1, 0x8000000) 16:55:56 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), 0x0) 16:55:56 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:56 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/44, 0x2c) 16:55:56 executing program 3: syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x10500) 16:55:56 executing program 3: syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x10500) 16:55:56 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), 0x0) 16:55:56 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:56 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) inotify_rm_watch(r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) 16:55:56 executing program 0: r0 = syz_io_uring_setup(0x4662d, &(0x7f00000001c0)={0x0, 0x8335, 0x1, 0x10000, 0xfffffffd}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:56 executing program 3: syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x10500) 16:55:57 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:57 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x800000000000000}, 0x0) 16:55:57 executing program 3: syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x10500) 16:55:57 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:57 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000040)={0x0, 0x1, 0xadc}) 16:55:57 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8048090}, 0x20008000) r1 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) 16:55:57 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:57 executing program 3: syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffffff, 0x0) 16:55:57 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:57 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:57 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:57 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) epoll_create(0x5) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r3, r1, &(0x7f0000002640)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r2, 0x0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="c9e1f5965406c022ef95316b1aee219e93a2186972de932a602c71c15b75eab516535b97cdbc71ad6d479b7ed338494ee695ee8f4b62b01b95ecfe2718731543ec996ef7221363d5196e83450971b6f9a6b2e5d949571f060b83894684eac1f3740aa12d3ee5865961eb51d0a595369169b2c11976a116bba1b0e8601d9fe0212e07dd2f42e63d3fe73db9d2ceca097da68a705c9fba6da114de", 0x9a}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="d6bc619143cdae5962da0ffa4f70d9dfa94498afea40eeb6b3f8a33a01415e6b75303cf9816e2c90d6cee319d6dec8e1ea06ea3f022e0bc1a4121058472c8b739553ace934", 0x45}, {&(0x7f0000002400)="82ab6b90b4e86a33153d625b33ef05b7635926e9ac2303907ba0dcb1fa791191b824ec9aa1c335a7c03490def870b6976bba090749d3fc34671637f30916c89c87d61c848f3c3100ece14edb97de05b2d786b0cdef5e68142cc9d05fa8e631fb346eab39b5a82784602e252aba52c06cc3c647c7252c", 0x76}, {&(0x7f0000002480)="767372dfbc0b9da67fd0f1abe2aac1c8f6e3bc2794b21c07164dbf50336e49507746ea972ce29e12cba8fee912b65d37b1abd9e45ef08d2173a5f6354a34d6d6dfa48b7345a31712bbc50be9905125da95749309da71ae3457a2406bff2210ecc377e2f2cf9365d11f3864e0991670d023bea7ec0f691e6e269a5d935987d92a9ce1c5f347cb92b963dff9fcd9a45aebf5d6077cab716d1b1214e94d6c16e2802fbfea43521bd5a879a819310c848f5ebdb0bb97da30d4330f91f174cf8487bea2fe2a96d8b7dba9a9c0748dbc444bb49182c65b", 0xd4}], 0x6}, 0x0, 0x48000, 0x1}, 0xffff391e) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf250b0000000824e3000400000008002b000507000000002c000700000005002d00000000000800390007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4015) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0xfffffffe}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:57 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:57 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x4}, 0x0) 16:55:57 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x72}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "fd932d3356ebca5cdf6db571d4bb9ceb"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4e}, @NL80211_ATTR_PMKID={0x14, 0x55, "3128e6f33a819c49be2c923fdd615381"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4401}, 0x2000001) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f00000002c0)=0x7ff, 0x0, 0x4) 16:55:57 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80040, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24010}, 0x8180) r2 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x8000000) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x11c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x4f}}}}, [@NL80211_ATTR_IE={0x9f, 0x2a, [@erp={0x2a, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x2, 0x4, @broadcast, 0x8, 0x23e, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @peer_mgmt={0x75, 0x18, {0x1, 0x6, @val=0x200, @val=0x42, @val="c95af4a2d1bc5d5e9508805e4aec8510"}}, @measure_req={0x26, 0x16, {0x38, 0x37, 0xe6, "c8f5296e42dcc81d6332b1116f02b1e216591a"}}, @challenge={0x10, 0x1, 0x20}, @random_vendor={0xdd, 0x42, "da9185f76e10d2493b372b7f91fbbdcfcd2c9c37ae4d68becbe52ce917daf281b2c86d78bf173cf1c74a0f2fea54c95478efbfb4f954b55c18e5b73f03e522290e38"}]}, @NL80211_ATTR_BEACON_TAIL={0x41, 0xf, [@measure_req={0x26, 0x30, {0x71, 0x20, 0x7, "f701fa557f8b4750290be68455a6f9cc1cf9cb02deb6af8c67f804ac391bb1aa14513441e61097f241e9fdede7"}}, @channel_switch={0x25, 0x3, {0x1, 0xbc, 0x3}}, @chsw_timing={0x68, 0x4, {0x3ff, 0x8a}}]}, @NL80211_ATTR_IE={0xe, 0x2a, [@ibss={0x6, 0x2, 0x6}, @chsw_timing={0x68, 0x4, {0x7fff, 0x40}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002d80)={'syztnl2\x00', &(0x7f0000002d00)={'gre0\x00', 0x0, 0x8, 0x8000, 0x7, 0x4913, {{0x11, 0x4, 0x2, 0x2, 0x44, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @local, {[@noop, @lsrr={0x83, 0x17, 0x6f, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @local]}, @rr={0x7, 0x17, 0xa3, [@rand_addr=0x1, @broadcast, @multicast1, @loopback, @local]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000002e40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x6e1162fe0194ee78}, 0x1) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0xc, &(0x7f0000000080), 0x0, 0x4) 16:55:57 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:57 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:58 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:58 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:58 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:58 executing program 0: getrusage(0x1, &(0x7f00000001c0)) r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0x22f}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x8, 0x2, 0x1}, 0x7}}, 0x18) waitid(0x2, r1, &(0x7f0000000300), 0x1, &(0x7f0000000380)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:58 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x1, 0x2, 0x1, 0x3ff}, {0x9, 0x2, 0x7, 0xfff}, {0xa5, 0x1f, 0x7}, {0x1, 0xf9, 0x5, 0x1}, {0xa3, 0x1, 0x0, 0x7fff}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_complete(r0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000012f5133310157d92c8a5c5198acd7710fa98eb001a41b45bc20cf10652830dcc50702ec3218b5d8d7e7d2b4bb7c19a8707a7b6c4a35b11319834a85bc3e16fe29c139d3aae682f39b559d0fb130b1f7029ce6d3351a3f5c9240a4d215bee1ba54182aa51549203620c6aba737a81376379d25715727410397aa532e7919c49a46d24bb433d7c6322ef87ea75283788080608ea9fcde52447db1ded55aee4cc90dc8b66efcbf54f6be42864bd0f6927836ae22786d5f429ae8c03d8fcab3a8bcb", @ANYRES16=r4, @ANYBLOB="000428bd7000fedbdf250a000000080031000100000008000b0020000000050037000000000005003300010000000800310007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004000) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000012}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r2, 0x5}) write$P9_RREMOVE(r3, &(0x7f0000000580)={0x7, 0x7b, 0x1}, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xc0, &(0x7f0000000000), 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r6) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x88400, 0x0) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x9}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 16:55:58 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x10010, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:58 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x8}, 0x0) 16:55:58 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:58 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:58 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) 16:55:58 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:58 executing program 0: r0 = syz_io_uring_setup(0x4c2f, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:58 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:58 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:58 executing program 5: syz_io_uring_setup(0x17e3d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:58 executing program 2: r0 = syz_io_uring_setup(0x662b, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000080), 0x0, 0x4) 16:55:58 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x48044082}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9023}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x28}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x0, 0x29, 0x1}]}, 0x3c}}, 0x88c0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xc93c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x43e}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2c9}, @NL80211_ATTR_IE={0x148, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @mesh_chsw={0x76, 0x6, {0x7, 0xdb, 0x8, 0x2}}, @preq={0x82, 0x46, @not_ext={{0x1}, 0x0, 0xfb, 0x4, @device_b, 0x5, "", 0x4, 0x5, 0x4, [{{0x1}, @broadcast, 0x400}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {{}, @device_a, 0x10001}, {{0x1}, @device_b, 0x60}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x3f, 0x2, @broadcast, 0x6, "", 0x8000000, 0xffff, @device_b, 0x1ff}}, @random={0xf9, 0x37, "11d76917a6afd5c655ef84e202f9c13d266dcb6b6eccce5d289502692d85483ff7d268f85ae61c45d7e50bb425cd2361d660b755e42123"}, @preq={0x82, 0x62, @ext={{0x0, 0x1}, 0x20, 0x6b, 0x9, @device_a, 0x6, @device_a, 0x1000, 0x8, 0x6, [{{0x1}, @broadcast}, {{0x1, 0x0, 0x1}, @device_b, 0x1b8}, {{0x0, 0x0, 0x1}, @device_b, 0x80}, {{}, @device_b, 0xffff}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x9536}]}}, @link_id={0x65, 0x12, {@initial, @device_b}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xc7, 0x0, 0x6}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r6, r1, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x400) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r0, 0x0) 16:55:59 executing program 4: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:59 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x800000}, 0x0) 16:55:59 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) syz_io_uring_complete(0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:59 executing program 5: syz_io_uring_setup(0x17e3d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:59 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/245, 0xf5}], 0x8, &(0x7f0000000b00)=""/87, 0x57}, 0x9}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/211, 0xd3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/5, 0x5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/41, 0x29}], 0x8, &(0x7f0000001fc0)=""/203, 0xcb}, 0x7f}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/63, 0x3f}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/157, 0x9d}, {&(0x7f00000034c0)=""/52, 0x34}], 0x7, &(0x7f0000003580)=""/108, 0x6c}, 0x6}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/147, 0x93}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)=""/93, 0x5d}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/7, 0x7}, 0x3}], 0x6, 0x42, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000061c0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006180)={&(0x7f0000004c40)={0x1504, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x17a, 0x7f, [@random_vendor={0xdd, 0xd0, "3f66a568c10e9192cde49f54cb28c2298c483923e2c454dd8fe54986399e871f62eda77f2a973e692751a009c0527c83aa6de8d617cb642f931b8d2940d8c977f3b64c37fbf25bfe3e7c8e23be26c09c16cb8d6db2d7f60ebf3f04dba45d0c00f63e76cb8aed21364e3f7202e25d4832aab3e3a3c303be3e8fa2e02180a74f12564349c337a16c3388d7a2b5a1832c6d99d4477144967278101ae7420588a0223a5914c3b401fe59047ad358a0a1ea5a10b3130ec1b0363be6b3499aab6c35c3bcdadb1325e32186d53da347c101acb9"}, @prep={0x83, 0x1f, @not_ext={{}, 0x3d, 0x3, @broadcast, 0x80000001, "", 0xeb, 0x1, @broadcast, 0x5c}}, @measure_req={0x26, 0x79, {0xd2, 0x3f, 0x14, "eb5491bde511377d22c66fcc4cab8f66f2bdde30354163627586540e1499f4bee6b2fd517a98f0239343efd1e707500e17c7c6ef6ccef0f9f5f4838b2d0f62c7923c1fc0d2661af3564b81a8aa988548b78900f86b686b2f9e4f02d68376ed6e9ea8676d48a9e18f38a8d4bff7146d40a423513e39b4"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x3, 0x37, 0x6}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x117, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x80, 0x7f, @device_a, 0x101, 0x590e4934, 0x101}}, @random_vendor={0xdd, 0xfa, "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"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1010, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x243, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @broadcast, @initial, {0x3, 0x8}}, 0x6, @random=0x1, 0xe418, @void, @void, @void, @void, @void, @val={0x5, 0x46, {0x3, 0xad, 0x20, "01e75fb1ffda44c52ce2e27c696d15714c0000e937b0baf511cd7777b7ef82d036a5dda0356f3dfdb2b8d20c961b9a273be6130acc6e5936d862d14fd8379b5932963d"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe0, 0x99, 0xda}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0x3, 0x34, 0xbe}}, [{0xdd, 0xbb, "ba3c01bbcf115c3fca579a123d8384eb335eb4106466f51615bd0977f64df2365d2a47df1867b70e0c60ebc670c8a227b82d5363c5b69250fc8be75417263dcf6e9ed1471f07ddbaee4b2ae5b6b592dad30d194db1ac9117cb8575761c784128fa806c5bacf3b0fe69f0fc630c2d13bbcf389caf8e0aa572a15ae6ec5b52af4eb6cb359e53246bd5307ea86f784f993bf85decfbabbbd0e60430ebac4f047ee386869c4596b2e367eba193fe6969e05cbfbbbce29dccdf4dbd2e9f"}, {0xdd, 0xfe, "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"}]}}]}, 0x1504}, 0x1, 0x0, 0x0, 0x18}, 0x20000c04) 16:55:59 executing program 4: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:59 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:59 executing program 5: syz_io_uring_setup(0x17e3d, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:55:59 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/245, 0xf5}], 0x8, &(0x7f0000000b00)=""/87, 0x57}, 0x9}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/211, 0xd3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/5, 0x5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/41, 0x29}], 0x8, &(0x7f0000001fc0)=""/203, 0xcb}, 0x7f}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/63, 0x3f}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/157, 0x9d}, {&(0x7f00000034c0)=""/52, 0x34}], 0x7, &(0x7f0000003580)=""/108, 0x6c}, 0x6}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/147, 0x93}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)=""/93, 0x5d}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/7, 0x7}, 0x3}], 0x6, 0x42, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000061c0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006180)={&(0x7f0000004c40)={0x1504, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x17a, 0x7f, [@random_vendor={0xdd, 0xd0, "3f66a568c10e9192cde49f54cb28c2298c483923e2c454dd8fe54986399e871f62eda77f2a973e692751a009c0527c83aa6de8d617cb642f931b8d2940d8c977f3b64c37fbf25bfe3e7c8e23be26c09c16cb8d6db2d7f60ebf3f04dba45d0c00f63e76cb8aed21364e3f7202e25d4832aab3e3a3c303be3e8fa2e02180a74f12564349c337a16c3388d7a2b5a1832c6d99d4477144967278101ae7420588a0223a5914c3b401fe59047ad358a0a1ea5a10b3130ec1b0363be6b3499aab6c35c3bcdadb1325e32186d53da347c101acb9"}, @prep={0x83, 0x1f, @not_ext={{}, 0x3d, 0x3, @broadcast, 0x80000001, "", 0xeb, 0x1, @broadcast, 0x5c}}, @measure_req={0x26, 0x79, {0xd2, 0x3f, 0x14, "eb5491bde511377d22c66fcc4cab8f66f2bdde30354163627586540e1499f4bee6b2fd517a98f0239343efd1e707500e17c7c6ef6ccef0f9f5f4838b2d0f62c7923c1fc0d2661af3564b81a8aa988548b78900f86b686b2f9e4f02d68376ed6e9ea8676d48a9e18f38a8d4bff7146d40a423513e39b4"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x3, 0x37, 0x6}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x117, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x80, 0x7f, @device_a, 0x101, 0x590e4934, 0x101}}, @random_vendor={0xdd, 0xfa, "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"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1010, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x243, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @broadcast, @initial, {0x3, 0x8}}, 0x6, @random=0x1, 0xe418, @void, @void, @void, @void, @void, @val={0x5, 0x46, {0x3, 0xad, 0x20, "01e75fb1ffda44c52ce2e27c696d15714c0000e937b0baf511cd7777b7ef82d036a5dda0356f3dfdb2b8d20c961b9a273be6130acc6e5936d862d14fd8379b5932963d"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe0, 0x99, 0xda}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0x3, 0x34, 0xbe}}, [{0xdd, 0xbb, "ba3c01bbcf115c3fca579a123d8384eb335eb4106466f51615bd0977f64df2365d2a47df1867b70e0c60ebc670c8a227b82d5363c5b69250fc8be75417263dcf6e9ed1471f07ddbaee4b2ae5b6b592dad30d194db1ac9117cb8575761c784128fa806c5bacf3b0fe69f0fc630c2d13bbcf389caf8e0aa572a15ae6ec5b52af4eb6cb359e53246bd5307ea86f784f993bf85decfbabbbd0e60430ebac4f047ee386869c4596b2e367eba193fe6969e05cbfbbbce29dccdf4dbd2e9f"}, {0xdd, 0xfe, "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"}]}}]}, 0x1504}, 0x1, 0x0, 0x0, 0x18}, 0x20000c04) 16:55:59 executing program 4: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:59 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:55:59 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:55:59 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:56:00 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x4000000}, 0x0) 16:56:00 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:00 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/245, 0xf5}], 0x8, &(0x7f0000000b00)=""/87, 0x57}, 0x9}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/211, 0xd3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/5, 0x5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/41, 0x29}], 0x8, &(0x7f0000001fc0)=""/203, 0xcb}, 0x7f}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/63, 0x3f}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/157, 0x9d}, {&(0x7f00000034c0)=""/52, 0x34}], 0x7, &(0x7f0000003580)=""/108, 0x6c}, 0x6}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/147, 0x93}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)=""/93, 0x5d}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/7, 0x7}, 0x3}], 0x6, 0x42, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000061c0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006180)={&(0x7f0000004c40)={0x1504, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x17a, 0x7f, [@random_vendor={0xdd, 0xd0, "3f66a568c10e9192cde49f54cb28c2298c483923e2c454dd8fe54986399e871f62eda77f2a973e692751a009c0527c83aa6de8d617cb642f931b8d2940d8c977f3b64c37fbf25bfe3e7c8e23be26c09c16cb8d6db2d7f60ebf3f04dba45d0c00f63e76cb8aed21364e3f7202e25d4832aab3e3a3c303be3e8fa2e02180a74f12564349c337a16c3388d7a2b5a1832c6d99d4477144967278101ae7420588a0223a5914c3b401fe59047ad358a0a1ea5a10b3130ec1b0363be6b3499aab6c35c3bcdadb1325e32186d53da347c101acb9"}, @prep={0x83, 0x1f, @not_ext={{}, 0x3d, 0x3, @broadcast, 0x80000001, "", 0xeb, 0x1, @broadcast, 0x5c}}, @measure_req={0x26, 0x79, {0xd2, 0x3f, 0x14, "eb5491bde511377d22c66fcc4cab8f66f2bdde30354163627586540e1499f4bee6b2fd517a98f0239343efd1e707500e17c7c6ef6ccef0f9f5f4838b2d0f62c7923c1fc0d2661af3564b81a8aa988548b78900f86b686b2f9e4f02d68376ed6e9ea8676d48a9e18f38a8d4bff7146d40a423513e39b4"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x3, 0x37, 0x6}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x117, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x80, 0x7f, @device_a, 0x101, 0x590e4934, 0x101}}, @random_vendor={0xdd, 0xfa, "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"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1010, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x243, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @broadcast, @initial, {0x3, 0x8}}, 0x6, @random=0x1, 0xe418, @void, @void, @void, @void, @void, @val={0x5, 0x46, {0x3, 0xad, 0x20, "01e75fb1ffda44c52ce2e27c696d15714c0000e937b0baf511cd7777b7ef82d036a5dda0356f3dfdb2b8d20c961b9a273be6130acc6e5936d862d14fd8379b5932963d"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0xe0, 0x99, 0xda}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0x3, 0x34, 0xbe}}, [{0xdd, 0xbb, "ba3c01bbcf115c3fca579a123d8384eb335eb4106466f51615bd0977f64df2365d2a47df1867b70e0c60ebc670c8a227b82d5363c5b69250fc8be75417263dcf6e9ed1471f07ddbaee4b2ae5b6b592dad30d194db1ac9117cb8575761c784128fa806c5bacf3b0fe69f0fc630c2d13bbcf389caf8e0aa572a15ae6ec5b52af4eb6cb359e53246bd5307ea86f784f993bf85decfbabbbd0e60430ebac4f047ee386869c4596b2e367eba193fe6969e05cbfbbbce29dccdf4dbd2e9f"}, {0xdd, 0xfe, "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"}]}}]}, 0x1504}, 0x1, 0x0, 0x0, 0x18}, 0x20000c04) 16:56:00 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:00 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:56:00 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = io_uring_setup(0x7cd8, &(0x7f00000001c0)={0x0, 0x16e8, 0x20, 0x0, 0xc1, 0x0, r0}) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0xd3b8, 0x4, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4a4d, &(0x7f0000000240)={0x0, 0xde02, 0x10, 0x2, 0x102, 0x0, r0}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x1527, &(0x7f0000000300)={0x0, 0xdeb2, 0x0, 0x0, 0x249, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r1, 0x4, 0x0, 0x4, 0x4, 0x1}, 0x3f) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:56:00 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/245, 0xf5}], 0x8, &(0x7f0000000b00)=""/87, 0x57}, 0x9}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/211, 0xd3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/5, 0x5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/41, 0x29}], 0x8, &(0x7f0000001fc0)=""/203, 0xcb}, 0x7f}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/63, 0x3f}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/157, 0x9d}, {&(0x7f00000034c0)=""/52, 0x34}], 0x7, &(0x7f0000003580)=""/108, 0x6c}, 0x6}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/147, 0x93}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)=""/93, 0x5d}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/7, 0x7}, 0x3}], 0x6, 0x42, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), r0) 16:56:00 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:00 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:56:00 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:00 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/245, 0xf5}], 0x8, &(0x7f0000000b00)=""/87, 0x57}, 0x9}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/211, 0xd3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/5, 0x5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/41, 0x29}], 0x8, &(0x7f0000001fc0)=""/203, 0xcb}, 0x7f}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/63, 0x3f}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/157, 0x9d}, {&(0x7f00000034c0)=""/52, 0x34}], 0x7, &(0x7f0000003580)=""/108, 0x6c}, 0x6}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/147, 0x93}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)=""/93, 0x5d}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/7, 0x7}, 0x3}], 0x6, 0x42, 0xffffffffffffffff) 16:56:00 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:56:01 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x8000000}, 0x0) 16:56:01 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:01 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) recvmmsg(r0, &(0x7f0000004a40)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/245, 0xf5}], 0x8, &(0x7f0000000b00)=""/87, 0x57}, 0x9}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/211, 0xd3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/5, 0x5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/41, 0x29}], 0x8, &(0x7f0000001fc0)=""/203, 0xcb}, 0x7f}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/63, 0x3f}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/157, 0x9d}, {&(0x7f00000034c0)=""/52, 0x34}], 0x7, &(0x7f0000003580)=""/108, 0x6c}, 0x6}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/147, 0x93}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)=""/93, 0x5d}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/7, 0x7}, 0x3}], 0x6, 0x42, 0xffffffffffffffff) 16:56:01 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), &(0x7f00000001c0)) 16:56:01 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:01 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:56:01 executing program 4: r0 = syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:01 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004a40)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000000980)=""/245, 0xf5}], 0x8, &(0x7f0000000b00)=""/87, 0x57}, 0x9}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/61, 0x3d}, {&(0x7f0000000c40)=""/2, 0x2}, {&(0x7f0000000c80)=""/191, 0xbf}, {&(0x7f0000000d40)=""/211, 0xd3}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/5, 0x5}, {&(0x7f0000001e80)=""/122, 0x7a}, {&(0x7f0000001f00)=""/41, 0x29}], 0x8, &(0x7f0000001fc0)=""/203, 0xcb}, 0x7f}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/63, 0x3f}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/157, 0x9d}, {&(0x7f00000034c0)=""/52, 0x34}], 0x7, &(0x7f0000003580)=""/108, 0x6c}, 0x6}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/147, 0x93}], 0x1}, 0x400}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)=""/93, 0x5d}], 0x1, &(0x7f0000003840)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/230, 0xe6}], 0x1, &(0x7f0000004a00)=""/7, 0x7}, 0x3}], 0x6, 0x42, 0xffffffffffffffff) 16:56:01 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, 0xffffffffffffffff) 16:56:01 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 16:56:01 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:56:01 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:01 executing program 4: r0 = syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:02 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x80000000000000}, 0x0) 16:56:02 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 16:56:02 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) 16:56:02 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:02 executing program 4: r0 = syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:02 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:02 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:02 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f00000001c0)) 16:56:02 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) epoll_create(0x0) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r0, 0x8000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000bc0)={0x0, 0x6, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf250a00000005002a000000000008003a000700000008000b000600000005003000000000000500290001000000050038000000000008002b0002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x28000000) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000280)={0x760, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_PROBE_RESP={0x72b, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0x9, 0x2}}, @erp={0x2a, 0x1, {0x1}}]}]}, 0x760}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 16:56:02 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:02 executing program 3: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:02 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), 0x0) 16:56:03 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x400000000000000}, 0x0) 16:56:03 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:03 executing program 2: syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10c, &(0x7f0000000040)=0xfff, 0x0, 0x4) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r1, 0x8000000) 16:56:03 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), 0x0) 16:56:03 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:03 executing program 3: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:03 executing program 2: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xc693, 0x1c}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x40830, r0, 0x8000000) 16:56:03 executing program 3: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:03 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:03 executing program 5: syz_io_uring_setup(0x17e3d, &(0x7f0000000140)={0x0, 0x0, 0x1e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000400), 0x0) 16:56:03 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:03 executing program 2: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xc693, 0x1c}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x40830, r0, 0x8000000) 16:56:04 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x800000000000000}, 0x0) 16:56:04 executing program 5: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) r2 = syz_io_uring_setup(0x45cf, &(0x7f0000000140)={0x0, 0xfffffffd}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000000387f4177e023d857c3c4d282d983e34b6814f04cdc9ded85d53d318dec827f672616a483d9d99955c6b73d8095d6d29df041661d7f0caceff2999d0231d1cb9946645a3bc06211526a51a9812bcc78299a58111df0c3d7f1fce34dfbf810faa1e663d5f4bddbe5459006a6c0b8892c4cb439e8d97180bc67bcaccb05ad6b97e6d22f43cfe71eb1afb352797959b4a2c753173940107c6f9cfbcbda598496c0921ad7c2846f39a735b07c7349e3a44f19b24539713920fcd8d6c30d09fdfe054e96b1825eb4a00e20dc740c3ed548b42cd0c99bbfefff3089e9aa00862b0a22", @ANYRES16=0x0, @ANYRESDEC=r1], 0x80}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) io_uring_setup(0x13f0, &(0x7f00000005c0)={0x0, 0x6413, 0x1, 0x1, 0x23, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x82e, &(0x7f0000000640)={0x0, 0xb73c, 0x20, 0x0, 0x3b5}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) socket$nl_generic(0x10, 0x3, 0x10) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000740)={0x18, 0x71, 0x1, {{0x40, 0x4}, 0x7}}, 0x18) r3 = syz_io_uring_setup(0x6e0f, &(0x7f00000002c0)={0x0, 0x8abf, 0x2, 0x3, 0x324, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_setup(0x1233, &(0x7f0000000540)={0x0, 0x98ea, 0x1, 0x2, 0x191, 0x0, r3}) syz_io_uring_setup(0xe78, &(0x7f00000001c0)={0x0, 0x21e0, 0x8, 0x2, 0x2b5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 16:56:04 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:04 executing program 2: r0 = syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xc693, 0x1c}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x40830, r0, 0x8000000) 16:56:04 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:04 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:04 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:04 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:04 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x80, 0x0, 0x3}, 0x1}}, 0x18) 16:56:04 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:04 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x40830, 0xffffffffffffffff, 0x8000000) 16:56:04 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:05 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x0) 16:56:05 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:05 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40830, 0xffffffffffffffff, 0x8000000) 16:56:05 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x80, 0x0, 0x3}, 0x1}}, 0x18) 16:56:05 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:05 executing program 3: r0 = syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:05 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:05 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 16:56:05 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x80, 0x0, 0x3}, 0x1}}, 0x18) 16:56:05 executing program 3: r0 = syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:05 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:05 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:05 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x8}, 0x0) 16:56:05 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 16:56:05 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:05 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) 16:56:05 executing program 3: r0 = syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:05 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:05 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) 16:56:05 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:05 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 16:56:06 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:06 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:06 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) 16:56:06 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x800000}, 0x0) 16:56:06 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) 16:56:06 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:06 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:06 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:06 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:06 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 16:56:06 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:06 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:06 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:06 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:06 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:07 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 16:56:07 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:07 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:07 executing program 5: syz_io_uring_setup(0x7e3d, &(0x7f0000000140)={0x0, 0xe869, 0x1e, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 16:56:07 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:07 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:07 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 16:56:07 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:07 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:07 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xdfa3, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:07 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 16:56:08 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 16:56:08 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:08 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:08 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:08 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:08 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 16:56:08 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:08 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:08 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 16:56:08 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:08 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:08 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:09 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0) 16:56:09 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 16:56:09 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:09 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:09 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:09 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:09 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:09 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) 16:56:09 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:09 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:09 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:10 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0) 16:56:10 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:10 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:10 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) 16:56:10 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:10 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:10 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:10 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:10 executing program 5: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) 16:56:10 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:10 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:10 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:11 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) 16:56:11 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 16:56:11 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:11 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x9f97, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:11 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0xa0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:11 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:11 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:11 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:11 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:11 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:11 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:12 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 16:56:12 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:12 executing program 2: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:12 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:12 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:12 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:12 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:12 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:12 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 16:56:12 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:12 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:12 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) 16:56:13 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x11c13, r1, 0x8000000) 16:56:13 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000280)) 16:56:13 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7) 16:56:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000280)) 16:56:13 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:13 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3e2, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000280)) 16:56:13 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), 0x0) 16:56:13 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r1}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x7fffffff) 16:56:13 executing program 3: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x1354, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r1}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 2: r0 = syz_io_uring_setup(0x52f3, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:13 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0) 16:56:13 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 2: r0 = syz_io_uring_setup(0x52f3, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:13 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:13 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) 16:56:14 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), 0x0) 16:56:14 executing program 2: r0 = syz_io_uring_setup(0x52f3, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:14 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:14 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 16:56:14 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) 16:56:14 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:14 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x705201, 0x0) syz_io_uring_setup(0x6e92, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240), 0x0) 16:56:14 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:14 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:14 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:56:14 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:14 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:14 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:14 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:14 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:56:15 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:15 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 16:56:15 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:15 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:15 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:15 executing program 0: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:56:15 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:15 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:15 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:15 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:15 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) syz_io_uring_setup(0x1a56, &(0x7f0000000480)={0x0, 0xd39, 0x8, 0x1, 0x321}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:15 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:15 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x6344, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:16 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0) 16:56:16 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:16 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:16 executing program 5: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:16 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:16 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:16 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:16 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 16:56:16 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:16 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:16 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:16 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:17 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0) 16:56:17 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 16:56:17 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:17 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:17 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:17 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:17 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:17 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 16:56:17 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:17 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:17 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:17 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 16:56:18 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) 16:56:18 executing program 5: r0 = syz_io_uring_setup(0x52f3, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:18 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0xbfc, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:18 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:18 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:18 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 16:56:18 executing program 5: r0 = syz_io_uring_setup(0x52f3, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:18 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:18 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, 0x0, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:18 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 16:56:18 executing program 5: r0 = syz_io_uring_setup(0x52f3, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:18 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:19 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 16:56:19 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, 0x0, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:19 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:19 executing program 0: syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:19 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:19 executing program 4: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x7, &(0x7f0000000040)=[{0x9, 0x3f, 0x9, 0x4}, {0x5, 0xc5, 0x1, 0x1f}, {0x6c, 0x5, 0xff, 0x8000005}, {0x5, 0x7f, 0x9, 0x80}, {0x3f, 0x20, 0x6, 0x9}, {0x2, 0x7, 0x1, 0x6}, {0x7fff, 0x3, 0x4, 0x2}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x1f, 0x4, 0x2, 0xaad5}, {0x9, 0x0, 0x1, 0x6}, {0x1, 0x81, 0x80, 0x4}, {0x81, 0x1f, 0x3, 0x800}]}) io_uring_setup(0x5c82, &(0x7f0000000300)={0x0, 0x5bc9, 0x20, 0x3, 0x10c, 0x0, r1}) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0xe03, 0x80000}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x1ffff000, 0x0, 0x13, r0, 0x8000000) 16:56:19 executing program 0: syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:19 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, 0x0, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:19 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:19 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 1) 16:56:19 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:19 executing program 0: syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1615.231108][T24641] FAULT_INJECTION: forcing a failure. [ 1615.231108][T24641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1615.244222][T24641] CPU: 1 PID: 24641 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1615.252982][T24641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1615.263113][T24641] Call Trace: [ 1615.266391][T24641] dump_stack_lvl+0xd6/0x122 [ 1615.271018][T24641] dump_stack+0x11/0x1b [ 1615.275174][T24641] should_fail+0x23c/0x250 [ 1615.279585][T24641] should_fail_usercopy+0x16/0x20 [ 1615.284602][T24641] _copy_from_user+0x1c/0xd0 [ 1615.289196][T24641] __x64_sys_io_uring_setup+0x5d/0x130 [ 1615.294738][T24641] do_syscall_64+0x44/0xa0 [ 1615.299174][T24641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1615.305074][T24641] RIP: 0033:0x7fe015b40709 [ 1615.309486][T24641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1615.329095][T24641] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1615.337601][T24641] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1615.345565][T24641] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1615.353550][T24641] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1615.361515][T24641] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1615.369476][T24641] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:20 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) 16:56:20 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:20 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 16:56:20 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:20 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:20 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 2) [ 1616.037202][T24660] FAULT_INJECTION: forcing a failure. [ 1616.037202][T24660] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.049957][T24660] CPU: 0 PID: 24660 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1616.058855][T24660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.068917][T24660] Call Trace: [ 1616.072192][T24660] dump_stack_lvl+0xd6/0x122 [ 1616.076791][T24660] dump_stack+0x11/0x1b [ 1616.081015][T24660] should_fail+0x23c/0x250 16:56:20 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 16:56:20 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:20 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1616.085431][T24660] __should_failslab+0x81/0x90 [ 1616.090241][T24660] ? io_uring_create+0x126/0x1bb0 [ 1616.095281][T24660] should_failslab+0x5/0x20 [ 1616.099858][T24660] kmem_cache_alloc_trace+0x52/0x320 [ 1616.105370][T24660] ? get_pid_task+0x8b/0xc0 [ 1616.109867][T24660] io_uring_create+0x126/0x1bb0 [ 1616.114719][T24660] ? vfs_write+0x61a/0x900 [ 1616.119166][T24660] ? putname+0xb8/0xd0 [ 1616.123472][T24660] ? should_fail+0xd6/0x250 [ 1616.127968][T24660] __x64_sys_io_uring_setup+0xf3/0x130 [ 1616.133455][T24660] do_syscall_64+0x44/0xa0 16:56:20 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:20 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) [ 1616.137878][T24660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1616.143798][T24660] RIP: 0033:0x7fe015b40709 [ 1616.148207][T24660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.167815][T24660] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1616.176227][T24660] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 16:56:20 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1616.184202][T24660] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1616.192167][T24660] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1616.200132][T24660] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1616.208193][T24660] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:20 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0) 16:56:20 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:20 executing program 0: syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:20 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 16:56:20 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:20 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 3) 16:56:21 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:21 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) [ 1616.931123][T24706] FAULT_INJECTION: forcing a failure. [ 1616.931123][T24706] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.943796][T24706] CPU: 0 PID: 24706 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1616.952615][T24706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.962667][T24706] Call Trace: [ 1616.965942][T24706] dump_stack_lvl+0xd6/0x122 [ 1616.970541][T24706] dump_stack+0x11/0x1b [ 1616.974783][T24706] should_fail+0x23c/0x250 16:56:21 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 16:56:21 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1616.979222][T24706] ? io_uring_create+0x193/0x1bb0 [ 1616.984250][T24706] __should_failslab+0x81/0x90 [ 1616.989081][T24706] should_failslab+0x5/0x20 [ 1616.993613][T24706] __kmalloc+0x6f/0x350 [ 1616.997762][T24706] ? kmem_cache_alloc_trace+0x221/0x320 [ 1617.003304][T24706] ? io_uring_create+0x126/0x1bb0 [ 1617.008341][T24706] io_uring_create+0x193/0x1bb0 [ 1617.013268][T24706] ? vfs_write+0x61a/0x900 [ 1617.017773][T24706] ? putname+0xb8/0xd0 [ 1617.021894][T24706] __x64_sys_io_uring_setup+0xf3/0x130 [ 1617.027347][T24706] do_syscall_64+0x44/0xa0 16:56:21 executing program 0: syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:21 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1617.031761][T24706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1617.037672][T24706] RIP: 0033:0x7fe015b40709 [ 1617.042081][T24706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.061689][T24706] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1617.070103][T24706] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1617.078071][T24706] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1617.086043][T24706] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1617.094027][T24706] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1617.102075][T24706] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:21 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 16:56:21 executing program 0: syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:21 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x2d9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:21 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 4) 16:56:21 executing program 3: syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:21 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:21 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:21 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x3606, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1617.803425][T24743] FAULT_INJECTION: forcing a failure. [ 1617.803425][T24743] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.816184][T24743] CPU: 0 PID: 24743 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1617.824945][T24743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.835014][T24743] Call Trace: [ 1617.838284][T24743] dump_stack_lvl+0xd6/0x122 [ 1617.842886][T24743] dump_stack+0x11/0x1b [ 1617.847100][T24743] should_fail+0x23c/0x250 16:56:21 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:21 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 1) [ 1617.851513][T24743] __should_failslab+0x81/0x90 [ 1617.856270][T24743] ? io_uring_create+0x1e4/0x1bb0 [ 1617.861325][T24743] should_failslab+0x5/0x20 [ 1617.865832][T24743] kmem_cache_alloc_trace+0x52/0x320 [ 1617.871108][T24743] ? io_uring_create+0x193/0x1bb0 [ 1617.876215][T24743] io_uring_create+0x1e4/0x1bb0 [ 1617.881075][T24743] ? vfs_write+0x61a/0x900 [ 1617.885489][T24743] ? putname+0xb8/0xd0 [ 1617.889561][T24743] __x64_sys_io_uring_setup+0xf3/0x130 [ 1617.895016][T24743] do_syscall_64+0x44/0xa0 16:56:22 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:22 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1617.899457][T24743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1617.905468][T24743] RIP: 0033:0x7fe015b40709 [ 1617.909876][T24743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.929476][T24743] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1617.934905][T24758] FAULT_INJECTION: forcing a failure. [ 1617.934905][T24758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.938003][T24743] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1617.938019][T24743] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1617.938031][T24743] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1617.974970][T24743] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1617.982928][T24743] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1617.990936][T24758] CPU: 1 PID: 24758 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1617.999695][T24758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.009823][T24758] Call Trace: [ 1618.013141][T24758] dump_stack_lvl+0xd6/0x122 [ 1618.017735][T24758] dump_stack+0x11/0x1b [ 1618.021885][T24758] should_fail+0x23c/0x250 [ 1618.026297][T24758] should_fail_usercopy+0x16/0x20 [ 1618.031327][T24758] _copy_from_user+0x1c/0xd0 [ 1618.036030][T24758] __x64_sys_io_uring_setup+0x5d/0x130 [ 1618.041486][T24758] do_syscall_64+0x44/0xa0 [ 1618.045996][T24758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1618.051926][T24758] RIP: 0033:0x7ff75734f709 [ 1618.056376][T24758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1618.076161][T24758] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1618.084617][T24758] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1618.092639][T24758] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1618.100606][T24758] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1618.108583][T24758] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1618.116550][T24758] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:22 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 16:56:22 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:22 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:22 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 5) 16:56:22 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 2) 16:56:22 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1618.665047][T24779] FAULT_INJECTION: forcing a failure. [ 1618.665047][T24779] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.677766][T24779] CPU: 1 PID: 24779 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1618.686617][T24779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.696748][T24779] Call Trace: [ 1618.700017][T24779] dump_stack_lvl+0xd6/0x122 [ 1618.704643][T24779] dump_stack+0x11/0x1b [ 1618.708799][T24779] should_fail+0x23c/0x250 16:56:22 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:22 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1618.713210][T24779] ? io_uring_create+0x1bb0/0x1bb0 [ 1618.718570][T24779] __should_failslab+0x81/0x90 [ 1618.723477][T24779] ? percpu_ref_init+0x96/0x250 [ 1618.728325][T24779] should_failslab+0x5/0x20 [ 1618.733112][T24779] kmem_cache_alloc_trace+0x52/0x320 [ 1618.738437][T24779] ? io_uring_create+0x1bb0/0x1bb0 [ 1618.743544][T24779] percpu_ref_init+0x96/0x250 [ 1618.748230][T24779] io_uring_create+0x22b/0x1bb0 [ 1618.753101][T24779] ? vfs_write+0x61a/0x900 [ 1618.754933][T24781] FAULT_INJECTION: forcing a failure. [ 1618.754933][T24781] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.757519][T24779] ? putname+0xb8/0xd0 [ 1618.774311][T24779] __x64_sys_io_uring_setup+0xf3/0x130 [ 1618.779789][T24779] do_syscall_64+0x44/0xa0 [ 1618.784231][T24779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1618.790127][T24779] RIP: 0033:0x7fe015b40709 [ 1618.794537][T24779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1618.814167][T24779] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1618.822648][T24779] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1618.830600][T24779] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1618.838563][T24779] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1618.846527][T24779] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1618.854515][T24779] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1618.862475][T24781] CPU: 0 PID: 24781 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1618.871726][T24781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.881780][T24781] Call Trace: [ 1618.885055][T24781] dump_stack_lvl+0xd6/0x122 [ 1618.889648][T24781] dump_stack+0x11/0x1b [ 1618.893866][T24781] should_fail+0x23c/0x250 [ 1618.898303][T24781] __should_failslab+0x81/0x90 [ 1618.903150][T24781] ? io_uring_create+0x126/0x1bb0 [ 1618.908171][T24781] should_failslab+0x5/0x20 16:56:23 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x84}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:23 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:23 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 6) [ 1618.913021][T24781] kmem_cache_alloc_trace+0x52/0x320 [ 1618.918312][T24781] ? get_pid_task+0x8b/0xc0 [ 1618.922848][T24781] io_uring_create+0x126/0x1bb0 [ 1618.927699][T24781] ? vfs_write+0x61a/0x900 [ 1618.932145][T24781] ? putname+0xb8/0xd0 [ 1618.936286][T24781] ? should_fail+0xd6/0x250 [ 1618.940791][T24781] __x64_sys_io_uring_setup+0xf3/0x130 [ 1618.946269][T24781] do_syscall_64+0x44/0xa0 [ 1618.950893][T24781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1618.956798][T24781] RIP: 0033:0x7ff75734f709 16:56:23 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1618.961207][T24781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1618.980947][T24781] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1618.989508][T24781] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1618.994961][T24803] FAULT_INJECTION: forcing a failure. [ 1618.994961][T24803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1618.997479][T24781] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1618.997495][T24781] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1618.997506][T24781] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1618.997518][T24781] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1619.047257][T24803] CPU: 1 PID: 24803 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1619.056118][T24803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.066228][T24803] Call Trace: [ 1619.069538][T24803] dump_stack_lvl+0xd6/0x122 [ 1619.074134][T24803] dump_stack+0x11/0x1b [ 1619.078289][T24803] should_fail+0x23c/0x250 [ 1619.082710][T24803] __alloc_pages+0x102/0x320 [ 1619.087393][T24803] alloc_pages+0x382/0x3d0 [ 1619.091813][T24803] __get_free_pages+0x8/0x30 [ 1619.096413][T24803] io_uring_create+0x949/0x1bb0 [ 1619.101278][T24803] ? putname+0xb8/0xd0 [ 1619.105333][T24803] __x64_sys_io_uring_setup+0xf3/0x130 [ 1619.110832][T24803] do_syscall_64+0x44/0xa0 [ 1619.115273][T24803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1619.121158][T24803] RIP: 0033:0x7fe015b40709 [ 1619.125551][T24803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1619.145155][T24803] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1619.153547][T24803] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1619.161530][T24803] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1619.169526][T24803] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1619.177591][T24803] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1619.185540][T24803] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:23 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0) 16:56:23 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x244, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:23 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000002c0)) 16:56:23 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 3) 16:56:23 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:23 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 7) 16:56:23 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000002c0)) [ 1619.590461][T24821] FAULT_INJECTION: forcing a failure. [ 1619.590461][T24821] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1619.603744][T24821] CPU: 0 PID: 24821 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1619.612512][T24821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.612677][T24822] FAULT_INJECTION: forcing a failure. [ 1619.612677][T24822] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.622564][T24821] Call Trace: [ 1619.622573][T24821] dump_stack_lvl+0xd6/0x122 [ 1619.622598][T24821] dump_stack+0x11/0x1b [ 1619.647180][T24821] should_fail+0x23c/0x250 [ 1619.651586][T24821] __alloc_pages+0x102/0x320 [ 1619.656168][T24821] alloc_pages+0x382/0x3d0 [ 1619.660647][T24821] __get_free_pages+0x8/0x30 [ 1619.665222][T24821] io_uring_create+0xa42/0x1bb0 [ 1619.670060][T24821] ? putname+0xb8/0xd0 [ 1619.674115][T24821] __x64_sys_io_uring_setup+0xf3/0x130 [ 1619.679561][T24821] do_syscall_64+0x44/0xa0 [ 1619.683969][T24821] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1619.689861][T24821] RIP: 0033:0x7fe015b40709 [ 1619.694290][T24821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1619.713882][T24821] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1619.722296][T24821] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1619.730251][T24821] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1619.738206][T24821] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1619.746161][T24821] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1619.754128][T24821] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1619.763102][T24822] CPU: 1 PID: 24822 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1619.771861][T24822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.781963][T24822] Call Trace: [ 1619.785238][T24822] dump_stack_lvl+0xd6/0x122 16:56:23 executing program 5: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:23 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 8) 16:56:23 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, &(0x7f00000002c0)) [ 1619.789853][T24822] dump_stack+0x11/0x1b [ 1619.794010][T24822] should_fail+0x23c/0x250 [ 1619.798685][T24822] ? io_uring_create+0x193/0x1bb0 [ 1619.803708][T24822] __should_failslab+0x81/0x90 [ 1619.808542][T24822] should_failslab+0x5/0x20 [ 1619.813095][T24822] __kmalloc+0x6f/0x350 [ 1619.817250][T24822] ? kmem_cache_alloc_trace+0x221/0x320 [ 1619.822918][T24822] ? io_uring_create+0x126/0x1bb0 [ 1619.828023][T24822] io_uring_create+0x193/0x1bb0 [ 1619.832904][T24822] ? vfs_write+0x61a/0x900 [ 1619.837327][T24822] ? putname+0xb8/0xd0 16:56:23 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1619.841552][T24822] __x64_sys_io_uring_setup+0xf3/0x130 [ 1619.847029][T24822] do_syscall_64+0x44/0xa0 [ 1619.851482][T24822] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1619.858397][T24822] RIP: 0033:0x7ff75734f709 [ 1619.862894][T24822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1619.883587][T24822] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 16:56:23 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), 0x0) [ 1619.892081][T24822] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1619.900144][T24822] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1619.908119][T24822] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1619.916184][T24822] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1619.924148][T24822] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1619.945061][T24843] FAULT_INJECTION: forcing a failure. [ 1619.945061][T24843] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.957720][T24843] CPU: 1 PID: 24843 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1619.966486][T24843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.976565][T24843] Call Trace: [ 1619.979838][T24843] dump_stack_lvl+0xd6/0x122 [ 1619.984429][T24843] dump_stack+0x11/0x1b [ 1619.988575][T24843] should_fail+0x23c/0x250 [ 1619.992987][T24843] __should_failslab+0x81/0x90 [ 1619.997745][T24843] ? io_uring_create+0x16a6/0x1bb0 [ 1620.002866][T24843] should_failslab+0x5/0x20 [ 1620.007385][T24843] kmem_cache_alloc_trace+0x52/0x320 [ 1620.012673][T24843] ? alloc_pages+0x382/0x3d0 [ 1620.017323][T24843] io_uring_create+0x16a6/0x1bb0 [ 1620.022333][T24843] ? putname+0xb8/0xd0 [ 1620.026406][T24843] __x64_sys_io_uring_setup+0xf3/0x130 [ 1620.031924][T24843] do_syscall_64+0x44/0xa0 [ 1620.036343][T24843] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1620.042348][T24843] RIP: 0033:0x7fe015b40709 [ 1620.046744][T24843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1620.066332][T24843] RSP: 002b:00007fe013897108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1620.074773][T24843] RAX: ffffffffffffffda RBX: 00007fe015c45020 RCX: 00007fe015b40709 [ 1620.082727][T24843] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1620.090674][T24843] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1620.098628][T24843] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1620.106602][T24843] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:24 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0) 16:56:24 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:24 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 4) 16:56:24 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:24 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), 0x0) 16:56:24 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 9) 16:56:24 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) 16:56:24 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), 0x0) [ 1620.433698][T24861] FAULT_INJECTION: forcing a failure. [ 1620.433698][T24861] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.446372][T24861] CPU: 1 PID: 24861 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1620.455191][T24861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.465245][T24861] Call Trace: [ 1620.468516][T24861] dump_stack_lvl+0xd6/0x122 [ 1620.473113][T24861] dump_stack+0x11/0x1b [ 1620.477362][T24861] should_fail+0x23c/0x250 [ 1620.481774][T24861] __should_failslab+0x81/0x90 [ 1620.486544][T24861] ? io_uring_create+0x1e4/0x1bb0 [ 1620.491647][T24861] should_failslab+0x5/0x20 [ 1620.496187][T24861] kmem_cache_alloc_trace+0x52/0x320 [ 1620.501474][T24861] ? io_uring_create+0x193/0x1bb0 [ 1620.506505][T24861] io_uring_create+0x1e4/0x1bb0 [ 1620.511365][T24861] ? vfs_write+0x61a/0x900 [ 1620.515789][T24861] ? putname+0xb8/0xd0 [ 1620.519884][T24861] __x64_sys_io_uring_setup+0xf3/0x130 [ 1620.525347][T24861] do_syscall_64+0x44/0xa0 16:56:24 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:24 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) [ 1620.529776][T24861] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1620.535766][T24861] RIP: 0033:0x7ff75734f709 [ 1620.540213][T24861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1620.559839][T24861] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1620.568254][T24861] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1620.576221][T24861] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c 16:56:24 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) (fail_nth: 1) 16:56:24 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) [ 1620.584236][T24861] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1620.592204][T24861] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1620.600182][T24861] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1620.616957][T24862] FAULT_INJECTION: forcing a failure. [ 1620.616957][T24862] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.629479][T24883] FAULT_INJECTION: forcing a failure. [ 1620.629479][T24883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1620.629614][T24862] CPU: 0 PID: 24862 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1620.651319][T24862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.661379][T24862] Call Trace: [ 1620.664662][T24862] dump_stack_lvl+0xd6/0x122 [ 1620.669241][T24862] dump_stack+0x11/0x1b [ 1620.673383][T24862] should_fail+0x23c/0x250 [ 1620.677797][T24862] ? kzalloc+0x30/0x30 [ 1620.681903][T24862] __should_failslab+0x81/0x90 [ 1620.686658][T24862] ? percpu_ref_init+0x96/0x250 [ 1620.691677][T24862] should_failslab+0x5/0x20 [ 1620.696188][T24862] kmem_cache_alloc_trace+0x52/0x320 [ 1620.701462][T24862] ? kzalloc+0x30/0x30 [ 1620.705517][T24862] percpu_ref_init+0x96/0x250 [ 1620.710206][T24862] io_uring_create+0x16c8/0x1bb0 [ 1620.715183][T24862] ? putname+0xb8/0xd0 [ 1620.719240][T24862] __x64_sys_io_uring_setup+0xf3/0x130 [ 1620.724687][T24862] do_syscall_64+0x44/0xa0 [ 1620.729158][T24862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1620.735130][T24862] RIP: 0033:0x7fe015b40709 [ 1620.739618][T24862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1620.759217][T24862] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1620.767624][T24862] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1620.775588][T24862] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1620.783545][T24862] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1620.791506][T24862] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1620.799462][T24862] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1620.807437][T24883] CPU: 1 PID: 24883 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 1620.816224][T24883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.826284][T24883] Call Trace: [ 1620.829559][T24883] dump_stack_lvl+0xd6/0x122 [ 1620.834181][T24883] dump_stack+0x11/0x1b [ 1620.838336][T24883] should_fail+0x23c/0x250 [ 1620.842857][T24883] should_fail_usercopy+0x16/0x20 [ 1620.847900][T24883] _copy_from_user+0x1c/0xd0 [ 1620.852585][T24883] __x64_sys_io_uring_setup+0x5d/0x130 [ 1620.858052][T24883] do_syscall_64+0x44/0xa0 [ 1620.862484][T24883] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1620.868394][T24883] RIP: 0033:0x7fc666dd2709 [ 1620.872849][T24883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1620.892572][T24883] RSP: 002b:00007fc664b4a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1620.900988][T24883] RAX: ffffffffffffffda RBX: 00007fc666ed6f60 RCX: 00007fc666dd2709 [ 1620.908965][T24883] RDX: 0000000020ff9000 RSI: 0000000020000240 RDI: 0000000000003452 [ 1620.917316][T24883] RBP: 0000000020000240 R08: 00000000200002c0 R09: 00000000200002c0 [ 1620.925273][T24883] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200002c0 [ 1620.933401][T24883] R13: 0000000020ff9000 R14: 0000000020000080 R15: 0000000020ff7000 16:56:25 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) 16:56:25 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) 16:56:25 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 5) 16:56:25 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 10) 16:56:25 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:25 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) (fail_nth: 2) [ 1621.322004][T24901] FAULT_INJECTION: forcing a failure. [ 1621.322004][T24901] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.324118][T24903] FAULT_INJECTION: forcing a failure. [ 1621.324118][T24903] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.335249][T24901] CPU: 0 PID: 24901 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1621.356748][T24901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.366806][T24901] Call Trace: [ 1621.370071][T24901] dump_stack_lvl+0xd6/0x122 [ 1621.374725][T24901] dump_stack+0x11/0x1b [ 1621.378865][T24901] should_fail+0x23c/0x250 [ 1621.383277][T24901] ? io_uring_create+0x1bb0/0x1bb0 [ 1621.388459][T24901] __should_failslab+0x81/0x90 [ 1621.393226][T24901] ? percpu_ref_init+0x96/0x250 [ 1621.398102][T24901] should_failslab+0x5/0x20 [ 1621.402638][T24901] kmem_cache_alloc_trace+0x52/0x320 [ 1621.408130][T24901] ? io_uring_create+0x1bb0/0x1bb0 [ 1621.413259][T24901] percpu_ref_init+0x96/0x250 [ 1621.417964][T24901] io_uring_create+0x22b/0x1bb0 [ 1621.423090][T24901] ? vfs_write+0x61a/0x900 [ 1621.427496][T24901] ? putname+0xb8/0xd0 [ 1621.431551][T24901] __x64_sys_io_uring_setup+0xf3/0x130 [ 1621.437185][T24901] do_syscall_64+0x44/0xa0 [ 1621.441592][T24901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1621.447743][T24901] RIP: 0033:0x7ff75734f709 [ 1621.452147][T24901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.471760][T24901] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1621.480331][T24901] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1621.488371][T24901] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1621.496323][T24901] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1621.504455][T24901] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1621.512654][T24901] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1621.520889][T24903] CPU: 1 PID: 24903 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 1621.523830][T24902] FAULT_INJECTION: forcing a failure. [ 1621.523830][T24902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.529997][T24903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.530009][T24903] Call Trace: [ 1621.530016][T24903] dump_stack_lvl+0xd6/0x122 [ 1621.530039][T24903] dump_stack+0x11/0x1b [ 1621.565022][T24903] should_fail+0x23c/0x250 [ 1621.569438][T24903] __should_failslab+0x81/0x90 [ 1621.574188][T24903] ? io_uring_create+0x126/0x1bb0 [ 1621.579287][T24903] should_failslab+0x5/0x20 [ 1621.583773][T24903] kmem_cache_alloc_trace+0x52/0x320 [ 1621.589056][T24903] ? get_pid_task+0x8b/0xc0 [ 1621.593544][T24903] io_uring_create+0x126/0x1bb0 [ 1621.598424][T24903] ? vfs_write+0x61a/0x900 [ 1621.602863][T24903] ? should_fail+0xd6/0x250 [ 1621.607352][T24903] __x64_sys_io_uring_setup+0xf3/0x130 [ 1621.612901][T24903] do_syscall_64+0x44/0xa0 [ 1621.617306][T24903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1621.623237][T24903] RIP: 0033:0x7fc666dd2709 [ 1621.627641][T24903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.647233][T24903] RSP: 002b:00007fc664b4a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1621.655640][T24903] RAX: ffffffffffffffda RBX: 00007fc666ed6f60 RCX: 00007fc666dd2709 [ 1621.663608][T24903] RDX: 0000000020ff9000 RSI: 0000000020000240 RDI: 0000000000003452 [ 1621.671562][T24903] RBP: 0000000020000240 R08: 00000000200002c0 R09: 00000000200002c0 [ 1621.679523][T24903] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200002c0 [ 1621.687475][T24903] R13: 0000000020ff9000 R14: 0000000020000080 R15: 0000000020ff7000 [ 1621.695467][T24902] CPU: 0 PID: 24902 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1621.704280][T24902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.714338][T24902] Call Trace: [ 1621.717614][T24902] dump_stack_lvl+0xd6/0x122 16:56:25 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) 16:56:25 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 6) 16:56:25 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) (fail_nth: 3) [ 1621.722240][T24902] dump_stack+0x11/0x1b [ 1621.726405][T24902] should_fail+0x23c/0x250 [ 1621.730825][T24902] should_fail_usercopy+0x16/0x20 [ 1621.735854][T24902] _copy_to_user+0x1c/0x90 [ 1621.740274][T24902] io_uring_create+0x1859/0x1bb0 [ 1621.745586][T24902] ? putname+0xb8/0xd0 [ 1621.749716][T24902] __x64_sys_io_uring_setup+0xf3/0x130 [ 1621.755211][T24902] do_syscall_64+0x44/0xa0 [ 1621.759682][T24902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1621.765631][T24902] RIP: 0033:0x7fe015b40709 16:56:25 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1621.770040][T24902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.789762][T24902] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1621.798367][T24902] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1621.806336][T24902] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1621.814317][T24902] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1621.822306][T24902] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1621.827564][T24917] FAULT_INJECTION: forcing a failure. [ 1621.827564][T24917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1621.830339][T24902] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1621.851584][T24917] CPU: 1 PID: 24917 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1621.853667][T24916] FAULT_INJECTION: forcing a failure. [ 1621.853667][T24916] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.860369][T24917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1621.860382][T24917] Call Trace: [ 1621.860389][T24917] dump_stack_lvl+0xd6/0x122 [ 1621.860415][T24917] dump_stack+0x11/0x1b [ 1621.894974][T24917] should_fail+0x23c/0x250 [ 1621.899380][T24917] __alloc_pages+0x102/0x320 [ 1621.904947][T24917] alloc_pages+0x382/0x3d0 [ 1621.909377][T24917] __get_free_pages+0x8/0x30 [ 1621.913969][T24917] io_uring_create+0x949/0x1bb0 [ 1621.918818][T24917] ? putname+0xb8/0xd0 [ 1621.922884][T24917] __x64_sys_io_uring_setup+0xf3/0x130 [ 1621.928418][T24917] do_syscall_64+0x44/0xa0 [ 1621.932889][T24917] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1621.938774][T24917] RIP: 0033:0x7ff75734f709 [ 1621.943173][T24917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.962768][T24917] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1621.971236][T24917] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1621.979325][T24917] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1621.987347][T24917] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1621.995304][T24917] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1622.003264][T24917] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1622.011227][T24916] CPU: 0 PID: 24916 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 16:56:26 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 7) 16:56:26 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0) [ 1622.019992][T24916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.030038][T24916] Call Trace: [ 1622.033314][T24916] dump_stack_lvl+0xd6/0x122 [ 1622.037908][T24916] dump_stack+0x11/0x1b [ 1622.042072][T24916] should_fail+0x23c/0x250 [ 1622.046490][T24916] ? io_uring_create+0x193/0x1bb0 [ 1622.051509][T24916] __should_failslab+0x81/0x90 [ 1622.056278][T24916] should_failslab+0x5/0x20 [ 1622.060783][T24916] __kmalloc+0x6f/0x350 [ 1622.064935][T24916] ? kmem_cache_alloc_trace+0x221/0x320 [ 1622.070515][T24916] ? io_uring_create+0x126/0x1bb0 [ 1622.075545][T24916] io_uring_create+0x193/0x1bb0 [ 1622.080401][T24916] ? vfs_write+0x61a/0x900 [ 1622.084826][T24916] __x64_sys_io_uring_setup+0xf3/0x130 [ 1622.090293][T24916] do_syscall_64+0x44/0xa0 [ 1622.094845][T24916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.100824][T24916] RIP: 0033:0x7fc666dd2709 [ 1622.105234][T24916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:56:26 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 16:56:26 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 11) 16:56:26 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000400)) 16:56:26 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1622.113010][T24924] FAULT_INJECTION: forcing a failure. [ 1622.113010][T24924] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.124946][T24916] RSP: 002b:00007fc664b4a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1622.124969][T24916] RAX: ffffffffffffffda RBX: 00007fc666ed6f60 RCX: 00007fc666dd2709 [ 1622.124981][T24916] RDX: 0000000020ff9000 RSI: 0000000020000240 RDI: 0000000000003452 [ 1622.124992][T24916] RBP: 0000000020000240 R08: 00000000200002c0 R09: 00000000200002c0 16:56:26 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:26 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) (fail_nth: 4) [ 1622.125002][T24916] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200002c0 [ 1622.125014][T24916] R13: 0000000020ff9000 R14: 0000000020000080 R15: 0000000020ff7000 [ 1622.186022][T24924] CPU: 1 PID: 24924 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1622.194782][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.204875][T24924] Call Trace: [ 1622.208147][T24924] dump_stack_lvl+0xd6/0x122 [ 1622.212745][T24924] dump_stack+0x11/0x1b [ 1622.216986][T24924] should_fail+0x23c/0x250 [ 1622.221400][T24924] ? io_uring_create+0x1bb0/0x1bb0 [ 1622.226671][T24924] __should_failslab+0x81/0x90 [ 1622.231494][T24924] ? percpu_ref_init+0x96/0x250 [ 1622.234083][T24935] FAULT_INJECTION: forcing a failure. [ 1622.234083][T24935] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.236570][T24924] should_failslab+0x5/0x20 [ 1622.236596][T24924] kmem_cache_alloc_trace+0x52/0x320 [ 1622.258892][T24924] ? io_uring_create+0x1bb0/0x1bb0 [ 1622.263997][T24924] percpu_ref_init+0x96/0x250 [ 1622.268660][T24924] io_uring_create+0x22b/0x1bb0 [ 1622.273522][T24924] ? vfs_write+0x61a/0x900 [ 1622.277934][T24924] ? putname+0xb8/0xd0 [ 1622.282087][T24924] __x64_sys_io_uring_setup+0xf3/0x130 [ 1622.287528][T24924] do_syscall_64+0x44/0xa0 [ 1622.291934][T24924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.297856][T24924] RIP: 0033:0x7ff75734f709 [ 1622.302251][T24924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.322247][T24924] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1622.330639][T24924] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1622.338624][T24924] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1622.346577][T24924] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1622.354548][T24924] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1622.362589][T24924] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1622.370585][T24935] CPU: 0 PID: 24935 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 1622.379391][T24935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.389434][T24935] Call Trace: [ 1622.392702][T24935] dump_stack_lvl+0xd6/0x122 [ 1622.397319][T24935] dump_stack+0x11/0x1b [ 1622.401463][T24935] should_fail+0x23c/0x250 [ 1622.405874][T24935] __should_failslab+0x81/0x90 [ 1622.410644][T24935] ? io_uring_create+0x1e4/0x1bb0 [ 1622.415675][T24935] should_failslab+0x5/0x20 [ 1622.420176][T24935] kmem_cache_alloc_trace+0x52/0x320 [ 1622.425374][T24939] FAULT_INJECTION: forcing a failure. [ 1622.425374][T24939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.425452][T24935] ? io_uring_create+0x193/0x1bb0 [ 1622.443441][T24935] io_uring_create+0x1e4/0x1bb0 [ 1622.448286][T24935] ? vfs_write+0x61a/0x900 [ 1622.452692][T24935] __x64_sys_io_uring_setup+0xf3/0x130 [ 1622.458135][T24935] do_syscall_64+0x44/0xa0 [ 1622.462585][T24935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.468565][T24935] RIP: 0033:0x7fc666dd2709 [ 1622.472964][T24935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.492550][T24935] RSP: 002b:00007fc664b4a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1622.500942][T24935] RAX: ffffffffffffffda RBX: 00007fc666ed6f60 RCX: 00007fc666dd2709 [ 1622.508937][T24935] RDX: 0000000020ff9000 RSI: 0000000020000240 RDI: 0000000000003452 [ 1622.517323][T24935] RBP: 0000000020000240 R08: 00000000200002c0 R09: 00000000200002c0 16:56:26 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 1) [ 1622.525273][T24935] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200002c0 [ 1622.533237][T24935] R13: 0000000020ff9000 R14: 0000000020000080 R15: 0000000020ff7000 [ 1622.541193][T24939] CPU: 1 PID: 24939 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1622.549957][T24939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.560000][T24939] Call Trace: [ 1622.563272][T24939] dump_stack_lvl+0xd6/0x122 [ 1622.567862][T24939] dump_stack+0x11/0x1b [ 1622.572018][T24939] should_fail+0x23c/0x250 16:56:26 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 8) 16:56:26 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) (fail_nth: 5) [ 1622.576427][T24939] should_fail_usercopy+0x16/0x20 [ 1622.581450][T24939] _copy_to_user+0x1c/0x90 [ 1622.585863][T24939] io_uring_create+0x1859/0x1bb0 [ 1622.590844][T24939] ? putname+0xb8/0xd0 [ 1622.594920][T24939] __x64_sys_io_uring_setup+0xf3/0x130 [ 1622.600381][T24939] do_syscall_64+0x44/0xa0 [ 1622.604829][T24939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.610792][T24939] RIP: 0033:0x7fe015b40709 [ 1622.615200][T24939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.634816][T24939] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1622.639523][T24953] FAULT_INJECTION: forcing a failure. [ 1622.639523][T24953] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.643257][T24939] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1622.643272][T24939] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1622.643284][T24939] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1622.643296][T24939] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1622.643307][T24939] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1622.695620][T24953] CPU: 0 PID: 24953 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1622.704385][T24953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.714439][T24953] Call Trace: [ 1622.717977][T24953] dump_stack_lvl+0xd6/0x122 [ 1622.722600][T24953] dump_stack+0x11/0x1b [ 1622.725805][T24952] FAULT_INJECTION: forcing a failure. [ 1622.725805][T24952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1622.726936][T24953] should_fail+0x23c/0x250 [ 1622.744498][T24953] __should_failslab+0x81/0x90 [ 1622.749379][T24953] ? io_uring_create+0x16a6/0x1bb0 [ 1622.754510][T24953] should_failslab+0x5/0x20 [ 1622.759008][T24953] kmem_cache_alloc_trace+0x52/0x320 [ 1622.764328][T24953] ? alloc_pages+0x382/0x3d0 [ 1622.769091][T24953] io_uring_create+0x16a6/0x1bb0 [ 1622.774076][T24953] ? putname+0xb8/0xd0 [ 1622.778133][T24953] __x64_sys_io_uring_setup+0xf3/0x130 [ 1622.783585][T24953] do_syscall_64+0x44/0xa0 [ 1622.787989][T24953] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.793876][T24953] RIP: 0033:0x7ff75734f709 [ 1622.798357][T24953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.818097][T24953] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 16:56:26 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1622.826506][T24953] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1622.834458][T24953] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1622.842496][T24953] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1622.850446][T24953] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1622.858396][T24953] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1622.866354][T24952] CPU: 1 PID: 24952 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1622.875122][T24952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.885174][T24952] Call Trace: [ 1622.888447][T24952] dump_stack_lvl+0xd6/0x122 [ 1622.890133][T24954] FAULT_INJECTION: forcing a failure. [ 1622.890133][T24954] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.893058][T24952] dump_stack+0x11/0x1b [ 1622.909909][T24952] should_fail+0x23c/0x250 [ 1622.914373][T24952] should_fail_usercopy+0x16/0x20 [ 1622.919417][T24952] _copy_from_user+0x1c/0xd0 [ 1622.924000][T24952] __x64_sys_io_uring_setup+0x5d/0x130 [ 1622.929533][T24952] do_syscall_64+0x44/0xa0 [ 1622.933953][T24952] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1622.939886][T24952] RIP: 0033:0x7f4120b76709 [ 1622.944291][T24952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1622.963883][T24952] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1622.972351][T24952] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1622.980305][T24952] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1622.988287][T24952] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1622.996439][T24952] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1623.004420][T24952] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1623.012377][T24954] CPU: 0 PID: 24954 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 1623.021136][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.031285][T24954] Call Trace: [ 1623.034555][T24954] dump_stack_lvl+0xd6/0x122 [ 1623.039155][T24954] dump_stack+0x11/0x1b [ 1623.043313][T24954] should_fail+0x23c/0x250 [ 1623.047784][T24954] ? io_uring_create+0x1bb0/0x1bb0 [ 1623.052901][T24954] __should_failslab+0x81/0x90 [ 1623.057895][T24954] ? percpu_ref_init+0x96/0x250 [ 1623.062750][T24954] should_failslab+0x5/0x20 [ 1623.067251][T24954] kmem_cache_alloc_trace+0x52/0x320 [ 1623.073239][T24954] ? io_uring_create+0x1bb0/0x1bb0 16:56:27 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 2) 16:56:27 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 12) [ 1623.078381][T24954] percpu_ref_init+0x96/0x250 [ 1623.083060][T24954] io_uring_create+0x22b/0x1bb0 [ 1623.087914][T24954] ? vfs_write+0x61a/0x900 [ 1623.092397][T24954] __x64_sys_io_uring_setup+0xf3/0x130 [ 1623.097861][T24954] do_syscall_64+0x44/0xa0 [ 1623.102283][T24954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1623.108277][T24954] RIP: 0033:0x7fc666dd2709 [ 1623.112762][T24954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.127590][T24965] FAULT_INJECTION: forcing a failure. [ 1623.127590][T24965] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.132495][T24954] RSP: 002b:00007fc664b4a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1623.132516][T24954] RAX: ffffffffffffffda RBX: 00007fc666ed6f60 RCX: 00007fc666dd2709 [ 1623.132528][T24954] RDX: 0000000020ff9000 RSI: 0000000020000240 RDI: 0000000000003452 [ 1623.132538][T24954] RBP: 0000000020000240 R08: 00000000200002c0 R09: 00000000200002c0 [ 1623.132550][T24954] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200002c0 [ 1623.185426][T24954] R13: 0000000020ff9000 R14: 0000000020000080 R15: 0000000020ff7000 [ 1623.193471][T24965] CPU: 1 PID: 24965 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1623.202242][T24965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.207985][T24966] FAULT_INJECTION: forcing a failure. [ 1623.207985][T24966] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.212353][T24965] Call Trace: [ 1623.212362][T24965] dump_stack_lvl+0xd6/0x122 [ 1623.232850][T24965] dump_stack+0x11/0x1b [ 1623.237091][T24965] should_fail+0x23c/0x250 [ 1623.241579][T24965] ? security_inode_alloc+0x30/0x180 [ 1623.247238][T24965] __should_failslab+0x81/0x90 [ 1623.252081][T24965] should_failslab+0x5/0x20 [ 1623.256587][T24965] kmem_cache_alloc+0x4f/0x300 [ 1623.261338][T24965] security_inode_alloc+0x30/0x180 [ 1623.266434][T24965] inode_init_always+0x20b/0x430 [ 1623.271361][T24965] ? sockfs_init_fs_context+0x70/0x70 [ 1623.276728][T24965] new_inode_pseudo+0x73/0x1c0 [ 1623.281523][T24965] __sock_create+0x122/0x4e0 [ 1623.286098][T24965] ? should_fail+0xd6/0x250 [ 1623.290595][T24965] sock_create_kern+0x34/0x40 [ 1623.295579][T24965] io_uring_create+0x18a2/0x1bb0 [ 1623.300631][T24965] ? putname+0xb8/0xd0 [ 1623.304689][T24965] __x64_sys_io_uring_setup+0xf3/0x130 [ 1623.310221][T24965] do_syscall_64+0x44/0xa0 [ 1623.314629][T24965] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1623.320682][T24965] RIP: 0033:0x7fe015b40709 [ 1623.325133][T24965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.344725][T24965] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1623.353152][T24965] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1623.361105][T24965] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1623.369067][T24965] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1623.377022][T24965] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1623.384977][T24965] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1623.392952][T24966] CPU: 0 PID: 24966 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1623.393016][T24965] socket: no more sockets [ 1623.401707][T24966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.401718][T24966] Call Trace: [ 1623.401724][T24966] dump_stack_lvl+0xd6/0x122 [ 1623.423870][T24966] dump_stack+0x11/0x1b [ 1623.428055][T24966] should_fail+0x23c/0x250 [ 1623.432453][T24966] __should_failslab+0x81/0x90 [ 1623.437201][T24966] ? io_uring_create+0x126/0x1bb0 [ 1623.442210][T24966] should_failslab+0x5/0x20 [ 1623.446741][T24966] kmem_cache_alloc_trace+0x52/0x320 [ 1623.452033][T24966] ? get_pid_task+0x8b/0xc0 [ 1623.456572][T24966] io_uring_create+0x126/0x1bb0 [ 1623.461428][T24966] ? vfs_write+0x61a/0x900 [ 1623.465842][T24966] ? should_fail+0xd6/0x250 [ 1623.470383][T24966] __x64_sys_io_uring_setup+0xf3/0x130 [ 1623.475908][T24966] do_syscall_64+0x44/0xa0 [ 1623.480311][T24966] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1623.486231][T24966] RIP: 0033:0x7f4120b76709 [ 1623.490629][T24966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.510376][T24966] RSP: 002b:00007f411e8cd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1623.518787][T24966] RAX: ffffffffffffffda RBX: 00007f4120c7b020 RCX: 00007f4120b76709 16:56:27 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) 16:56:27 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 9) 16:56:27 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) (fail_nth: 6) 16:56:27 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1623.526818][T24966] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1623.534775][T24966] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1623.542740][T24966] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1623.550694][T24966] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1623.598353][T24975] FAULT_INJECTION: forcing a failure. [ 1623.598353][T24975] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.611040][T24975] CPU: 0 PID: 24975 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1623.619803][T24975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.629905][T24975] Call Trace: [ 1623.633177][T24975] dump_stack_lvl+0xd6/0x122 [ 1623.637818][T24975] dump_stack+0x11/0x1b [ 1623.642117][T24977] FAULT_INJECTION: forcing a failure. [ 1623.642117][T24977] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.642122][T24975] should_fail+0x23c/0x250 [ 1623.642144][T24975] ? kzalloc+0x30/0x30 [ 1623.642162][T24975] __should_failslab+0x81/0x90 [ 1623.667976][T24975] ? percpu_ref_init+0x96/0x250 [ 1623.672815][T24975] should_failslab+0x5/0x20 [ 1623.677375][T24975] kmem_cache_alloc_trace+0x52/0x320 [ 1623.682648][T24975] ? kzalloc+0x30/0x30 [ 1623.686726][T24975] percpu_ref_init+0x96/0x250 [ 1623.691386][T24975] io_uring_create+0x16c8/0x1bb0 [ 1623.696371][T24975] ? putname+0xb8/0xd0 [ 1623.700465][T24975] __x64_sys_io_uring_setup+0xf3/0x130 [ 1623.705910][T24975] do_syscall_64+0x44/0xa0 [ 1623.710313][T24975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1623.716196][T24975] RIP: 0033:0x7ff75734f709 [ 1623.720661][T24975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.740258][T24975] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 16:56:27 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 13) [ 1623.748666][T24975] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1623.756622][T24975] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1623.764589][T24975] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1623.772554][T24975] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1623.780583][T24975] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1623.788545][T24977] CPU: 1 PID: 24977 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 16:56:27 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 3) 16:56:27 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 10) [ 1623.797333][T24977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.807411][T24977] Call Trace: [ 1623.810696][T24977] dump_stack_lvl+0xd6/0x122 [ 1623.815290][T24977] dump_stack+0x11/0x1b [ 1623.819445][T24977] should_fail+0x23c/0x250 [ 1623.823858][T24977] ? io_uring_create+0x1bb0/0x1bb0 [ 1623.828980][T24977] __should_failslab+0x81/0x90 [ 1623.833843][T24977] ? percpu_ref_init+0x96/0x250 [ 1623.838766][T24977] should_failslab+0x5/0x20 [ 1623.843318][T24977] kmem_cache_alloc_trace+0x52/0x320 [ 1623.848615][T24977] ? io_uring_create+0x1bb0/0x1bb0 [ 1623.849166][T24984] FAULT_INJECTION: forcing a failure. [ 1623.849166][T24984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1623.853732][T24977] percpu_ref_init+0x96/0x250 [ 1623.853757][T24977] io_uring_create+0x22b/0x1bb0 [ 1623.876363][T24977] ? vfs_write+0x61a/0x900 [ 1623.880783][T24977] __x64_sys_io_uring_setup+0xf3/0x130 [ 1623.886229][T24977] do_syscall_64+0x44/0xa0 [ 1623.890686][T24977] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1623.896570][T24977] RIP: 0033:0x7fc666dd2709 [ 1623.900972][T24977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.920576][T24977] RSP: 002b:00007fc664b4a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1623.928971][T24977] RAX: ffffffffffffffda RBX: 00007fc666ed6f60 RCX: 00007fc666dd2709 [ 1623.937008][T24977] RDX: 0000000020ff9000 RSI: 0000000020000240 RDI: 0000000000003452 [ 1623.944973][T24977] RBP: 0000000020000240 R08: 00000000200002c0 R09: 00000000200002c0 [ 1623.952999][T24977] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200002c0 [ 1623.961019][T24977] R13: 0000000020ff9000 R14: 0000000020000080 R15: 0000000020ff7000 [ 1623.969159][T24984] CPU: 0 PID: 24984 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1623.977925][T24984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.988066][T24984] Call Trace: [ 1623.991346][T24984] dump_stack_lvl+0xd6/0x122 [ 1623.992458][T24986] FAULT_INJECTION: forcing a failure. [ 1623.992458][T24986] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.995947][T24984] dump_stack+0x11/0x1b [ 1623.995971][T24984] should_fail+0x23c/0x250 [ 1624.017142][T24984] should_fail_usercopy+0x16/0x20 [ 1624.022202][T24984] _copy_to_user+0x1c/0x90 [ 1624.026606][T24984] io_uring_create+0x1859/0x1bb0 [ 1624.031694][T24984] ? putname+0xb8/0xd0 [ 1624.035802][T24984] __x64_sys_io_uring_setup+0xf3/0x130 [ 1624.041394][T24984] do_syscall_64+0x44/0xa0 [ 1624.045823][T24984] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.051707][T24984] RIP: 0033:0x7ff75734f709 [ 1624.056106][T24984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1624.075700][T24984] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1624.084100][T24984] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1624.092054][T24984] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1624.100010][T24984] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1624.107969][T24984] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1624.115952][T24984] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1624.123913][T24986] CPU: 1 PID: 24986 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1624.132953][T24986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.135872][T24985] FAULT_INJECTION: forcing a failure. [ 1624.135872][T24985] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.143082][T24986] Call Trace: [ 1624.143092][T24986] dump_stack_lvl+0xd6/0x122 [ 1624.143115][T24986] dump_stack+0x11/0x1b [ 1624.143131][T24986] should_fail+0x23c/0x250 [ 1624.143146][T24986] ? sk_prot_alloc+0x41/0x190 [ 1624.176692][T24986] __should_failslab+0x81/0x90 [ 1624.181450][T24986] should_failslab+0x5/0x20 [ 1624.185940][T24986] kmem_cache_alloc+0x4f/0x300 [ 1624.190760][T24986] sk_prot_alloc+0x41/0x190 [ 1624.195262][T24986] sk_alloc+0x2e/0x220 [ 1624.199314][T24986] unix_create1+0x93/0x3d0 [ 1624.203720][T24986] unix_create+0xf8/0x110 [ 1624.208037][T24986] __sock_create+0x2c7/0x4e0 [ 1624.212615][T24986] sock_create_kern+0x34/0x40 [ 1624.217332][T24986] io_uring_create+0x18a2/0x1bb0 [ 1624.222263][T24986] ? putname+0xb8/0xd0 [ 1624.226318][T24986] __x64_sys_io_uring_setup+0xf3/0x130 [ 1624.231762][T24986] do_syscall_64+0x44/0xa0 [ 1624.236166][T24986] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.242236][T24986] RIP: 0033:0x7fe015b40709 [ 1624.246647][T24986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1624.266238][T24986] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1624.274643][T24986] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1624.282675][T24986] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1624.290705][T24986] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1624.298684][T24986] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1624.306727][T24986] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1624.314685][T24985] CPU: 0 PID: 24985 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1624.323448][T24985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.333656][T24985] Call Trace: [ 1624.336941][T24985] dump_stack_lvl+0xd6/0x122 [ 1624.341576][T24985] dump_stack+0x11/0x1b [ 1624.345726][T24985] should_fail+0x23c/0x250 16:56:28 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 11) 16:56:28 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:28 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 14) 16:56:28 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) (fail_nth: 7) [ 1624.350206][T24985] ? io_uring_create+0x193/0x1bb0 [ 1624.355302][T24985] __should_failslab+0x81/0x90 [ 1624.360066][T24985] should_failslab+0x5/0x20 [ 1624.364621][T24985] __kmalloc+0x6f/0x350 [ 1624.368872][T24985] ? kmem_cache_alloc_trace+0x221/0x320 [ 1624.374464][T24985] ? io_uring_create+0x126/0x1bb0 [ 1624.379491][T24985] io_uring_create+0x193/0x1bb0 [ 1624.384404][T24985] ? vfs_write+0x61a/0x900 [ 1624.388825][T24985] __x64_sys_io_uring_setup+0xf3/0x130 [ 1624.394285][T24985] do_syscall_64+0x44/0xa0 [ 1624.398787][T24985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.404780][T24985] RIP: 0033:0x7f4120b76709 [ 1624.407341][T24994] FAULT_INJECTION: forcing a failure. [ 1624.407341][T24994] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.409244][T24985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1624.409263][T24985] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1624.409281][T24985] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1624.409293][T24985] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1624.465888][T24985] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1624.473849][T24985] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1624.481808][T24985] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1624.489769][T24994] CPU: 1 PID: 24994 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1624.498531][T24994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.508842][T24994] Call Trace: [ 1624.512141][T24994] dump_stack_lvl+0xd6/0x122 [ 1624.516803][T24994] dump_stack+0x11/0x1b [ 1624.520961][T24994] should_fail+0x23c/0x250 [ 1624.525373][T24994] ? sock_alloc_inode+0x23/0x90 [ 1624.530224][T24994] __should_failslab+0x81/0x90 [ 1624.534983][T24994] ? sockfs_init_fs_context+0x70/0x70 [ 1624.540358][T24994] should_failslab+0x5/0x20 [ 1624.544858][T24994] kmem_cache_alloc+0x4f/0x300 [ 1624.549618][T24994] ? sockfs_init_fs_context+0x70/0x70 [ 1624.555007][T24994] sock_alloc_inode+0x23/0x90 [ 1624.559747][T24994] ? sockfs_init_fs_context+0x70/0x70 [ 1624.565232][T24999] FAULT_INJECTION: forcing a failure. [ 1624.565232][T24999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1624.565176][T24994] new_inode_pseudo+0x38/0x1c0 [ 1624.583172][T24994] __sock_create+0x122/0x4e0 [ 1624.587760][T24994] ? should_fail+0xd6/0x250 [ 1624.592302][T24994] sock_create_kern+0x34/0x40 [ 1624.597013][T24994] io_uring_create+0x18a2/0x1bb0 [ 1624.601947][T24994] ? putname+0xb8/0xd0 [ 1624.606097][T24994] __x64_sys_io_uring_setup+0xf3/0x130 [ 1624.611557][T24994] do_syscall_64+0x44/0xa0 [ 1624.615961][T24994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.621880][T24994] RIP: 0033:0x7ff75734f709 [ 1624.626278][T24994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1624.645866][T24994] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1624.654378][T24994] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1624.662337][T24994] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1624.670302][T24994] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1624.678271][T24994] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1624.686223][T24994] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1624.694267][T24999] CPU: 0 PID: 24999 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 16:56:28 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 4) 16:56:28 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1624.694363][T24994] socket: no more sockets [ 1624.703110][T24999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.717461][T24999] Call Trace: [ 1624.720743][T24999] dump_stack_lvl+0xd6/0x122 [ 1624.724502][T25005] FAULT_INJECTION: forcing a failure. [ 1624.724502][T25005] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.725341][T24999] dump_stack+0x11/0x1b [ 1624.742156][T24999] should_fail+0x23c/0x250 [ 1624.746565][T24999] __alloc_pages+0x102/0x320 [ 1624.751223][T24999] alloc_pages+0x382/0x3d0 [ 1624.755632][T24999] __get_free_pages+0x8/0x30 [ 1624.760267][T24999] io_uring_create+0xa42/0x1bb0 [ 1624.765108][T24999] __x64_sys_io_uring_setup+0xf3/0x130 [ 1624.770619][T24999] do_syscall_64+0x44/0xa0 [ 1624.775025][T24999] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.780966][T24999] RIP: 0033:0x7fc666dd2709 [ 1624.785429][T24999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1624.805083][T24999] RSP: 002b:00007fc664b4a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1624.813477][T24999] RAX: ffffffffffffffda RBX: 00007fc666ed6f60 RCX: 00007fc666dd2709 [ 1624.821434][T24999] RDX: 0000000020ff9000 RSI: 0000000020000240 RDI: 0000000000003452 [ 1624.829403][T24999] RBP: 0000000020000240 R08: 00000000200002c0 R09: 00000000200002c0 [ 1624.837357][T24999] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200002c0 [ 1624.845321][T24999] R13: 0000000020ff9000 R14: 0000000020000080 R15: 0000000020ff7000 [ 1624.853292][T25005] CPU: 1 PID: 25005 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1624.862054][T25005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.872189][T25005] Call Trace: [ 1624.874142][T25006] FAULT_INJECTION: forcing a failure. [ 1624.874142][T25006] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.875460][T25005] dump_stack_lvl+0xd6/0x122 [ 1624.892691][T25005] dump_stack+0x11/0x1b [ 1624.896852][T25005] should_fail+0x23c/0x250 [ 1624.901273][T25005] __should_failslab+0x81/0x90 [ 1624.906028][T25005] ? selinux_sk_alloc_security+0x61/0x120 [ 1624.911733][T25005] should_failslab+0x5/0x20 [ 1624.916224][T25005] kmem_cache_alloc_trace+0x52/0x320 [ 1624.921498][T25005] ? should_fail+0xd6/0x250 [ 1624.926027][T25005] selinux_sk_alloc_security+0x61/0x120 [ 1624.931565][T25005] security_sk_alloc+0x45/0x90 [ 1624.936328][T25005] sk_prot_alloc+0xd2/0x190 [ 1624.940845][T25005] sk_alloc+0x2e/0x220 [ 1624.944901][T25005] unix_create1+0x93/0x3d0 [ 1624.949327][T25005] unix_create+0xf8/0x110 [ 1624.953748][T25005] __sock_create+0x2c7/0x4e0 [ 1624.958325][T25005] sock_create_kern+0x34/0x40 [ 1624.962995][T25005] io_uring_create+0x18a2/0x1bb0 [ 1624.968010][T25005] __x64_sys_io_uring_setup+0xf3/0x130 [ 1624.973464][T25005] do_syscall_64+0x44/0xa0 [ 1624.977984][T25005] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1624.984159][T25005] RIP: 0033:0x7fe015b40709 [ 1624.988562][T25005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.008254][T25005] RSP: 002b:00007fe013897108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1625.016662][T25005] RAX: ffffffffffffffda RBX: 00007fe015c45020 RCX: 00007fe015b40709 [ 1625.024618][T25005] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1625.032585][T25005] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1625.040715][T25005] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 16:56:29 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0) 16:56:29 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 15) [ 1625.048819][T25005] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1625.056779][T25006] CPU: 0 PID: 25006 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1625.065541][T25006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.075600][T25006] Call Trace: [ 1625.078884][T25006] dump_stack_lvl+0xd6/0x122 [ 1625.083545][T25006] dump_stack+0x11/0x1b [ 1625.087699][T25006] should_fail+0x23c/0x250 [ 1625.092120][T25006] __should_failslab+0x81/0x90 [ 1625.096912][T25006] ? io_uring_create+0x1e4/0x1bb0 16:56:29 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) (fail_nth: 8) 16:56:29 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 12) [ 1625.101994][T25006] should_failslab+0x5/0x20 [ 1625.106496][T25006] kmem_cache_alloc_trace+0x52/0x320 [ 1625.111782][T25006] ? io_uring_create+0x193/0x1bb0 [ 1625.116806][T25006] io_uring_create+0x1e4/0x1bb0 [ 1625.121727][T25006] ? vfs_write+0x61a/0x900 [ 1625.126185][T25006] __x64_sys_io_uring_setup+0xf3/0x130 [ 1625.131641][T25006] do_syscall_64+0x44/0xa0 [ 1625.136068][T25006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.141981][T25006] RIP: 0033:0x7f4120b76709 [ 1625.146424][T25006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.160028][T25015] FAULT_INJECTION: forcing a failure. [ 1625.160028][T25015] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.166032][T25006] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1625.166054][T25006] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1625.166066][T25006] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1625.166077][T25006] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1625.166087][T25006] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1625.219238][T25006] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1625.227196][T25015] CPU: 1 PID: 25015 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1625.235952][T25015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.245993][T25015] Call Trace: [ 1625.249261][T25015] dump_stack_lvl+0xd6/0x122 [ 1625.253907][T25015] dump_stack+0x11/0x1b [ 1625.258062][T25015] should_fail+0x23c/0x250 [ 1625.262553][T25015] ? security_inode_alloc+0x30/0x180 [ 1625.267835][T25015] __should_failslab+0x81/0x90 [ 1625.272596][T25015] should_failslab+0x5/0x20 [ 1625.277092][T25015] kmem_cache_alloc+0x4f/0x300 [ 1625.281852][T25015] security_inode_alloc+0x30/0x180 [ 1625.286969][T25015] inode_init_always+0x20b/0x430 [ 1625.291908][T25015] ? sockfs_init_fs_context+0x70/0x70 [ 1625.296146][T25017] FAULT_INJECTION: forcing a failure. [ 1625.296146][T25017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1625.297382][T25015] new_inode_pseudo+0x73/0x1c0 [ 1625.315124][T25015] __sock_create+0x122/0x4e0 [ 1625.319785][T25015] ? should_fail+0xd6/0x250 [ 1625.324273][T25015] sock_create_kern+0x34/0x40 [ 1625.328934][T25015] io_uring_create+0x18a2/0x1bb0 [ 1625.333883][T25015] ? putname+0xb8/0xd0 [ 1625.337935][T25015] __x64_sys_io_uring_setup+0xf3/0x130 [ 1625.343479][T25015] do_syscall_64+0x44/0xa0 [ 1625.347882][T25015] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.353834][T25015] RIP: 0033:0x7ff75734f709 [ 1625.358265][T25015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.377926][T25015] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1625.386319][T25015] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1625.394275][T25015] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c 16:56:29 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 5) 16:56:29 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1625.402225][T25015] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1625.410176][T25015] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1625.418139][T25015] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1625.426098][T25017] CPU: 0 PID: 25017 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 1625.426182][T25015] socket: no more sockets [ 1625.434858][T25017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.434870][T25017] Call Trace: [ 1625.434877][T25017] dump_stack_lvl+0xd6/0x122 [ 1625.443644][T25016] FAULT_INJECTION: forcing a failure. [ 1625.443644][T25016] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.449207][T25017] dump_stack+0x11/0x1b [ 1625.449229][T25017] should_fail+0x23c/0x250 [ 1625.478371][T25017] should_fail_usercopy+0x16/0x20 [ 1625.483448][T25017] _copy_to_user+0x1c/0x90 [ 1625.487847][T25017] simple_read_from_buffer+0xab/0x120 [ 1625.493236][T25017] proc_fail_nth_read+0x10d/0x150 [ 1625.498249][T25017] ? proc_fault_inject_write+0x230/0x230 [ 1625.503876][T25017] vfs_read+0x1e6/0x750 [ 1625.508018][T25017] ? __switch_to+0x145/0x4c0 [ 1625.512592][T25017] ? finish_task_switch+0xce/0x290 [ 1625.517686][T25017] ? __fget_light+0x21b/0x260 [ 1625.522397][T25017] ? __cond_resched+0x11/0x40 [ 1625.527105][T25017] ksys_read+0xd9/0x190 [ 1625.531249][T25017] __x64_sys_read+0x3e/0x50 [ 1625.535774][T25017] do_syscall_64+0x44/0xa0 [ 1625.540176][T25017] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.546064][T25017] RIP: 0033:0x7fc666d8548c [ 1625.550466][T25017] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1625.570140][T25017] RSP: 002b:00007fc664b4a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1625.578531][T25017] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fc666d8548c [ 1625.586490][T25017] RDX: 000000000000000f RSI: 00007fc664b4a1e0 RDI: 0000000000000004 [ 1625.594443][T25017] RBP: 00007fc664b4a1d0 R08: 0000000000000000 R09: 0000000010000000 [ 1625.602437][T25017] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1625.610485][T25017] R13: 00007fff64e318ef R14: 00007fc664b4a300 R15: 0000000000022000 [ 1625.618540][T25016] CPU: 1 PID: 25016 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1625.627326][T25016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.637435][T25016] Call Trace: [ 1625.640704][T25016] dump_stack_lvl+0xd6/0x122 [ 1625.645296][T25016] dump_stack+0x11/0x1b [ 1625.649454][T25016] should_fail+0x23c/0x250 [ 1625.653868][T25016] __should_failslab+0x81/0x90 [ 1625.658625][T25016] ? selinux_sk_alloc_security+0x61/0x120 [ 1625.664340][T25016] should_failslab+0x5/0x20 [ 1625.668839][T25016] kmem_cache_alloc_trace+0x52/0x320 [ 1625.674171][T25016] ? should_fail+0xd6/0x250 [ 1625.678667][T25016] selinux_sk_alloc_security+0x61/0x120 [ 1625.684319][T25016] security_sk_alloc+0x45/0x90 [ 1625.689076][T25016] sk_prot_alloc+0xd2/0x190 [ 1625.693678][T25016] sk_alloc+0x2e/0x220 [ 1625.697742][T25016] unix_create1+0x93/0x3d0 [ 1625.702159][T25016] unix_create+0xf8/0x110 16:56:29 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:29 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 13) 16:56:29 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1625.706632][T25016] __sock_create+0x2c7/0x4e0 [ 1625.711224][T25016] sock_create_kern+0x34/0x40 [ 1625.715902][T25016] io_uring_create+0x18a2/0x1bb0 [ 1625.720873][T25016] __x64_sys_io_uring_setup+0xf3/0x130 [ 1625.726330][T25016] do_syscall_64+0x44/0xa0 [ 1625.730825][T25016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.736787][T25016] RIP: 0033:0x7fe015b40709 [ 1625.741282][T25016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.742547][T25035] FAULT_INJECTION: forcing a failure. [ 1625.742547][T25035] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.760900][T25016] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1625.760922][T25016] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1625.760933][T25016] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1625.797951][T25016] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1625.805902][T25016] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1625.813857][T25016] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1625.821815][T25035] CPU: 0 PID: 25035 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1625.830620][T25035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.840679][T25035] Call Trace: [ 1625.841725][T25033] FAULT_INJECTION: forcing a failure. [ 1625.841725][T25033] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.843950][T25035] dump_stack_lvl+0xd6/0x122 [ 1625.861082][T25035] dump_stack+0x11/0x1b [ 1625.865225][T25035] should_fail+0x23c/0x250 [ 1625.869626][T25035] ? sk_prot_alloc+0x41/0x190 [ 1625.874340][T25035] __should_failslab+0x81/0x90 [ 1625.879087][T25035] should_failslab+0x5/0x20 [ 1625.883575][T25035] kmem_cache_alloc+0x4f/0x300 [ 1625.888321][T25035] sk_prot_alloc+0x41/0x190 [ 1625.892809][T25035] sk_alloc+0x2e/0x220 [ 1625.896910][T25035] unix_create1+0x93/0x3d0 [ 1625.901370][T25035] unix_create+0xf8/0x110 [ 1625.905685][T25035] __sock_create+0x2c7/0x4e0 [ 1625.910260][T25035] sock_create_kern+0x34/0x40 [ 1625.914921][T25035] io_uring_create+0x18a2/0x1bb0 [ 1625.919848][T25035] ? putname+0xb8/0xd0 [ 1625.924032][T25035] __x64_sys_io_uring_setup+0xf3/0x130 [ 1625.929474][T25035] do_syscall_64+0x44/0xa0 [ 1625.933876][T25035] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.939756][T25035] RIP: 0033:0x7ff75734f709 [ 1625.944166][T25035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.963804][T25035] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1625.972197][T25035] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1625.980161][T25035] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1625.988114][T25035] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1625.996068][T25035] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1626.004051][T25035] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1626.012009][T25033] CPU: 1 PID: 25033 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1626.020799][T25033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.030856][T25033] Call Trace: [ 1626.034128][T25033] dump_stack_lvl+0xd6/0x122 [ 1626.038720][T25033] dump_stack+0x11/0x1b [ 1626.042876][T25033] should_fail+0x23c/0x250 [ 1626.047298][T25033] ? io_uring_create+0x1bb0/0x1bb0 [ 1626.052410][T25033] __should_failslab+0x81/0x90 16:56:30 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:30 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 16) 16:56:30 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 14) [ 1626.057167][T25033] ? percpu_ref_init+0x96/0x250 [ 1626.062011][T25033] should_failslab+0x5/0x20 [ 1626.066581][T25033] kmem_cache_alloc_trace+0x52/0x320 [ 1626.071868][T25033] ? io_uring_create+0x1bb0/0x1bb0 [ 1626.076971][T25033] percpu_ref_init+0x96/0x250 [ 1626.081648][T25033] io_uring_create+0x22b/0x1bb0 [ 1626.086507][T25033] ? vfs_write+0x61a/0x900 [ 1626.090972][T25033] __x64_sys_io_uring_setup+0xf3/0x130 [ 1626.096429][T25033] do_syscall_64+0x44/0xa0 [ 1626.100847][T25033] entry_SYSCALL_64_after_hwframe+0x44/0xae 16:56:30 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) 16:56:30 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1626.106797][T25033] RIP: 0033:0x7f4120b76709 [ 1626.111217][T25033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.130953][T25033] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1626.139357][T25033] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1626.147340][T25033] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1626.155315][T25033] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1626.160897][T25047] FAULT_INJECTION: forcing a failure. [ 1626.160897][T25047] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.163277][T25033] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1626.163293][T25033] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1626.191894][T25047] CPU: 0 PID: 25047 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1626.200681][T25047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.208978][T25048] FAULT_INJECTION: forcing a failure. [ 1626.208978][T25048] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.210808][T25047] Call Trace: [ 1626.210817][T25047] dump_stack_lvl+0xd6/0x122 [ 1626.231263][T25047] dump_stack+0x11/0x1b [ 1626.235414][T25047] should_fail+0x23c/0x250 [ 1626.239814][T25047] ? __d_alloc+0x36/0x370 [ 1626.244150][T25047] __should_failslab+0x81/0x90 [ 1626.248928][T25047] should_failslab+0x5/0x20 [ 1626.253450][T25047] kmem_cache_alloc+0x4f/0x300 [ 1626.258272][T25047] __d_alloc+0x36/0x370 [ 1626.262411][T25047] d_alloc_pseudo+0x1a/0x50 [ 1626.266938][T25047] alloc_file_pseudo+0x77/0x150 [ 1626.271782][T25047] anon_inode_getfile+0x9f/0x120 [ 1626.276736][T25047] io_uring_create+0x18f8/0x1bb0 [ 1626.281749][T25047] ? putname+0xb8/0xd0 [ 1626.285808][T25047] __x64_sys_io_uring_setup+0xf3/0x130 [ 1626.291324][T25047] do_syscall_64+0x44/0xa0 [ 1626.295725][T25047] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.301659][T25047] RIP: 0033:0x7fe015b40709 [ 1626.306062][T25047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.325947][T25047] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1626.334366][T25047] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1626.342334][T25047] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1626.350291][T25047] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 16:56:30 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x0, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1626.358347][T25047] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1626.366395][T25047] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1626.374357][T25048] CPU: 1 PID: 25048 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1626.383120][T25048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.393175][T25048] Call Trace: [ 1626.396451][T25048] dump_stack_lvl+0xd6/0x122 [ 1626.401063][T25048] dump_stack+0x11/0x1b [ 1626.405216][T25048] should_fail+0x23c/0x250 16:56:30 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x2, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:30 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 6) 16:56:30 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 17) [ 1626.409625][T25048] __should_failslab+0x81/0x90 [ 1626.414399][T25048] ? selinux_sk_alloc_security+0x61/0x120 [ 1626.420185][T25048] should_failslab+0x5/0x20 [ 1626.424686][T25048] kmem_cache_alloc_trace+0x52/0x320 [ 1626.429970][T25048] ? should_fail+0xd6/0x250 [ 1626.434471][T25048] selinux_sk_alloc_security+0x61/0x120 [ 1626.440064][T25048] security_sk_alloc+0x45/0x90 [ 1626.444834][T25048] sk_prot_alloc+0xd2/0x190 [ 1626.449397][T25048] sk_alloc+0x2e/0x220 [ 1626.453460][T25048] unix_create1+0x93/0x3d0 16:56:30 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x7, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1626.457916][T25048] unix_create+0xf8/0x110 [ 1626.462245][T25048] __sock_create+0x2c7/0x4e0 [ 1626.466835][T25048] sock_create_kern+0x34/0x40 [ 1626.471512][T25048] io_uring_create+0x18a2/0x1bb0 [ 1626.476455][T25048] ? putname+0xb8/0xd0 [ 1626.480525][T25048] __x64_sys_io_uring_setup+0xf3/0x130 [ 1626.485987][T25048] do_syscall_64+0x44/0xa0 [ 1626.490409][T25048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.496345][T25048] RIP: 0033:0x7ff75734f709 [ 1626.500753][T25048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.511401][T25074] FAULT_INJECTION: forcing a failure. [ 1626.511401][T25074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1626.520359][T25048] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1626.520381][T25048] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1626.520391][T25048] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1626.520403][T25048] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1626.565856][T25048] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1626.573817][T25048] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1626.581780][T25074] CPU: 0 PID: 25074 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1626.590608][T25074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.600760][T25074] Call Trace: [ 1626.604035][T25074] dump_stack_lvl+0xd6/0x122 [ 1626.608667][T25074] dump_stack+0x11/0x1b [ 1626.609321][T25073] FAULT_INJECTION: forcing a failure. [ 1626.609321][T25073] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.612878][T25074] should_fail+0x23c/0x250 [ 1626.629885][T25074] __alloc_pages+0x102/0x320 [ 1626.634478][T25074] alloc_pages+0x382/0x3d0 [ 1626.638947][T25074] __get_free_pages+0x8/0x30 [ 1626.643532][T25074] io_uring_create+0x949/0x1bb0 [ 1626.648383][T25074] __x64_sys_io_uring_setup+0xf3/0x130 [ 1626.653902][T25074] do_syscall_64+0x44/0xa0 [ 1626.658312][T25074] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.664236][T25074] RIP: 0033:0x7f4120b76709 [ 1626.668640][T25074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.688234][T25074] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1626.696627][T25074] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1626.704592][T25074] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1626.712543][T25074] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1626.720554][T25074] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1626.728526][T25074] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1626.736526][T25073] CPU: 1 PID: 25073 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1626.745284][T25073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.755399][T25073] Call Trace: 16:56:30 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 15) 16:56:30 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 7) 16:56:30 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x0, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1626.758665][T25073] dump_stack_lvl+0xd6/0x122 [ 1626.763274][T25073] dump_stack+0x11/0x1b [ 1626.767422][T25073] should_fail+0x23c/0x250 [ 1626.771833][T25073] ? security_file_alloc+0x30/0x190 [ 1626.777029][T25073] __should_failslab+0x81/0x90 [ 1626.781835][T25073] should_failslab+0x5/0x20 [ 1626.786346][T25073] kmem_cache_alloc+0x4f/0x300 [ 1626.791109][T25073] security_file_alloc+0x30/0x190 [ 1626.796131][T25073] __alloc_file+0x83/0x1a0 [ 1626.800626][T25073] alloc_empty_file+0xcd/0x1c0 [ 1626.805387][T25073] alloc_file+0x3a/0x280 16:56:30 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x118, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1626.809666][T25073] alloc_file_pseudo+0xfa/0x150 [ 1626.814535][T25073] anon_inode_getfile+0x9f/0x120 [ 1626.819544][T25073] io_uring_create+0x18f8/0x1bb0 [ 1626.824492][T25073] ? putname+0xb8/0xd0 [ 1626.828584][T25073] __x64_sys_io_uring_setup+0xf3/0x130 [ 1626.834049][T25073] do_syscall_64+0x44/0xa0 [ 1626.838487][T25073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1626.842491][T25085] FAULT_INJECTION: forcing a failure. [ 1626.842491][T25085] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.844386][T25073] RIP: 0033:0x7fe015b40709 [ 1626.844403][T25073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.881306][T25073] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1626.889775][T25073] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1626.897830][T25073] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1626.905931][T25073] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1626.913929][T25073] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1626.921891][T25073] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1626.929871][T25085] CPU: 0 PID: 25085 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1626.938715][T25085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.948764][T25085] Call Trace: [ 1626.952053][T25085] dump_stack_lvl+0xd6/0x122 [ 1626.956645][T25085] dump_stack+0x11/0x1b [ 1626.960834][T25085] should_fail+0x23c/0x250 [ 1626.965257][T25085] ? __d_alloc+0x36/0x370 [ 1626.969613][T25085] __should_failslab+0x81/0x90 [ 1626.974414][T25085] should_failslab+0x5/0x20 [ 1626.978914][T25085] kmem_cache_alloc+0x4f/0x300 [ 1626.983668][T25085] __d_alloc+0x36/0x370 [ 1626.987838][T25085] d_alloc_pseudo+0x1a/0x50 [ 1626.992545][T25085] alloc_file_pseudo+0x77/0x150 [ 1626.997415][T25085] anon_inode_getfile+0x9f/0x120 [ 1627.002441][T25085] io_uring_create+0x18f8/0x1bb0 [ 1627.007383][T25085] ? putname+0xb8/0xd0 [ 1627.011458][T25085] __x64_sys_io_uring_setup+0xf3/0x130 [ 1627.016917][T25085] do_syscall_64+0x44/0xa0 [ 1627.021378][T25085] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1627.027282][T25085] RIP: 0033:0x7ff75734f709 [ 1627.031691][T25085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.036837][T25090] FAULT_INJECTION: forcing a failure. 16:56:31 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 18) [ 1627.036837][T25090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1627.051743][T25085] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1627.051767][T25085] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1627.051777][T25085] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1627.051788][T25085] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1627.097164][T25085] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1627.105119][T25085] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1627.113077][T25090] CPU: 1 PID: 25090 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1627.121841][T25090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.131920][T25090] Call Trace: [ 1627.135193][T25090] dump_stack_lvl+0xd6/0x122 [ 1627.139840][T25090] dump_stack+0x11/0x1b [ 1627.144038][T25090] should_fail+0x23c/0x250 [ 1627.148447][T25090] __alloc_pages+0x102/0x320 [ 1627.153023][T25090] alloc_pages+0x382/0x3d0 [ 1627.157426][T25090] __get_free_pages+0x8/0x30 [ 1627.162001][T25090] io_uring_create+0xa42/0x1bb0 [ 1627.166837][T25090] __x64_sys_io_uring_setup+0xf3/0x130 [ 1627.172277][T25090] do_syscall_64+0x44/0xa0 [ 1627.176722][T25090] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1627.182623][T25090] RIP: 0033:0x7f4120b76709 [ 1627.187017][T25090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.206608][T25090] RSP: 002b:00007f411e8cd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1627.215000][T25090] RAX: ffffffffffffffda RBX: 00007f4120c7b020 RCX: 00007f4120b76709 [ 1627.222954][T25090] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1627.230916][T25090] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1627.238984][T25090] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1627.246949][T25090] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1627.266912][T25096] FAULT_INJECTION: forcing a failure. [ 1627.266912][T25096] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.279570][T25096] CPU: 0 PID: 25096 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1627.288406][T25096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.298452][T25096] Call Trace: [ 1627.301732][T25096] dump_stack_lvl+0xd6/0x122 [ 1627.306367][T25096] dump_stack+0x11/0x1b [ 1627.310536][T25096] should_fail+0x23c/0x250 16:56:31 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 16:56:31 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x204, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:31 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x0, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:31 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 16) 16:56:31 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 8) [ 1627.314956][T25096] __should_failslab+0x81/0x90 [ 1627.319770][T25096] ? io_uring_add_tctx_node+0xdc/0x200 [ 1627.325319][T25096] should_failslab+0x5/0x20 [ 1627.329818][T25096] kmem_cache_alloc_trace+0x52/0x320 [ 1627.335097][T25096] ? xa_load+0x249/0x260 [ 1627.339421][T25096] io_uring_add_tctx_node+0xdc/0x200 [ 1627.344734][T25096] io_uring_create+0x19f2/0x1bb0 [ 1627.349744][T25096] ? putname+0xb8/0xd0 [ 1627.353816][T25096] __x64_sys_io_uring_setup+0xf3/0x130 [ 1627.354923][T25104] FAULT_INJECTION: forcing a failure. [ 1627.354923][T25104] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.359271][T25096] do_syscall_64+0x44/0xa0 [ 1627.376286][T25096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1627.382233][T25096] RIP: 0033:0x7fe015b40709 [ 1627.386630][T25096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.406316][T25096] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1627.415056][T25096] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1627.423010][T25096] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1627.430966][T25096] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1627.438918][T25096] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1627.446870][T25096] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1627.454835][T25104] CPU: 1 PID: 25104 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1627.463594][T25104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.473709][T25104] Call Trace: [ 1627.476981][T25104] dump_stack_lvl+0xd6/0x122 [ 1627.481573][T25104] dump_stack+0x11/0x1b [ 1627.485727][T25104] should_fail+0x23c/0x250 [ 1627.490137][T25104] ? __alloc_file+0x2e/0x1a0 [ 1627.493893][T25109] FAULT_INJECTION: forcing a failure. [ 1627.493893][T25109] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.494720][T25104] __should_failslab+0x81/0x90 [ 1627.494743][T25104] should_failslab+0x5/0x20 [ 1627.494763][T25104] kmem_cache_alloc+0x4f/0x300 [ 1627.494779][T25104] __alloc_file+0x2e/0x1a0 [ 1627.525691][T25104] alloc_empty_file+0xcd/0x1c0 [ 1627.530445][T25104] alloc_file+0x3a/0x280 [ 1627.534730][T25104] alloc_file_pseudo+0xfa/0x150 [ 1627.539595][T25104] anon_inode_getfile+0x9f/0x120 [ 1627.544523][T25104] io_uring_create+0x18f8/0x1bb0 [ 1627.549495][T25104] ? putname+0xb8/0xd0 [ 1627.553583][T25104] __x64_sys_io_uring_setup+0xf3/0x130 [ 1627.559059][T25104] do_syscall_64+0x44/0xa0 [ 1627.563520][T25104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1627.569402][T25104] RIP: 0033:0x7ff75734f709 [ 1627.573798][T25104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.593476][T25104] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1627.601869][T25104] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1627.609826][T25104] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c 16:56:31 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1627.617928][T25104] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1627.625961][T25104] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1627.633913][T25104] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1627.641866][T25109] CPU: 0 PID: 25109 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1627.650629][T25109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.660677][T25109] Call Trace: [ 1627.664139][T25109] dump_stack_lvl+0xd6/0x122 16:56:31 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 17) 16:56:31 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x402, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1627.668742][T25109] dump_stack+0x11/0x1b [ 1627.673001][T25109] should_fail+0x23c/0x250 [ 1627.677454][T25109] __should_failslab+0x81/0x90 [ 1627.682211][T25109] ? io_uring_create+0x16a6/0x1bb0 [ 1627.687321][T25109] should_failslab+0x5/0x20 [ 1627.691830][T25109] kmem_cache_alloc_trace+0x52/0x320 [ 1627.697113][T25109] ? alloc_pages+0x382/0x3d0 [ 1627.701766][T25109] io_uring_create+0x16a6/0x1bb0 [ 1627.706708][T25109] __x64_sys_io_uring_setup+0xf3/0x130 [ 1627.712172][T25109] do_syscall_64+0x44/0xa0 16:56:31 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 19) 16:56:31 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1627.716596][T25109] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1627.722521][T25109] RIP: 0033:0x7f4120b76709 [ 1627.726931][T25109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.746620][T25109] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1627.755030][T25109] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 16:56:31 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x406, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1627.763002][T25109] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1627.771076][T25109] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1627.779226][T25109] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1627.787215][T25109] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1627.813733][T25119] FAULT_INJECTION: forcing a failure. 16:56:31 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x604, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1627.813733][T25119] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.826387][T25119] CPU: 0 PID: 25119 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1627.835156][T25119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.845305][T25119] Call Trace: [ 1627.848579][T25119] dump_stack_lvl+0xd6/0x122 [ 1627.853198][T25119] dump_stack+0x11/0x1b [ 1627.857446][T25119] should_fail+0x23c/0x250 [ 1627.861858][T25119] ? security_file_alloc+0x30/0x190 [ 1627.867087][T25119] __should_failslab+0x81/0x90 [ 1627.871853][T25119] should_failslab+0x5/0x20 [ 1627.876354][T25119] kmem_cache_alloc+0x4f/0x300 [ 1627.881160][T25119] security_file_alloc+0x30/0x190 [ 1627.886187][T25119] __alloc_file+0x83/0x1a0 [ 1627.890615][T25119] alloc_empty_file+0xcd/0x1c0 [ 1627.893413][T25130] FAULT_INJECTION: forcing a failure. [ 1627.893413][T25130] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.895521][T25119] alloc_file+0x3a/0x280 [ 1627.895548][T25119] alloc_file_pseudo+0xfa/0x150 [ 1627.895610][T25119] anon_inode_getfile+0x9f/0x120 [ 1627.922250][T25119] io_uring_create+0x18f8/0x1bb0 [ 1627.927273][T25119] ? putname+0xb8/0xd0 [ 1627.931370][T25119] __x64_sys_io_uring_setup+0xf3/0x130 [ 1627.936899][T25119] do_syscall_64+0x44/0xa0 [ 1627.941302][T25119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1627.947255][T25119] RIP: 0033:0x7ff75734f709 [ 1627.951696][T25119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.971280][T25119] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1627.979670][T25119] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1627.987635][T25119] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1627.995658][T25119] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1628.003626][T25119] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1628.011588][T25119] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1628.019646][T25130] CPU: 1 PID: 25130 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1628.028557][T25130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.038639][T25130] Call Trace: [ 1628.041923][T25130] dump_stack_lvl+0xd6/0x122 [ 1628.046537][T25130] dump_stack+0x11/0x1b [ 1628.050759][T25130] should_fail+0x23c/0x250 [ 1628.055189][T25130] ? xas_create+0x96b/0xb30 [ 1628.059701][T25130] __should_failslab+0x81/0x90 [ 1628.064460][T25130] should_failslab+0x5/0x20 [ 1628.068970][T25130] kmem_cache_alloc+0x4f/0x300 [ 1628.073734][T25130] ? should_fail+0xd6/0x250 [ 1628.078229][T25130] xas_create+0x96b/0xb30 [ 1628.082647][T25130] xas_store+0x70/0xca0 [ 1628.086856][T25130] ? selinux_file_alloc_security+0x9c/0xb0 [ 1628.092695][T25130] ? security_file_alloc+0x12e/0x190 [ 1628.097970][T25130] ? percpu_counter_add_batch+0x69/0xd0 [ 1628.103537][T25130] __xa_store+0xdb/0x330 [ 1628.107756][T25130] xa_store+0x30/0x70 [ 1628.111733][T25130] io_uring_add_tctx_node+0x111/0x200 [ 1628.117114][T25130] io_uring_create+0x19f2/0x1bb0 [ 1628.122038][T25130] ? putname+0xb8/0xd0 [ 1628.126156][T25130] __x64_sys_io_uring_setup+0xf3/0x130 [ 1628.131622][T25130] do_syscall_64+0x44/0xa0 [ 1628.136077][T25130] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1628.142128][T25130] RIP: 0033:0x7fe015b40709 [ 1628.146520][T25130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.166100][T25130] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1628.174488][T25130] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1628.182443][T25130] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1628.190388][T25130] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1628.198334][T25130] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1628.206285][T25130] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:32 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0) 16:56:32 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 9) 16:56:32 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x700, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:32 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:32 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 18) 16:56:32 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 20) [ 1628.330818][T25141] FAULT_INJECTION: forcing a failure. [ 1628.330818][T25141] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.343474][T25141] CPU: 1 PID: 25141 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1628.352267][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.362317][T25141] Call Trace: [ 1628.365596][T25141] dump_stack_lvl+0xd6/0x122 [ 1628.370211][T25141] dump_stack+0x11/0x1b [ 1628.374496][T25141] should_fail+0x23c/0x250 [ 1628.378908][T25141] ? kzalloc+0x30/0x30 [ 1628.383039][T25141] __should_failslab+0x81/0x90 [ 1628.387797][T25141] ? percpu_ref_init+0x96/0x250 [ 1628.392678][T25141] should_failslab+0x5/0x20 [ 1628.397181][T25141] kmem_cache_alloc_trace+0x52/0x320 [ 1628.402464][T25141] ? kzalloc+0x30/0x30 [ 1628.406570][T25141] percpu_ref_init+0x96/0x250 [ 1628.407188][T25153] FAULT_INJECTION: forcing a failure. [ 1628.407188][T25153] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.411251][T25141] io_uring_create+0x16c8/0x1bb0 [ 1628.411278][T25141] __x64_sys_io_uring_setup+0xf3/0x130 [ 1628.434335][T25141] do_syscall_64+0x44/0xa0 [ 1628.438742][T25141] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1628.444665][T25141] RIP: 0033:0x7f4120b76709 [ 1628.449154][T25141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.468769][T25141] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 16:56:32 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x1801, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1628.477183][T25141] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1628.485218][T25141] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1628.493180][T25141] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1628.501146][T25141] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1628.509101][T25141] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1628.517070][T25153] CPU: 0 PID: 25153 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1628.525833][T25153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.535892][T25153] Call Trace: [ 1628.539169][T25153] dump_stack_lvl+0xd6/0x122 [ 1628.542839][T25152] FAULT_INJECTION: forcing a failure. [ 1628.542839][T25152] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.543841][T25153] dump_stack+0x11/0x1b [ 1628.543864][T25153] should_fail+0x23c/0x250 [ 1628.564934][T25153] ? xas_create+0x96b/0xb30 [ 1628.569430][T25153] __should_failslab+0x81/0x90 [ 1628.574195][T25153] should_failslab+0x5/0x20 [ 1628.578696][T25153] kmem_cache_alloc+0x4f/0x300 [ 1628.583452][T25153] ? xas_create+0x96b/0xb30 [ 1628.587944][T25153] xas_create+0x96b/0xb30 [ 1628.592257][T25153] xas_store+0x70/0xca0 [ 1628.596422][T25153] ? selinux_file_alloc_security+0x9c/0xb0 [ 1628.602226][T25153] ? security_file_alloc+0x12e/0x190 [ 1628.607508][T25153] ? percpu_counter_add_batch+0x69/0xd0 [ 1628.613038][T25153] __xa_store+0xdb/0x330 [ 1628.617353][T25153] xa_store+0x30/0x70 [ 1628.621392][T25153] io_uring_add_tctx_node+0x111/0x200 [ 1628.626760][T25153] io_uring_create+0x19f2/0x1bb0 [ 1628.631698][T25153] ? putname+0xb8/0xd0 [ 1628.635751][T25153] __x64_sys_io_uring_setup+0xf3/0x130 [ 1628.641196][T25153] do_syscall_64+0x44/0xa0 [ 1628.645666][T25153] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1628.651587][T25153] RIP: 0033:0x7fe015b40709 [ 1628.655981][T25153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.675568][T25153] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1628.683965][T25153] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1628.691916][T25153] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1628.699881][T25153] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1628.707872][T25153] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1628.715926][T25153] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1628.723882][T25152] CPU: 1 PID: 25152 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 16:56:32 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 10) [ 1628.732645][T25152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.742688][T25152] Call Trace: [ 1628.745957][T25152] dump_stack_lvl+0xd6/0x122 [ 1628.750546][T25152] dump_stack+0x11/0x1b [ 1628.754696][T25152] should_fail+0x23c/0x250 [ 1628.759109][T25152] __should_failslab+0x81/0x90 [ 1628.763870][T25152] ? io_uring_add_tctx_node+0xdc/0x200 [ 1628.769331][T25152] should_failslab+0x5/0x20 [ 1628.769618][T25159] FAULT_INJECTION: forcing a failure. [ 1628.769618][T25159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.773981][T25152] kmem_cache_alloc_trace+0x52/0x320 [ 1628.774004][T25152] ? xa_load+0x249/0x260 [ 1628.796566][T25152] io_uring_add_tctx_node+0xdc/0x200 [ 1628.801862][T25152] io_uring_create+0x19f2/0x1bb0 [ 1628.806791][T25152] ? putname+0xb8/0xd0 [ 1628.810857][T25152] __x64_sys_io_uring_setup+0xf3/0x130 [ 1628.816304][T25152] do_syscall_64+0x44/0xa0 [ 1628.820719][T25152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1628.826603][T25152] RIP: 0033:0x7ff75734f709 [ 1628.830997][T25152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.850590][T25152] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1628.858982][T25152] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1628.866934][T25152] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1628.874885][T25152] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1628.882846][T25152] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1628.890801][T25152] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1628.898759][T25159] CPU: 0 PID: 25159 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1628.907529][T25159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.917574][T25159] Call Trace: [ 1628.920845][T25159] dump_stack_lvl+0xd6/0x122 [ 1628.925443][T25159] dump_stack+0x11/0x1b [ 1628.929593][T25159] should_fail+0x23c/0x250 [ 1628.934009][T25159] should_fail_usercopy+0x16/0x20 [ 1628.939113][T25159] _copy_to_user+0x1c/0x90 [ 1628.943536][T25159] io_uring_create+0x1859/0x1bb0 [ 1628.948518][T25159] __x64_sys_io_uring_setup+0xf3/0x130 [ 1628.953994][T25159] do_syscall_64+0x44/0xa0 [ 1628.958477][T25159] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1628.964443][T25159] RIP: 0033:0x7f4120b76709 16:56:33 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 19) 16:56:33 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:33 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x4000, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:33 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 21) [ 1628.968852][T25159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.988468][T25159] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1628.996961][T25159] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1629.004931][T25159] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1629.012917][T25159] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1629.020887][T25159] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1629.028864][T25159] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1629.053165][T25172] FAULT_INJECTION: forcing a failure. [ 1629.053165][T25172] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.059282][T25168] FAULT_INJECTION: forcing a failure. [ 1629.059282][T25168] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.065944][T25172] CPU: 0 PID: 25172 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1629.087216][T25172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.097256][T25172] Call Trace: [ 1629.100518][T25172] dump_stack_lvl+0xd6/0x122 [ 1629.105100][T25172] dump_stack+0x11/0x1b [ 1629.109236][T25172] should_fail+0x23c/0x250 [ 1629.113701][T25172] ? xas_create+0x96b/0xb30 [ 1629.118265][T25172] __should_failslab+0x81/0x90 [ 1629.123010][T25172] should_failslab+0x5/0x20 [ 1629.127496][T25172] kmem_cache_alloc+0x4f/0x300 [ 1629.132362][T25172] ? xas_create+0x96b/0xb30 [ 1629.136889][T25172] xas_create+0x96b/0xb30 [ 1629.141202][T25172] xas_store+0x70/0xca0 [ 1629.145382][T25172] ? selinux_file_alloc_security+0x9c/0xb0 [ 1629.151225][T25172] ? security_file_alloc+0x12e/0x190 [ 1629.156499][T25172] ? percpu_counter_add_batch+0x69/0xd0 [ 1629.162090][T25172] __xa_store+0xdb/0x330 [ 1629.166317][T25172] xa_store+0x30/0x70 [ 1629.170325][T25172] io_uring_add_tctx_node+0x111/0x200 [ 1629.175797][T25172] io_uring_create+0x19f2/0x1bb0 [ 1629.180808][T25172] ? putname+0xb8/0xd0 [ 1629.184903][T25172] __x64_sys_io_uring_setup+0xf3/0x130 [ 1629.190346][T25172] do_syscall_64+0x44/0xa0 [ 1629.194751][T25172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1629.200640][T25172] RIP: 0033:0x7fe015b40709 [ 1629.205055][T25172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.224718][T25172] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1629.233110][T25172] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1629.241139][T25172] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1629.249109][T25172] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1629.257061][T25172] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1629.265012][T25172] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1629.273075][T25168] CPU: 1 PID: 25168 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 1629.281834][T25168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.291977][T25168] Call Trace: [ 1629.295242][T25168] dump_stack_lvl+0xd6/0x122 [ 1629.299886][T25168] dump_stack+0x11/0x1b [ 1629.304034][T25168] should_fail+0x23c/0x250 [ 1629.308442][T25168] ? xas_create+0x96b/0xb30 [ 1629.313065][T25168] __should_failslab+0x81/0x90 [ 1629.317825][T25168] should_failslab+0x5/0x20 [ 1629.322335][T25168] kmem_cache_alloc+0x4f/0x300 [ 1629.327099][T25168] ? should_fail+0xd6/0x250 16:56:33 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0) 16:56:33 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x1000000, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:33 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 11) 16:56:33 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 22) 16:56:33 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1629.331602][T25168] xas_create+0x96b/0xb30 [ 1629.335933][T25168] xas_store+0x70/0xca0 [ 1629.340084][T25168] ? selinux_file_alloc_security+0x9c/0xb0 [ 1629.345886][T25168] ? security_file_alloc+0x12e/0x190 [ 1629.351202][T25168] ? percpu_counter_add_batch+0x69/0xd0 [ 1629.356741][T25168] __xa_store+0xdb/0x330 [ 1629.360977][T25168] xa_store+0x30/0x70 [ 1629.364954][T25168] io_uring_add_tctx_node+0x111/0x200 [ 1629.370407][T25168] io_uring_create+0x19f2/0x1bb0 [ 1629.375432][T25168] ? putname+0xb8/0xd0 [ 1629.379555][T25168] __x64_sys_io_uring_setup+0xf3/0x130 16:56:33 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1629.385047][T25168] do_syscall_64+0x44/0xa0 [ 1629.389488][T25168] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1629.395649][T25168] RIP: 0033:0x7ff75734f709 [ 1629.400060][T25168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.419660][T25168] RSP: 002b:00007ff7550c7108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1629.428071][T25168] RAX: ffffffffffffffda RBX: 00007ff757453f60 RCX: 00007ff75734f709 [ 1629.434347][T25188] FAULT_INJECTION: forcing a failure. [ 1629.434347][T25188] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.436038][T25168] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1629.436054][T25168] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1629.436067][T25168] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1629.472490][T25168] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1629.480450][T25188] CPU: 0 PID: 25188 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1629.489305][T25188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.498103][T25187] FAULT_INJECTION: forcing a failure. [ 1629.498103][T25187] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.499360][T25188] Call Trace: [ 1629.499369][T25188] dump_stack_lvl+0xd6/0x122 [ 1629.499391][T25188] dump_stack+0x11/0x1b [ 1629.523890][T25188] should_fail+0x23c/0x250 [ 1629.528361][T25188] ? xas_create+0x96b/0xb30 [ 1629.532851][T25188] __should_failslab+0x81/0x90 [ 1629.537596][T25188] should_failslab+0x5/0x20 [ 1629.542161][T25188] kmem_cache_alloc+0x4f/0x300 [ 1629.546939][T25188] ? xas_create+0x96b/0xb30 [ 1629.551427][T25188] xas_create+0x96b/0xb30 [ 1629.555822][T25188] xas_store+0x70/0xca0 [ 1629.560006][T25188] ? selinux_file_alloc_security+0x9c/0xb0 [ 1629.565858][T25188] ? security_file_alloc+0x12e/0x190 [ 1629.571160][T25188] ? percpu_counter_add_batch+0x69/0xd0 [ 1629.576702][T25188] __xa_store+0xdb/0x330 [ 1629.580972][T25188] xa_store+0x30/0x70 [ 1629.584990][T25188] io_uring_add_tctx_node+0x111/0x200 [ 1629.590388][T25188] io_uring_create+0x19f2/0x1bb0 [ 1629.595327][T25188] ? putname+0xb8/0xd0 [ 1629.599405][T25188] __x64_sys_io_uring_setup+0xf3/0x130 [ 1629.604884][T25188] do_syscall_64+0x44/0xa0 [ 1629.609306][T25188] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1629.615280][T25188] RIP: 0033:0x7fe015b40709 [ 1629.619738][T25188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.639351][T25188] RSP: 002b:00007fe0138b8108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1629.647745][T25188] RAX: ffffffffffffffda RBX: 00007fe015c44f60 RCX: 00007fe015b40709 [ 1629.655729][T25188] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 000000000000411c [ 1629.663680][T25188] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 1629.671645][T25188] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 1629.679608][T25188] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1629.687564][T25187] CPU: 1 PID: 25187 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1629.696334][T25187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1629.706374][T25187] Call Trace: [ 1629.709643][T25187] dump_stack_lvl+0xd6/0x122 [ 1629.714218][T25187] dump_stack+0x11/0x1b [ 1629.718356][T25187] should_fail+0x23c/0x250 [ 1629.722754][T25187] ? sock_alloc_inode+0x23/0x90 [ 1629.727646][T25187] __should_failslab+0x81/0x90 [ 1629.732392][T25187] ? sockfs_init_fs_context+0x70/0x70 [ 1629.737759][T25187] should_failslab+0x5/0x20 [ 1629.742346][T25187] kmem_cache_alloc+0x4f/0x300 [ 1629.747158][T25187] ? sockfs_init_fs_context+0x70/0x70 [ 1629.752515][T25187] sock_alloc_inode+0x23/0x90 [ 1629.757298][T25187] ? sockfs_init_fs_context+0x70/0x70 [ 1629.762659][T25187] new_inode_pseudo+0x38/0x1c0 [ 1629.767423][T25187] __sock_create+0x122/0x4e0 [ 1629.772004][T25187] ? should_fail+0xd6/0x250 [ 1629.776525][T25187] sock_create_kern+0x34/0x40 [ 1629.781427][T25187] io_uring_create+0x18a2/0x1bb0 [ 1629.786360][T25187] __x64_sys_io_uring_setup+0xf3/0x130 [ 1629.791817][T25187] do_syscall_64+0x44/0xa0 [ 1629.796229][T25187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1629.802111][T25187] RIP: 0033:0x7f4120b76709 [ 1629.806572][T25187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1629.826518][T25187] RSP: 002b:00007f411e8cd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 16:56:33 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:34 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x2000000, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1629.834910][T25187] RAX: ffffffffffffffda RBX: 00007f4120c7b020 RCX: 00007f4120b76709 [ 1629.842880][T25187] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1629.850832][T25187] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1629.858786][T25187] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1629.866741][T25187] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1629.874727][T25187] socket: no more sockets 16:56:34 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:34 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 12) 16:56:34 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 23) 16:56:34 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x2040000, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1629.993439][T25212] FAULT_INJECTION: forcing a failure. [ 1629.993439][T25212] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.006106][T25212] CPU: 1 PID: 25212 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1630.014878][T25212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.021897][T25214] FAULT_INJECTION: forcing a failure. [ 1630.021897][T25214] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.024952][T25212] Call Trace: [ 1630.024961][T25212] dump_stack_lvl+0xd6/0x122 [ 1630.045448][T25212] dump_stack+0x11/0x1b [ 1630.049616][T25212] should_fail+0x23c/0x250 [ 1630.054018][T25212] ? vm_area_dup+0x44/0x130 [ 1630.058503][T25212] __should_failslab+0x81/0x90 [ 1630.063256][T25212] should_failslab+0x5/0x20 [ 1630.067746][T25212] kmem_cache_alloc+0x4f/0x300 [ 1630.072493][T25212] vm_area_dup+0x44/0x130 [ 1630.076800][T25212] ? kmem_cache_alloc+0x20d/0x300 [ 1630.081895][T25212] ? xas_create+0x96b/0xb30 [ 1630.086384][T25212] ? xas_create+0xae3/0xb30 [ 1630.090880][T25212] __split_vma+0x82/0x320 [ 1630.095197][T25212] ? vmacache_find+0x2df/0x320 [ 1630.099956][T25212] __do_munmap+0x27c/0x1340 [ 1630.104445][T25212] ? __xas_nomem+0xfc/0x270 [ 1630.109012][T25212] mmap_region+0x58a/0x1260 [ 1630.113500][T25212] ? selinux_mmap_addr+0x94/0xa0 [ 1630.118424][T25212] ? security_mmap_addr+0x78/0x90 [ 1630.123518][T25212] do_mmap+0x781/0xc20 [ 1630.127573][T25212] vm_mmap_pgoff+0x117/0x1f0 [ 1630.132225][T25212] ksys_mmap_pgoff+0x284/0x350 [ 1630.136988][T25212] ? exit_to_user_mode_prepare+0x65/0x190 [ 1630.142698][T25212] do_syscall_64+0x44/0xa0 [ 1630.147105][T25212] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1630.152987][T25212] RIP: 0033:0x7fe015b40752 [ 1630.157414][T25212] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1630.177007][T25212] RSP: 002b:00007fe0138b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1630.185403][T25212] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe015b40752 [ 1630.193357][T25212] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff5000 [ 1630.201312][T25212] RBP: 0000000020ff5000 R08: 0000000000000007 R09: 0000000000000000 [ 1630.209285][T25212] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 1630.217237][T25212] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1630.225197][T25214] CPU: 0 PID: 25214 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1630.233963][T25214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.244011][T25214] Call Trace: [ 1630.247282][T25214] dump_stack_lvl+0xd6/0x122 [ 1630.251983][T25214] dump_stack+0x11/0x1b [ 1630.256146][T25214] should_fail+0x23c/0x250 [ 1630.260641][T25214] ? security_inode_alloc+0x30/0x180 [ 1630.266025][T25214] __should_failslab+0x81/0x90 [ 1630.270803][T25214] should_failslab+0x5/0x20 [ 1630.275316][T25214] kmem_cache_alloc+0x4f/0x300 [ 1630.280095][T25214] security_inode_alloc+0x30/0x180 [ 1630.285249][T25214] inode_init_always+0x20b/0x430 16:56:34 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) 16:56:34 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:34 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x6040000, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:34 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 24) 16:56:34 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1630.290181][T25214] ? sockfs_init_fs_context+0x70/0x70 [ 1630.295589][T25214] new_inode_pseudo+0x73/0x1c0 [ 1630.300385][T25214] __sock_create+0x122/0x4e0 [ 1630.304986][T25214] ? should_fail+0xd6/0x250 [ 1630.309481][T25214] sock_create_kern+0x34/0x40 [ 1630.314158][T25214] io_uring_create+0x18a2/0x1bb0 [ 1630.319098][T25214] __x64_sys_io_uring_setup+0xf3/0x130 [ 1630.324618][T25214] do_syscall_64+0x44/0xa0 [ 1630.329035][T25214] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1630.334970][T25214] RIP: 0033:0x7f4120b76709 16:56:34 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x7000000, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1630.339405][T25214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1630.359012][T25214] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1630.367422][T25214] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1630.375394][T25214] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1630.383412][T25214] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 16:56:34 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1630.391394][T25214] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1630.399374][T25214] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1630.407452][T25214] socket: no more sockets 16:56:34 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1630.441099][T25228] FAULT_INJECTION: forcing a failure. [ 1630.441099][T25228] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.453730][T25228] CPU: 0 PID: 25228 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1630.462498][T25228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.472560][T25228] Call Trace: [ 1630.475840][T25228] dump_stack_lvl+0xd6/0x122 [ 1630.480493][T25228] dump_stack+0x11/0x1b [ 1630.484653][T25228] should_fail+0x23c/0x250 16:56:34 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x18010000, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:34 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 13) [ 1630.489087][T25228] ? anon_vma_clone+0x8d/0x380 [ 1630.493945][T25228] __should_failslab+0x81/0x90 [ 1630.498708][T25228] should_failslab+0x5/0x20 [ 1630.503230][T25228] kmem_cache_alloc+0x4f/0x300 [ 1630.508014][T25228] anon_vma_clone+0x8d/0x380 [ 1630.512600][T25228] __split_vma+0x134/0x320 [ 1630.517171][T25228] ? vmacache_find+0x2df/0x320 [ 1630.521953][T25228] __do_munmap+0x27c/0x1340 [ 1630.526525][T25228] ? __xas_nomem+0xfc/0x270 [ 1630.531043][T25228] mmap_region+0x58a/0x1260 [ 1630.531430][T25246] FAULT_INJECTION: forcing a failure. [ 1630.531430][T25246] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.535547][T25228] ? selinux_mmap_addr+0x94/0xa0 [ 1630.535574][T25228] ? security_mmap_addr+0x78/0x90 [ 1630.558120][T25228] do_mmap+0x781/0xc20 [ 1630.562250][T25228] vm_mmap_pgoff+0x117/0x1f0 [ 1630.566859][T25228] ksys_mmap_pgoff+0x284/0x350 [ 1630.571700][T25228] ? exit_to_user_mode_prepare+0x65/0x190 [ 1630.577410][T25228] do_syscall_64+0x44/0xa0 [ 1630.581857][T25228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1630.587741][T25228] RIP: 0033:0x7fe015b40752 [ 1630.592198][T25228] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1630.611809][T25228] RSP: 002b:00007fe0138b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1630.620204][T25228] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe015b40752 [ 1630.628158][T25228] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff5000 [ 1630.636111][T25228] RBP: 0000000020ff5000 R08: 0000000000000007 R09: 0000000000000000 [ 1630.644065][T25228] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 1630.652018][T25228] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1630.659983][T25246] CPU: 1 PID: 25246 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1630.668745][T25246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.678790][T25246] Call Trace: [ 1630.682063][T25246] dump_stack_lvl+0xd6/0x122 [ 1630.686651][T25246] dump_stack+0x11/0x1b [ 1630.690813][T25246] should_fail+0x23c/0x250 [ 1630.695299][T25246] ? sk_prot_alloc+0x41/0x190 [ 1630.700015][T25246] __should_failslab+0x81/0x90 [ 1630.704789][T25246] should_failslab+0x5/0x20 [ 1630.709291][T25246] kmem_cache_alloc+0x4f/0x300 [ 1630.714072][T25246] sk_prot_alloc+0x41/0x190 [ 1630.718584][T25246] sk_alloc+0x2e/0x220 [ 1630.722717][T25246] unix_create1+0x93/0x3d0 [ 1630.727140][T25246] unix_create+0xf8/0x110 [ 1630.731466][T25246] __sock_create+0x2c7/0x4e0 [ 1630.736115][T25246] sock_create_kern+0x34/0x40 16:56:34 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x40000000, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:34 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 25) [ 1630.740790][T25246] io_uring_create+0x18a2/0x1bb0 [ 1630.745729][T25246] __x64_sys_io_uring_setup+0xf3/0x130 [ 1630.751193][T25246] do_syscall_64+0x44/0xa0 [ 1630.755627][T25246] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1630.761566][T25246] RIP: 0033:0x7f4120b76709 [ 1630.765977][T25246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1630.785588][T25246] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1630.794008][T25246] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1630.802019][T25246] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1630.809988][T25246] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1630.817956][T25246] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1630.825927][T25246] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1630.827084][T25255] FAULT_INJECTION: forcing a failure. [ 1630.827084][T25255] name failslab, interval 1, probability 0, space 0, times 0 [ 1630.846559][T25255] CPU: 0 PID: 25255 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1630.855366][T25255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.865415][T25255] Call Trace: [ 1630.868677][T25255] dump_stack_lvl+0xd6/0x122 [ 1630.873388][T25255] dump_stack+0x11/0x1b [ 1630.877528][T25255] should_fail+0x23c/0x250 [ 1630.881933][T25255] ? vm_area_dup+0x44/0x130 [ 1630.886417][T25255] __should_failslab+0x81/0x90 [ 1630.891167][T25255] should_failslab+0x5/0x20 [ 1630.895649][T25255] kmem_cache_alloc+0x4f/0x300 [ 1630.900415][T25255] ? __vma_adjust+0x18ac/0x1a70 [ 1630.905273][T25255] vm_area_dup+0x44/0x130 [ 1630.909586][T25255] __split_vma+0x82/0x320 [ 1630.913909][T25255] ? vmacache_find+0x313/0x320 [ 1630.918713][T25255] __do_munmap+0x2ee/0x1340 [ 1630.923266][T25255] ? __xas_nomem+0xfc/0x270 [ 1630.927748][T25255] mmap_region+0x58a/0x1260 [ 1630.932289][T25255] ? selinux_mmap_addr+0x94/0xa0 [ 1630.937267][T25255] ? security_mmap_addr+0x78/0x90 [ 1630.942282][T25255] do_mmap+0x781/0xc20 [ 1630.946329][T25255] vm_mmap_pgoff+0x117/0x1f0 [ 1630.951015][T25255] ksys_mmap_pgoff+0x284/0x350 [ 1630.955837][T25255] ? exit_to_user_mode_prepare+0x65/0x190 [ 1630.961542][T25255] do_syscall_64+0x44/0xa0 [ 1630.965979][T25255] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1630.971864][T25255] RIP: 0033:0x7fe015b40752 [ 1630.976268][T25255] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1630.995884][T25255] RSP: 002b:00007fe0138b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1631.004286][T25255] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe015b40752 [ 1631.012237][T25255] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff5000 [ 1631.020187][T25255] RBP: 0000000020ff5000 R08: 0000000000000007 R09: 0000000000000000 [ 1631.028152][T25255] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 1631.036115][T25255] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:35 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xffffffff, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:35 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:35 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:35 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 14) 16:56:35 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 26) 16:56:35 executing program 1: select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x52, r0, 0x0) r1 = syz_io_uring_setup(0x7d7b, &(0x7f0000000240)={0x0, 0x8c3a, 0x20, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0x18c9, &(0x7f0000000380)={0x0, 0x5d98, 0x1, 0x0, 0x230, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000001c0)=0x4) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @empty, 'batadv0\x00'}}, 0x0, 0x0, 0x1}, 0x8) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) [ 1631.292970][T25277] FAULT_INJECTION: forcing a failure. [ 1631.292970][T25277] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.305616][T25277] CPU: 1 PID: 25277 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1631.314384][T25277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.324435][T25277] Call Trace: [ 1631.327782][T25277] dump_stack_lvl+0xd6/0x122 [ 1631.332472][T25277] dump_stack+0x11/0x1b [ 1631.336626][T25277] should_fail+0x23c/0x250 [ 1631.341043][T25277] ? vm_area_alloc+0x28/0xa0 [ 1631.345630][T25277] __should_failslab+0x81/0x90 [ 1631.350422][T25277] should_failslab+0x5/0x20 [ 1631.354926][T25277] kmem_cache_alloc+0x4f/0x300 [ 1631.359693][T25277] vm_area_alloc+0x28/0xa0 [ 1631.364107][T25277] mmap_region+0x73b/0x1260 [ 1631.368618][T25277] ? selinux_mmap_addr+0x94/0xa0 [ 1631.373561][T25277] ? security_mmap_addr+0x78/0x90 [ 1631.378589][T25277] do_mmap+0x781/0xc20 [ 1631.382703][T25277] vm_mmap_pgoff+0x117/0x1f0 [ 1631.387297][T25277] ksys_mmap_pgoff+0x284/0x350 [ 1631.392143][T25277] ? exit_to_user_mode_prepare+0x65/0x190 [ 1631.397861][T25277] do_syscall_64+0x44/0xa0 [ 1631.402291][T25277] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1631.408225][T25277] RIP: 0033:0x7fe015b40752 [ 1631.412634][T25277] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1631.416594][T25278] FAULT_INJECTION: forcing a failure. 16:56:35 executing program 1: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x0, 0x0, 0x2}}}, 0x18) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000340)={0x14, 0x67, 0x1, {0x20, 0x0, 0x8}}, 0x14) syz_io_uring_setup(0x5c0f, &(0x7f00000001c0)={0x0, 0xc570, 0x1, 0x1, 0x2a, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x0, 0x2}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x10800, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000300)={0xf, 0x1f, 0x2, 0x7c2a}, 0xf) 16:56:35 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:35 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:35 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:35 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1631.416594][T25278] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.432230][T25277] RSP: 002b:00007fe0138b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1631.432252][T25277] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe015b40752 [ 1631.432263][T25277] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff5000 [ 1631.432275][T25277] RBP: 0000000020ff5000 R08: 0000000000000007 R09: 0000000000000000 [ 1631.477115][T25277] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 1631.485078][T25277] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1631.493037][T25278] CPU: 0 PID: 25278 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1631.501897][T25278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.511965][T25278] Call Trace: [ 1631.515243][T25278] dump_stack_lvl+0xd6/0x122 [ 1631.519844][T25278] dump_stack+0x11/0x1b [ 1631.524004][T25278] should_fail+0x23c/0x250 [ 1631.528421][T25278] __should_failslab+0x81/0x90 [ 1631.533184][T25278] ? selinux_sk_alloc_security+0x61/0x120 [ 1631.538896][T25278] should_failslab+0x5/0x20 16:56:35 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 27) 16:56:35 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:35 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1631.543397][T25278] kmem_cache_alloc_trace+0x52/0x320 [ 1631.548764][T25278] ? should_fail+0xd6/0x250 [ 1631.553267][T25278] selinux_sk_alloc_security+0x61/0x120 [ 1631.558811][T25278] security_sk_alloc+0x45/0x90 [ 1631.563592][T25278] sk_prot_alloc+0xd2/0x190 [ 1631.568097][T25278] sk_alloc+0x2e/0x220 [ 1631.572191][T25278] unix_create1+0x93/0x3d0 [ 1631.576611][T25278] unix_create+0xf8/0x110 [ 1631.580946][T25278] __sock_create+0x2c7/0x4e0 [ 1631.585537][T25278] sock_create_kern+0x34/0x40 16:56:35 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1631.590209][T25278] io_uring_create+0x18a2/0x1bb0 [ 1631.595180][T25278] __x64_sys_io_uring_setup+0xf3/0x130 [ 1631.600704][T25278] do_syscall_64+0x44/0xa0 [ 1631.605196][T25278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1631.611129][T25278] RIP: 0033:0x7f4120b76709 [ 1631.615544][T25278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.635232][T25278] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1631.643742][T25278] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1631.649984][T25315] FAULT_INJECTION: forcing a failure. [ 1631.649984][T25315] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.651809][T25278] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1631.651824][T25278] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1631.651836][T25278] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1631.688351][T25278] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 [ 1631.696315][T25315] CPU: 1 PID: 25315 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1631.705074][T25315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.715130][T25315] Call Trace: [ 1631.718411][T25315] dump_stack_lvl+0xd6/0x122 [ 1631.723002][T25315] dump_stack+0x11/0x1b [ 1631.727310][T25315] should_fail+0x23c/0x250 [ 1631.731854][T25315] ? vm_area_dup+0x44/0x130 [ 1631.736409][T25315] __should_failslab+0x81/0x90 [ 1631.741187][T25315] should_failslab+0x5/0x20 [ 1631.745688][T25315] kmem_cache_alloc+0x4f/0x300 [ 1631.750443][T25315] ? __vma_adjust+0x18ac/0x1a70 [ 1631.755301][T25315] vm_area_dup+0x44/0x130 [ 1631.759685][T25315] __split_vma+0x82/0x320 [ 1631.764107][T25315] ? vmacache_find+0x313/0x320 [ 1631.768982][T25315] __do_munmap+0x2ee/0x1340 [ 1631.773518][T25315] ? __xas_nomem+0xfc/0x270 [ 1631.778026][T25315] mmap_region+0x58a/0x1260 [ 1631.782583][T25315] ? selinux_mmap_addr+0x94/0xa0 [ 1631.787777][T25315] ? security_mmap_addr+0x78/0x90 16:56:35 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 15) 16:56:35 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:35 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x7, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1631.792804][T25315] do_mmap+0x781/0xc20 [ 1631.796878][T25315] vm_mmap_pgoff+0x117/0x1f0 [ 1631.801656][T25315] ksys_mmap_pgoff+0x284/0x350 [ 1631.806419][T25315] ? exit_to_user_mode_prepare+0x65/0x190 [ 1631.812226][T25315] do_syscall_64+0x44/0xa0 [ 1631.816662][T25315] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1631.822559][T25315] RIP: 0033:0x7fe015b40752 [ 1631.826973][T25315] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1631.846589][T25315] RSP: 002b:00007fe0138b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1631.855061][T25315] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe015b40752 [ 1631.855365][T25325] FAULT_INJECTION: forcing a failure. [ 1631.855365][T25325] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.863033][T25315] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ff5000 [ 1631.863049][T25315] RBP: 0000000020ff5000 R08: 0000000000000007 R09: 0000000000000000 [ 1631.863061][T25315] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 1631.899556][T25315] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1631.907517][T25325] CPU: 0 PID: 25325 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1631.916304][T25325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.926494][T25325] Call Trace: [ 1631.929753][T25325] dump_stack_lvl+0xd6/0x122 [ 1631.934414][T25325] dump_stack+0x11/0x1b [ 1631.938550][T25325] should_fail+0x23c/0x250 [ 1631.942951][T25325] ? __d_alloc+0x36/0x370 [ 1631.947294][T25325] __should_failslab+0x81/0x90 [ 1631.952182][T25325] should_failslab+0x5/0x20 [ 1631.956680][T25325] kmem_cache_alloc+0x4f/0x300 [ 1631.961521][T25325] __d_alloc+0x36/0x370 [ 1631.965728][T25325] d_alloc_pseudo+0x1a/0x50 [ 1631.970288][T25325] alloc_file_pseudo+0x77/0x150 [ 1631.975210][T25325] anon_inode_getfile+0x9f/0x120 [ 1631.980251][T25325] io_uring_create+0x18f8/0x1bb0 [ 1631.985327][T25325] __x64_sys_io_uring_setup+0xf3/0x130 [ 1631.990953][T25325] do_syscall_64+0x44/0xa0 [ 1631.995419][T25325] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1632.001431][T25325] RIP: 0033:0x7f4120b76709 [ 1632.005905][T25325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.025601][T25325] RSP: 002b:00007f411e8cd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1632.036084][T25325] RAX: ffffffffffffffda RBX: 00007f4120c7b020 RCX: 00007f4120b76709 [ 1632.044040][T25325] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1632.051997][T25325] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1632.059959][T25325] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1632.068201][T25325] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:36 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x10010, r1, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:36 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x118, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:36 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:36 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x10}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:36 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 28) 16:56:36 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 16) [ 1632.391800][T25342] FAULT_INJECTION: forcing a failure. [ 1632.391800][T25342] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.404599][T25342] CPU: 1 PID: 25342 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1632.413506][T25342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.423555][T25342] Call Trace: [ 1632.426835][T25342] dump_stack_lvl+0xd6/0x122 [ 1632.431435][T25342] dump_stack+0x11/0x1b [ 1632.433729][T25343] FAULT_INJECTION: forcing a failure. [ 1632.433729][T25343] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.435709][T25342] should_fail+0x23c/0x250 [ 1632.435731][T25342] ? __alloc_file+0x2e/0x1a0 [ 1632.457322][T25342] __should_failslab+0x81/0x90 [ 1632.462132][T25342] should_failslab+0x5/0x20 [ 1632.466619][T25342] kmem_cache_alloc+0x4f/0x300 [ 1632.471371][T25342] __alloc_file+0x2e/0x1a0 [ 1632.475779][T25342] alloc_empty_file+0xcd/0x1c0 [ 1632.480528][T25342] alloc_file+0x3a/0x280 [ 1632.484766][T25342] alloc_file_pseudo+0xfa/0x150 [ 1632.489601][T25342] anon_inode_getfile+0x9f/0x120 [ 1632.494571][T25342] io_uring_create+0x18f8/0x1bb0 [ 1632.499512][T25342] __x64_sys_io_uring_setup+0xf3/0x130 [ 1632.504956][T25342] do_syscall_64+0x44/0xa0 [ 1632.509424][T25342] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1632.515316][T25342] RIP: 0033:0x7f4120b76709 [ 1632.519768][T25342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.539355][T25342] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1632.547749][T25342] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1632.555706][T25342] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1632.564178][T25342] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1632.572128][T25342] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1632.580081][T25342] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:36 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x204, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:36 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1632.588035][T25343] CPU: 0 PID: 25343 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1632.596805][T25343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.606859][T25343] Call Trace: [ 1632.610136][T25343] dump_stack_lvl+0xd6/0x122 [ 1632.614856][T25343] dump_stack+0x11/0x1b [ 1632.619027][T25343] should_fail+0x23c/0x250 [ 1632.623437][T25343] ? vm_area_alloc+0x28/0xa0 [ 1632.628033][T25343] __should_failslab+0x81/0x90 [ 1632.632799][T25343] should_failslab+0x5/0x20 [ 1632.637302][T25343] kmem_cache_alloc+0x4f/0x300 16:56:36 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 17) [ 1632.642097][T25343] vm_area_alloc+0x28/0xa0 [ 1632.646557][T25343] mmap_region+0x73b/0x1260 [ 1632.651084][T25343] ? selinux_mmap_addr+0x94/0xa0 [ 1632.656019][T25343] ? security_mmap_addr+0x78/0x90 [ 1632.661104][T25343] do_mmap+0x781/0xc20 [ 1632.665175][T25343] vm_mmap_pgoff+0x117/0x1f0 [ 1632.669829][T25343] ksys_mmap_pgoff+0x284/0x350 [ 1632.674603][T25343] ? exit_to_user_mode_prepare+0x65/0x190 [ 1632.680424][T25343] do_syscall_64+0x44/0xa0 [ 1632.684840][T25343] entry_SYSCALL_64_after_hwframe+0x44/0xae 16:56:36 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x42}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:36 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:36 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x402, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1632.690732][T25343] RIP: 0033:0x7fe015b40752 [ 1632.695220][T25343] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1632.714831][T25343] RSP: 002b:00007fe0138b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1632.723315][T25343] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe015b40752 [ 1632.731309][T25343] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffd000 [ 1632.739279][T25343] RBP: 0000000020ffd000 R08: 0000000000000007 R09: 0000000010000000 [ 1632.747328][T25343] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 1632.755296][T25343] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 [ 1632.775349][T25359] FAULT_INJECTION: forcing a failure. [ 1632.775349][T25359] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.788115][T25359] CPU: 0 PID: 25359 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1632.796872][T25359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1632.806930][T25359] Call Trace: [ 1632.810189][T25359] dump_stack_lvl+0xd6/0x122 [ 1632.814786][T25359] dump_stack+0x11/0x1b [ 1632.818931][T25359] should_fail+0x23c/0x250 [ 1632.823347][T25359] ? security_file_alloc+0x30/0x190 [ 1632.828600][T25359] __should_failslab+0x81/0x90 [ 1632.833349][T25359] should_failslab+0x5/0x20 [ 1632.837866][T25359] kmem_cache_alloc+0x4f/0x300 [ 1632.842612][T25359] security_file_alloc+0x30/0x190 [ 1632.847664][T25359] __alloc_file+0x83/0x1a0 [ 1632.852111][T25359] alloc_empty_file+0xcd/0x1c0 [ 1632.856861][T25359] alloc_file+0x3a/0x280 [ 1632.861095][T25359] alloc_file_pseudo+0xfa/0x150 [ 1632.865937][T25359] anon_inode_getfile+0x9f/0x120 [ 1632.870870][T25359] io_uring_create+0x18f8/0x1bb0 [ 1632.875792][T25359] __x64_sys_io_uring_setup+0xf3/0x130 [ 1632.881232][T25359] do_syscall_64+0x44/0xa0 [ 1632.885647][T25359] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1632.891527][T25359] RIP: 0033:0x7f4120b76709 [ 1632.896018][T25359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.915789][T25359] RSP: 002b:00007f411e8cd108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1632.924705][T25359] RAX: ffffffffffffffda RBX: 00007f4120c7b020 RCX: 00007f4120b76709 [ 1632.932670][T25359] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1632.940628][T25359] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1632.948585][T25359] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1632.956600][T25359] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:37 executing program 1: syz_io_uring_setup(0x4662e, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0xfffffffe}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000)) 16:56:37 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4a}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:37 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x406, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:37 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 29) 16:56:37 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 18) 16:56:37 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1633.334087][T25385] FAULT_INJECTION: forcing a failure. [ 1633.334087][T25385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1633.347343][T25385] CPU: 1 PID: 25385 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 1633.347912][T25389] FAULT_INJECTION: forcing a failure. [ 1633.347912][T25389] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.356395][T25385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1633.356407][T25385] Call Trace: [ 1633.356414][T25385] dump_stack_lvl+0xd6/0x122 [ 1633.356438][T25385] dump_stack+0x11/0x1b [ 1633.390977][T25385] should_fail+0x23c/0x250 [ 1633.395381][T25385] __alloc_pages+0x102/0x320 [ 1633.399965][T25385] alloc_pages+0x382/0x3d0 [ 1633.404379][T25385] pte_alloc_one+0x29/0xb0 [ 1633.408854][T25385] __pte_alloc+0x2f/0x220 [ 1633.413167][T25385] remap_pfn_range_notrack+0x5b7/0x770 [ 1633.418627][T25385] remap_pfn_range+0x87/0xe0 [ 1633.423280][T25385] io_uring_mmap+0x232/0x260 [ 1633.427855][T25385] mmap_region+0xb1a/0x1260 [ 1633.432344][T25385] do_mmap+0x781/0xc20 [ 1633.436451][T25385] vm_mmap_pgoff+0x117/0x1f0 [ 1633.441026][T25385] ksys_mmap_pgoff+0x284/0x350 [ 1633.445774][T25385] ? exit_to_user_mode_prepare+0x65/0x190 [ 1633.451579][T25385] do_syscall_64+0x44/0xa0 [ 1633.456019][T25385] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1633.461956][T25385] RIP: 0033:0x7fe015b40752 [ 1633.466369][T25385] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1633.486058][T25385] RSP: 002b:00007fe0138b80f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1633.494451][T25385] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fe015b40752 [ 1633.502404][T25385] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffd000 [ 1633.510358][T25385] RBP: 0000000020ffd000 R08: 0000000000000007 R09: 0000000010000000 [ 1633.518310][T25385] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 1633.526309][T25385] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020ff5000 16:56:37 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:37 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (fail_nth: 30) [ 1633.534263][T25389] CPU: 0 PID: 25389 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1633.543026][T25389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1633.553085][T25389] Call Trace: [ 1633.556418][T25389] dump_stack_lvl+0xd6/0x122 [ 1633.561198][T25389] dump_stack+0x11/0x1b [ 1633.565348][T25389] should_fail+0x23c/0x250 [ 1633.569755][T25389] __should_failslab+0x81/0x90 [ 1633.574516][T25389] ? io_uring_add_tctx_node+0xdc/0x200 [ 1633.579983][T25389] should_failslab+0x5/0x20 16:56:37 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:37 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1633.584499][T25389] kmem_cache_alloc_trace+0x52/0x320 [ 1633.589811][T25389] ? xa_load+0x249/0x260 [ 1633.594065][T25389] io_uring_add_tctx_node+0xdc/0x200 [ 1633.599353][T25389] io_uring_create+0x19f2/0x1bb0 [ 1633.604291][T25389] __x64_sys_io_uring_setup+0xf3/0x130 [ 1633.609746][T25389] do_syscall_64+0x44/0xa0 [ 1633.614246][T25389] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1633.620137][T25389] RIP: 0033:0x7f4120b76709 16:56:37 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x0, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1633.624618][T25389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1633.644418][T25389] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1633.652833][T25389] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1633.660809][T25389] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1633.668769][T25389] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1633.677229][T25389] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 16:56:37 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x60}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1633.685195][T25389] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:38 executing program 1: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x0, 0xd0, 0x3, 0x0, 0x2, 0x0, 0xdd6, 0x100000000}, &(0x7f0000000080)={0x80000000, 0x6, 0x7ffffffd, 0x2, 0x4, 0x5, 0x80000001, 0x3}, &(0x7f0000000140)={0x100000001, 0x7, 0x6, 0xff, 0x7, 0x2, 0x9}, &(0x7f0000000200)={r1, r2+10000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1ff]}, 0x8}) syz_io_uring_setup(0x2298, &(0x7f00000002c0)={0x0, 0xcb0c, 0x0, 0x0, 0x223, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 16:56:38 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x604, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:38 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:38 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x0, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:38 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x11e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:38 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 19) 16:56:38 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x0, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:38 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1634.212123][T25426] FAULT_INJECTION: forcing a failure. [ 1634.212123][T25426] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.224789][T25426] CPU: 0 PID: 25426 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1634.233634][T25426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1634.243720][T25426] Call Trace: [ 1634.246996][T25426] dump_stack_lvl+0xd6/0x122 [ 1634.251625][T25426] dump_stack+0x11/0x1b [ 1634.255783][T25426] should_fail+0x23c/0x250 [ 1634.260261][T25426] ? xas_create+0x96b/0xb30 [ 1634.264830][T25426] __should_failslab+0x81/0x90 [ 1634.269639][T25426] should_failslab+0x5/0x20 [ 1634.274146][T25426] kmem_cache_alloc+0x4f/0x300 [ 1634.278914][T25426] ? should_fail+0xd6/0x250 [ 1634.283409][T25426] xas_create+0x96b/0xb30 [ 1634.287929][T25426] xas_store+0x70/0xca0 [ 1634.292079][T25426] ? selinux_file_alloc_security+0x9c/0xb0 [ 1634.297903][T25426] ? security_file_alloc+0x12e/0x190 [ 1634.303272][T25426] ? percpu_counter_add_batch+0x69/0xd0 16:56:38 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x0, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:38 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1634.308857][T25426] __xa_store+0xdb/0x330 [ 1634.313108][T25426] xa_store+0x30/0x70 [ 1634.317212][T25426] io_uring_add_tctx_node+0x111/0x200 [ 1634.322589][T25426] io_uring_create+0x19f2/0x1bb0 [ 1634.327528][T25426] __x64_sys_io_uring_setup+0xf3/0x130 [ 1634.333075][T25426] do_syscall_64+0x44/0xa0 [ 1634.337492][T25426] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1634.343429][T25426] RIP: 0033:0x7f4120b76709 16:56:38 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x0, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1634.347833][T25426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1634.367466][T25426] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1634.375880][T25426] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1634.383868][T25426] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1634.391859][T25426] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1634.399835][T25426] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 16:56:38 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1634.407860][T25426] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:39 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x202101, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000080)) 16:56:39 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x700, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:39 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 20) 16:56:39 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x120}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:39 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x0, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:39 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:39 executing program 1: r0 = syz_io_uring_complete(0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0xffff}, 0xf) syz_io_uring_setup(0x13d3, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0xffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x810) 16:56:39 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x1801, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1635.124428][T25480] FAULT_INJECTION: forcing a failure. [ 1635.124428][T25480] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.138719][T25480] CPU: 0 PID: 25480 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1635.147481][T25480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1635.157534][T25480] Call Trace: [ 1635.160871][T25480] dump_stack_lvl+0xd6/0x122 [ 1635.165471][T25480] dump_stack+0x11/0x1b [ 1635.169647][T25480] should_fail+0x23c/0x250 16:56:39 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x204}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:39 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x4000, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1635.174148][T25480] ? xas_create+0x96b/0xb30 [ 1635.178642][T25480] __should_failslab+0x81/0x90 [ 1635.183462][T25480] should_failslab+0x5/0x20 [ 1635.188024][T25480] kmem_cache_alloc+0x4f/0x300 [ 1635.192786][T25480] ? xas_create+0x96b/0xb30 [ 1635.197296][T25480] xas_create+0x96b/0xb30 [ 1635.201622][T25480] xas_store+0x70/0xca0 [ 1635.205774][T25480] ? selinux_file_alloc_security+0x9c/0xb0 [ 1635.211651][T25480] ? security_file_alloc+0x12e/0x190 [ 1635.216987][T25480] ? percpu_counter_add_batch+0x69/0xd0 16:56:39 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1635.222597][T25480] __xa_store+0xdb/0x330 [ 1635.226857][T25480] xa_store+0x30/0x70 [ 1635.230911][T25480] io_uring_add_tctx_node+0x111/0x200 [ 1635.236336][T25480] io_uring_create+0x19f2/0x1bb0 [ 1635.241309][T25480] __x64_sys_io_uring_setup+0xf3/0x130 [ 1635.246797][T25480] do_syscall_64+0x44/0xa0 [ 1635.251223][T25480] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1635.257187][T25480] RIP: 0033:0x7f4120b76709 16:56:39 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:39 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x10}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1635.261650][T25480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.281263][T25480] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1635.289709][T25480] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1635.297775][T25480] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1635.305738][T25480] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1635.313844][T25480] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 16:56:39 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x42}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1635.321804][T25480] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:39 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 21) 16:56:39 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x1000000, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:39 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2000000, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:39 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1635.472918][T25523] FAULT_INJECTION: forcing a failure. [ 1635.472918][T25523] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.485630][T25523] CPU: 0 PID: 25523 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1635.494394][T25523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1635.504443][T25523] Call Trace: [ 1635.507725][T25523] dump_stack_lvl+0xd6/0x122 [ 1635.512321][T25523] dump_stack+0x11/0x1b [ 1635.516476][T25523] should_fail+0x23c/0x250 [ 1635.520893][T25523] ? xas_create+0x96b/0xb30 [ 1635.525403][T25523] __should_failslab+0x81/0x90 [ 1635.530168][T25523] should_failslab+0x5/0x20 [ 1635.534725][T25523] kmem_cache_alloc+0x4f/0x300 [ 1635.539590][T25523] ? xas_create+0x96b/0xb30 [ 1635.544071][T25523] xas_create+0x96b/0xb30 [ 1635.548530][T25523] xas_store+0x70/0xca0 [ 1635.552678][T25523] ? selinux_file_alloc_security+0x9c/0xb0 [ 1635.558520][T25523] ? security_file_alloc+0x12e/0x190 [ 1635.563810][T25523] ? percpu_counter_add_batch+0x69/0xd0 [ 1635.569330][T25523] __xa_store+0xdb/0x330 [ 1635.573618][T25523] xa_store+0x30/0x70 [ 1635.577653][T25523] io_uring_add_tctx_node+0x111/0x200 [ 1635.583006][T25523] io_uring_create+0x19f2/0x1bb0 [ 1635.587945][T25523] __x64_sys_io_uring_setup+0xf3/0x130 [ 1635.593478][T25523] do_syscall_64+0x44/0xa0 [ 1635.597874][T25523] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1635.603765][T25523] RIP: 0033:0x7f4120b76709 [ 1635.608165][T25523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1635.627825][T25523] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1635.636337][T25523] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1635.644369][T25523] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1635.652364][T25523] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1635.660403][T25523] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 [ 1635.668368][T25523] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:40 executing program 1: syz_io_uring_setup(0x5438, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:40 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2a0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:40 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2040000, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:40 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4a}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:40 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000003c0)) 16:56:40 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 22) [ 1636.056992][T25539] FAULT_INJECTION: forcing a failure. [ 1636.056992][T25539] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.069720][T25539] CPU: 0 PID: 25539 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1636.078501][T25539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1636.088555][T25539] Call Trace: [ 1636.091919][T25539] dump_stack_lvl+0xd6/0x122 [ 1636.096604][T25539] dump_stack+0x11/0x1b [ 1636.100777][T25539] should_fail+0x23c/0x250 16:56:40 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x6040000, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1636.105191][T25539] ? xas_create+0x96b/0xb30 [ 1636.109739][T25539] __should_failslab+0x81/0x90 [ 1636.114499][T25539] should_failslab+0x5/0x20 [ 1636.119003][T25539] kmem_cache_alloc+0x4f/0x300 [ 1636.123773][T25539] ? xas_create+0x96b/0xb30 [ 1636.128274][T25539] xas_create+0x96b/0xb30 [ 1636.132629][T25539] xas_store+0x70/0xca0 [ 1636.136820][T25539] ? selinux_file_alloc_security+0x9c/0xb0 [ 1636.142627][T25539] ? security_file_alloc+0x12e/0x190 [ 1636.147923][T25539] ? percpu_counter_add_batch+0x69/0xd0 [ 1636.153467][T25539] __xa_store+0xdb/0x330 16:56:40 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2a2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:40 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x7000000, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1636.157710][T25539] xa_store+0x30/0x70 [ 1636.161707][T25539] io_uring_add_tctx_node+0x111/0x200 [ 1636.167115][T25539] io_uring_create+0x19f2/0x1bb0 [ 1636.172157][T25539] __x64_sys_io_uring_setup+0xf3/0x130 [ 1636.177636][T25539] do_syscall_64+0x44/0xa0 [ 1636.182061][T25539] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1636.188023][T25539] RIP: 0033:0x7f4120b76709 16:56:40 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x402}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1636.192429][T25539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.212035][T25539] RSP: 002b:00007f411e8ee108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1636.220475][T25539] RAX: ffffffffffffffda RBX: 00007f4120c7af60 RCX: 00007f4120b76709 [ 1636.228451][T25539] RDX: 0000000020ffc000 RSI: 0000000020000340 RDI: 000000000000001e [ 1636.236418][T25539] RBP: 0000000020000340 R08: 0000000020000400 R09: 0000000020000400 [ 1636.244382][T25539] R10: 00000000200003c0 R11: 0000000000000202 R12: 0000000020000400 16:56:40 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x18010000, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:40 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000003c0)) [ 1636.252345][T25539] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:40 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x3fb7e0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, r0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x9, 0xfffffffffffff800}) 16:56:40 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 23) 16:56:40 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000003c0)) 16:56:40 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x60}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:40 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x406}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:40 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x40000000, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:41 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x600}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:41 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1636.974193][T25590] FAULT_INJECTION: forcing a failure. [ 1636.974193][T25590] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.986852][T25590] CPU: 1 PID: 25590 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1636.995671][T25590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1637.005720][T25590] Call Trace: [ 1637.008992][T25590] dump_stack_lvl+0xd6/0x122 [ 1637.013586][T25590] dump_stack+0x11/0x1b [ 1637.017798][T25590] should_fail+0x23c/0x250 16:56:41 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x11e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:41 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), 0x0) 16:56:41 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1637.022248][T25590] ? vm_area_dup+0x44/0x130 [ 1637.026746][T25590] __should_failslab+0x81/0x90 [ 1637.031503][T25590] should_failslab+0x5/0x20 [ 1637.036013][T25590] kmem_cache_alloc+0x4f/0x300 [ 1637.040778][T25590] vm_area_dup+0x44/0x130 [ 1637.045125][T25590] ? kmem_cache_alloc+0x20d/0x300 [ 1637.050135][T25590] ? xas_create+0x96b/0xb30 [ 1637.054695][T25590] ? xas_create+0xae3/0xb30 [ 1637.059200][T25590] __split_vma+0x82/0x320 [ 1637.063570][T25590] ? vmacache_find+0x2df/0x320 [ 1637.068336][T25590] __do_munmap+0x27c/0x1340 16:56:41 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x604}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1637.072839][T25590] ? __xas_nomem+0xfc/0x270 [ 1637.077337][T25590] mmap_region+0x58a/0x1260 [ 1637.081867][T25590] ? selinux_mmap_addr+0x94/0xa0 [ 1637.086817][T25590] ? security_mmap_addr+0x78/0x90 [ 1637.091880][T25590] do_mmap+0x781/0xc20 [ 1637.096037][T25590] vm_mmap_pgoff+0x117/0x1f0 [ 1637.100627][T25590] ksys_mmap_pgoff+0x284/0x350 [ 1637.105440][T25590] ? exit_to_user_mode_prepare+0x65/0x190 [ 1637.111172][T25590] do_syscall_64+0x44/0xa0 [ 1637.115603][T25590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1637.121552][T25590] RIP: 0033:0x7f4120b76752 [ 1637.125956][T25590] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1637.145657][T25590] RSP: 002b:00007f411e8ee0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1637.154062][T25590] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f4120b76752 [ 1637.162032][T25590] RDX: 0000000000000003 RSI: 00000000000005c0 RDI: 0000000020ff9000 [ 1637.170079][T25590] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000000000000 [ 1637.178050][T25590] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000400 [ 1637.186038][T25590] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:41 executing program 1: select(0x40, &(0x7f0000000040)={0x2000000, 0x800000000001, 0x0, 0x8000, 0x0, 0x1000, 0x2}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:41 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x148}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:41 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x2, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:41 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), 0x0) 16:56:41 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x700}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:41 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 24) [ 1637.885540][T25629] FAULT_INJECTION: forcing a failure. [ 1637.885540][T25629] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.898351][T25629] CPU: 1 PID: 25629 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1637.907117][T25629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1637.917175][T25629] Call Trace: [ 1637.920448][T25629] dump_stack_lvl+0xd6/0x122 [ 1637.925102][T25629] dump_stack+0x11/0x1b [ 1637.929261][T25629] should_fail+0x23c/0x250 16:56:42 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x7, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:42 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x14a}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1637.933747][T25629] ? anon_vma_clone+0x8d/0x380 [ 1637.938506][T25629] __should_failslab+0x81/0x90 [ 1637.943269][T25629] should_failslab+0x5/0x20 [ 1637.947778][T25629] kmem_cache_alloc+0x4f/0x300 [ 1637.952541][T25629] anon_vma_clone+0x8d/0x380 [ 1637.957224][T25629] __split_vma+0x134/0x320 [ 1637.961643][T25629] ? vmacache_find+0x2df/0x320 [ 1637.966408][T25629] __do_munmap+0x27c/0x1340 [ 1637.970915][T25629] ? __xas_nomem+0xfc/0x270 [ 1637.975429][T25629] mmap_region+0x58a/0x1260 [ 1637.979961][T25629] ? selinux_mmap_addr+0x94/0xa0 16:56:42 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x118, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1637.984909][T25629] ? security_mmap_addr+0x78/0x90 [ 1637.989992][T25629] do_mmap+0x781/0xc20 [ 1637.994131][T25629] vm_mmap_pgoff+0x117/0x1f0 [ 1637.998744][T25629] ksys_mmap_pgoff+0x284/0x350 [ 1638.003518][T25629] ? exit_to_user_mode_prepare+0x65/0x190 [ 1638.009307][T25629] do_syscall_64+0x44/0xa0 [ 1638.013754][T25629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1638.019644][T25629] RIP: 0033:0x7f4120b76752 16:56:42 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x204}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:42 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x204, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1638.024061][T25629] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1638.043688][T25629] RSP: 002b:00007f411e8ee0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1638.052097][T25629] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f4120b76752 [ 1638.060194][T25629] RDX: 0000000000000003 RSI: 00000000000005c0 RDI: 0000000020ff9000 [ 1638.068163][T25629] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000000000000 [ 1638.076123][T25629] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000400 16:56:42 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x402}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:42 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='vegas\x00', 0x6) [ 1638.084088][T25629] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:42 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4174, &(0x7f0000000200)={0x0, 0xfd86, 0x1, 0x0, 0x286}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x2d45, &(0x7f0000000300)={0x0, 0x21ac, 0x2, 0x1, 0x3bc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), 0x0) 16:56:42 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x1e01}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:42 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x402, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:42 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 25) 16:56:42 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x406}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1638.209297][T25677] FAULT_INJECTION: forcing a failure. [ 1638.209297][T25677] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.222023][T25677] CPU: 0 PID: 25677 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1638.230788][T25677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.240939][T25677] Call Trace: [ 1638.244232][T25677] dump_stack_lvl+0xd6/0x122 [ 1638.248895][T25677] dump_stack+0x11/0x1b [ 1638.253058][T25677] should_fail+0x23c/0x250 16:56:42 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:42 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x600}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1638.257506][T25677] ? vm_area_dup+0x44/0x130 [ 1638.262009][T25677] __should_failslab+0x81/0x90 [ 1638.266776][T25677] should_failslab+0x5/0x20 [ 1638.271351][T25677] kmem_cache_alloc+0x4f/0x300 [ 1638.276601][T25677] ? __vma_adjust+0x18ac/0x1a70 [ 1638.281529][T25677] vm_area_dup+0x44/0x130 [ 1638.285850][T25677] __split_vma+0x82/0x320 [ 1638.290246][T25677] ? vmacache_find+0x2df/0x320 [ 1638.295019][T25677] __do_munmap+0x2ee/0x1340 [ 1638.299621][T25677] ? __xas_nomem+0xfc/0x270 [ 1638.304198][T25677] mmap_region+0x58a/0x1260 16:56:42 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x604}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:42 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x406, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1638.308785][T25677] ? selinux_mmap_addr+0x94/0xa0 [ 1638.313713][T25677] ? security_mmap_addr+0x78/0x90 [ 1638.318734][T25677] do_mmap+0x781/0xc20 [ 1638.322796][T25677] vm_mmap_pgoff+0x117/0x1f0 [ 1638.327392][T25677] ksys_mmap_pgoff+0x284/0x350 [ 1638.332169][T25677] ? exit_to_user_mode_prepare+0x65/0x190 [ 1638.337901][T25677] do_syscall_64+0x44/0xa0 [ 1638.342384][T25677] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1638.348389][T25677] RIP: 0033:0x7f4120b76752 16:56:42 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x700}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1638.352790][T25677] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1638.372408][T25677] RSP: 002b:00007f411e8ee0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1638.381339][T25677] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f4120b76752 [ 1638.389338][T25677] RDX: 0000000000000003 RSI: 00000000000005c0 RDI: 0000000020ff9000 [ 1638.397313][T25677] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000000000000 16:56:42 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x604, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1638.405362][T25677] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000400 [ 1638.413364][T25677] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:43 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) syz_io_uring_complete(0x0) select(0x40, &(0x7f0000000000)={0x8, 0xd2, 0x6, 0x5, 0xe568, 0x400, 0x200, 0x5}, &(0x7f0000000080)={0x10001, 0xffffffff7fffffff, 0x7, 0x7ff, 0x7, 0x7, 0x68, 0x80000000}, &(0x7f0000000140)={0x8, 0x81, 0x1f, 0xfff, 0xffffffffffff236d, 0x4, 0x1, 0xfffffffffffffffc}, &(0x7f00000001c0)) 16:56:43 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x700}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:43 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2001}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:43 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x700, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:43 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 26) 16:56:43 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x1e01}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:43 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1639.042607][T25715] FAULT_INJECTION: forcing a failure. [ 1639.042607][T25715] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.055289][T25715] CPU: 1 PID: 25715 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1639.064051][T25715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1639.074299][T25715] Call Trace: [ 1639.077629][T25715] dump_stack_lvl+0xd6/0x122 [ 1639.082234][T25715] dump_stack+0x11/0x1b [ 1639.086402][T25715] should_fail+0x23c/0x250 16:56:43 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4200}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1639.090934][T25715] ? anon_vma_clone+0x8d/0x380 [ 1639.095755][T25715] __should_failslab+0x81/0x90 [ 1639.100517][T25715] should_failslab+0x5/0x20 [ 1639.105054][T25715] kmem_cache_alloc+0x4f/0x300 [ 1639.109811][T25715] anon_vma_clone+0x8d/0x380 [ 1639.114457][T25715] __split_vma+0x134/0x320 [ 1639.118949][T25715] ? vmacache_find+0x2df/0x320 [ 1639.123798][T25715] __do_munmap+0x2ee/0x1340 [ 1639.128310][T25715] ? __xas_nomem+0xfc/0x270 [ 1639.132816][T25715] mmap_region+0x58a/0x1260 [ 1639.137321][T25715] ? selinux_mmap_addr+0x94/0xa0 16:56:43 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:43 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4a00}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1639.142262][T25715] ? security_mmap_addr+0x78/0x90 [ 1639.147284][T25715] do_mmap+0x781/0xc20 [ 1639.151389][T25715] vm_mmap_pgoff+0x117/0x1f0 [ 1639.156032][T25715] ksys_mmap_pgoff+0x284/0x350 [ 1639.160879][T25715] ? exit_to_user_mode_prepare+0x65/0x190 [ 1639.166667][T25715] do_syscall_64+0x44/0xa0 [ 1639.171118][T25715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1639.177020][T25715] RIP: 0033:0x7f4120b76752 16:56:43 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x1801, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:43 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='vegas\x00', 0x6) [ 1639.181491][T25715] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1639.201095][T25715] RSP: 002b:00007f411e8ee0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1639.209578][T25715] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f4120b76752 [ 1639.217543][T25715] RDX: 0000000000000003 RSI: 00000000000005c0 RDI: 0000000020ff9000 [ 1639.225536][T25715] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000000000000 [ 1639.234618][T25715] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000400 [ 1639.242579][T25715] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:44 executing program 1: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) io_uring_setup(0x218, &(0x7f00000001c0)={0x0, 0x6603, 0x20, 0x3, 0x2f7}) fstat(r0, &(0x7f0000000240)) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10) 16:56:44 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:44 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:44 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 27) 16:56:44 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1639.983931][T25762] FAULT_INJECTION: forcing a failure. [ 1639.983931][T25762] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.996596][T25762] CPU: 0 PID: 25762 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1640.005360][T25762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.015414][T25762] Call Trace: [ 1640.018687][T25762] dump_stack_lvl+0xd6/0x122 [ 1640.023342][T25762] dump_stack+0x11/0x1b [ 1640.027573][T25762] should_fail+0x23c/0x250 16:56:44 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4200}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:44 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xa002}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:44 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x1000000, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) [ 1640.031982][T25762] ? vm_area_alloc+0x28/0xa0 [ 1640.036711][T25762] __should_failslab+0x81/0x90 [ 1640.041513][T25762] should_failslab+0x5/0x20 [ 1640.046012][T25762] kmem_cache_alloc+0x4f/0x300 [ 1640.050780][T25762] vm_area_alloc+0x28/0xa0 [ 1640.055243][T25762] mmap_region+0x73b/0x1260 [ 1640.059824][T25762] ? selinux_mmap_addr+0x94/0xa0 [ 1640.064762][T25762] ? security_mmap_addr+0x78/0x90 [ 1640.069842][T25762] do_mmap+0x781/0xc20 [ 1640.073906][T25762] vm_mmap_pgoff+0x117/0x1f0 [ 1640.078491][T25762] ksys_mmap_pgoff+0x284/0x350 16:56:44 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='vegas\x00', 0x6) [ 1640.083248][T25762] ? exit_to_user_mode_prepare+0x65/0x190 [ 1640.088967][T25762] do_syscall_64+0x44/0xa0 [ 1640.093475][T25762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1640.099474][T25762] RIP: 0033:0x7f4120b76752 [ 1640.103881][T25762] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1640.123492][T25762] RSP: 002b:00007f411e8ee0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 16:56:44 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xa202}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:44 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x2000000, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:44 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4801}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1640.131945][T25762] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f4120b76752 [ 1640.139941][T25762] RDX: 0000000000000003 RSI: 00000000000005c0 RDI: 0000000020ff9000 [ 1640.147910][T25762] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000000000000 [ 1640.155882][T25762] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000400 [ 1640.163904][T25762] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:44 executing program 1: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:44 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x2040000, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:44 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x80000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:44 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 28) 16:56:44 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4a00}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:44 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x6040000, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:44 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4a01}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1640.843423][T25806] FAULT_INJECTION: forcing a failure. [ 1640.843423][T25806] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.856188][T25806] CPU: 1 PID: 25806 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1640.864989][T25806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1640.875116][T25806] Call Trace: [ 1640.878384][T25806] dump_stack_lvl+0xd6/0x122 [ 1640.882977][T25806] dump_stack+0x11/0x1b [ 1640.887133][T25806] should_fail+0x23c/0x250 16:56:44 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x400000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1640.891578][T25806] ? vm_area_alloc+0x28/0xa0 [ 1640.896166][T25806] __should_failslab+0x81/0x90 [ 1640.900942][T25806] should_failslab+0x5/0x20 [ 1640.905478][T25806] kmem_cache_alloc+0x4f/0x300 [ 1640.910240][T25806] vm_area_alloc+0x28/0xa0 [ 1640.914658][T25806] mmap_region+0x73b/0x1260 [ 1640.919298][T25806] ? selinux_mmap_addr+0x94/0xa0 [ 1640.924248][T25806] ? security_mmap_addr+0x78/0x90 [ 1640.929426][T25806] do_mmap+0x781/0xc20 [ 1640.933628][T25806] vm_mmap_pgoff+0x117/0x1f0 [ 1640.938274][T25806] ksys_mmap_pgoff+0x284/0x350 [ 1640.943073][T25806] ? exit_to_user_mode_prepare+0x65/0x190 [ 1640.948813][T25806] do_syscall_64+0x44/0xa0 [ 1640.953238][T25806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1640.959136][T25806] RIP: 0033:0x7f4120b76752 [ 1640.963546][T25806] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1640.983174][T25806] RSP: 002b:00007f411e8ee0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 16:56:45 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000100)='vegas\x00', 0x6) 16:56:45 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x7000000, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:45 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:45 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x600000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1640.991586][T25806] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f4120b76752 [ 1640.999588][T25806] RDX: 0000000000000003 RSI: 0000000000000800 RDI: 0000000020ffc000 [ 1641.007547][T25806] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1641.015511][T25806] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000400 [ 1641.023462][T25806] R13: 0000000020ffc000 R14: 00000000200003c0 R15: 0000000020ff9000 16:56:45 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x7) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xc42}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) 16:56:45 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x80000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:45 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (fail_nth: 29) 16:56:45 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x80ffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:45 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x18010000, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:45 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x40000000, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:45 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x400000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1641.694012][T25848] FAULT_INJECTION: forcing a failure. [ 1641.694012][T25848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.707103][T25848] CPU: 1 PID: 25848 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 1641.715865][T25848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1641.725922][T25848] Call Trace: [ 1641.729196][T25848] dump_stack_lvl+0xd6/0x122 [ 1641.733787][T25848] dump_stack+0x11/0x1b [ 1641.737934][T25848] should_fail+0x23c/0x250 16:56:45 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x90ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1641.742445][T25848] should_fail_usercopy+0x16/0x20 [ 1641.747467][T25848] _copy_from_user+0x1c/0xd0 [ 1641.752083][T25848] kstrtouint_from_user+0x7e/0x170 [ 1641.757220][T25848] ? 0xffffffff81000000 [ 1641.761372][T25848] ? proc_fail_nth_read+0x150/0x150 [ 1641.766594][T25848] proc_fail_nth_write+0x4b/0x150 [ 1641.771632][T25848] vfs_write+0x286/0x900 [ 1641.775941][T25848] ? vfs_read+0x4e3/0x750 [ 1641.780269][T25848] ? __fget_light+0x21b/0x260 [ 1641.784938][T25848] ? __cond_resched+0x11/0x40 [ 1641.789623][T25848] ksys_write+0xd9/0x190 [ 1641.793873][T25848] __x64_sys_write+0x3e/0x50 [ 1641.798458][T25848] do_syscall_64+0x44/0xa0 [ 1641.802952][T25848] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1641.808844][T25848] RIP: 0033:0x7f4120b293ef [ 1641.813340][T25848] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1641.833058][T25848] RSP: 002b:00007f411e8ee170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 16:56:45 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:45 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x600000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:45 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:45 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xc0ffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1641.841473][T25848] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4120b293ef [ 1641.849435][T25848] RDX: 0000000000000001 RSI: 00007f411e8ee1e0 RDI: 0000000000000004 [ 1641.857484][T25848] RBP: 00007f411e8ee1d0 R08: 0000000000000000 R09: 0000000010000000 [ 1641.865549][T25848] R10: 0000000000008011 R11: 0000000000000293 R12: 0000000000000002 [ 1641.873512][T25848] R13: 00007ffff2f525af R14: 00007f411e8ee300 R15: 0000000000022000 16:56:46 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000326bd7400fedbf4250100000000000000080000008000000000000101696200000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/98], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) 16:56:46 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:46 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x203452, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:46 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x80ffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:46 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xd0ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:46 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xe0ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:46 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:46 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x90ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:46 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:46 executing program 2: syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000ba6e499cd473f486e516149144a5fb6e17974fe9c1e7be44bfbcf7f5e61a665f61a8e6655d915031f91ad594f6f8dd252c82aebe47fd2fce4b415d87727549865a65ee725eca2a3945ab51197b52aed445bff0e1fa3fd2", @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf250e00000008002c000500000008003af800000a000900bbbbbbbbbbaf0000050033000200000008003b00ad6700000006d3b14a104db2"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000002) mq_open(&(0x7f0000000040)=')\x00', 0x40, 0x8, &(0x7f00000000c0)={0xfff, 0x40, 0xffffffff, 0x1000}) 16:56:46 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:46 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xf0ff1f}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:47 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x4}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:47 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xc0ffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:47 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0xbad40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r1, 0x0) 16:56:47 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x1000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:47 executing program 1: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x30, r1, 0x8000000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000140)={0x0, 0x10001, 0x3ff}) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) syz_io_uring_setup(0x75c2, &(0x7f00000001c0)={0x0, 0xbdbd, 0x20, 0x2, 0xec, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_complete(r2) 16:56:47 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:47 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xd0ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:47 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:47 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:47 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) 16:56:47 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:47 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xe0ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:47 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2040000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:47 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x10}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:47 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:47 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x2, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:48 executing program 1: r0 = syz_io_uring_complete(0x0) mq_timedsend(r0, &(0x7f0000000240)="370e4afb1286195bfc466e4a6827e42f93940ef125c627ab21a05caff3bd3a25b4c3c4cfaaff305c7e9d620283c8b32216fa8af3408fa1dd0962ebf02702d3e0988b77c18a00642de9dbef8b6112b12f1ad114f46a4fa1177a", 0x59, 0x3, &(0x7f00000002c0)={0x77359400}) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x93cb, 0xc7, 0x8002, 0x68, 0x531, 0x1ff, 0x7}, &(0x7f0000000080)={0x8, 0x3ff, 0x1f, 0x1, 0x0, 0xfd23, 0x873, 0x9}, &(0x7f0000000140)={0x8, 0x5749, 0x1, 0x6, 0x1, 0x100000000, 0x5, 0x4}, &(0x7f00000001c0)={0x77359400}) clock_getres(0x2, &(0x7f0000000200)) 16:56:48 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xf0ff1f}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:48 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x42}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:48 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:48 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:48 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x8000000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:48 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6040000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:48 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x4a}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:48 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x1000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:48 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x7000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:48 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x60}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:48 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000380)=0xffffffffffffffff, 0x12) syz_io_uring_setup(0x252f3, &(0x7f0000000300)={0x0, 0x0, 0x34, 0x2, 0xffffffff, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff1000/0xe000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x7d3c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x92}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x80100, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000008, 0x100010, r4, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x7ff) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:49 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x200}, 0x0) 16:56:49 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:49 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x11f}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:49 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x8000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:49 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:49 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x2110, r1, 0x8000000) syz_io_uring_complete(r2) 16:56:49 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x120}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:49 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x10000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:49 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x2040000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:49 executing program 2: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x415, &(0x7f00000000c0)={0x0, 0x80000000, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000200)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000140)=0x5000000000) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000300), &(0x7f00000002c0)) 16:56:49 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:49 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x166}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:50 executing program 1: syz_io_uring_setup(0x46625, &(0x7f00000000c0)={0x0, 0x208f, 0x10, 0x0, 0x80}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) io_uring_setup(0x5e1e, &(0x7f00000001c0)={0x0, 0xcd7e, 0x10, 0x0, 0x2f6}) 16:56:50 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x1e010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:50 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:50 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x1e6}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:50 executing program 0: select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:50 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x3e3e, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_setup(0x8b0, &(0x7f0000000240)={0x0, 0x5e31, 0x24, 0x0, 0x4a, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:50 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x6040000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:50 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x204}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:50 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x1ffff000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:50 executing program 0: select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:50 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x402}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:50 executing program 0: select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:51 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x68fc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x5}, 0x0) 16:56:51 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:51 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x3671, &(0x7f00000000c0)={0x0, 0x6443, 0x4, 0x1, 0x261, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r1, 0x8000000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:51 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x7000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:51 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x406}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:51 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:51 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:51 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3453, &(0x7f0000000240)={0x0, 0xffffffff, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x131341, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000200)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000)=0xc2d1, 0x0, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x509181, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x4, 0x20000) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000340)={0x6, 0x80000000, 0x1}) 16:56:51 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x604}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:51 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:51 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:51 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x8000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:51 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000080)) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:51 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x10000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:51 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x700}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:51 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:51 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20ff9000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:51 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) io_uring_setup(0x5576, &(0x7f0000001000)={0x0, 0xd5b6, 0x2, 0x3, 0x1d7, 0x0, r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xca8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff8, 0x44}}}}, [@NL80211_ATTR_BEACON_TAIL={0x73, 0xf, [@mesh_chsw={0x76, 0x6, {0x3, 0x1, 0x6, 0x7ff}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @preq={0x82, 0x4c, @ext={{0x1, 0x1, 0x1}, 0x1, 0xff, 0x4, @broadcast, 0xfffffffa, @device_a, 0xc3, 0xff, 0x4, [{{}, @broadcast, 0x10001}, {{}, @broadcast, 0x9}, {{}, @device_b, 0x80000001}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x24, 0x3c, 0x8}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x12b, 0x7f, [@measure_req={0x26, 0x97, {0x3, 0x3f, 0x4, "3fbce8e2c982d4e7e73a81d4835ffee8753057fef41964bee506259b588d30dfe31158b65be435f3e900442ac74ce4300c39d1e493725ad4ead4581dafb1f7c79e04bb0e4c74d2fa4e237e339523d4bbf68ea2d252cd5e83fc1a41ae713f6ca3ea6920da5d02e1f44348e073f412f7abf8ca503276c82714253ba7918884a3fb3e9a05898009f91fec871f7e45c2950376e2a02f"}}, @prep={0x83, 0x25, @ext={{}, 0x4, 0x40, @device_b, 0x7, @device_b, 0x4, 0x8, @device_b, 0x5}}, @random_vendor={0xdd, 0x57, "1a1a4ffadf89f895f4ff572d98097de6358bf400a328f137ccb6d2aef1444480dac83570e959012525af9330f3205dac22f94da988dc61c57f0988e243cfa60676fc449f7c4b19eafefb26ab5f014f666611a52bc1985b"}, @challenge={0x10, 0x1, 0x9a}, @ssid={0x0, 0x6, @default_ap_ssid}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_IE={0xd8, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x10, 0x40}}, @supported_rates, @challenge={0x10, 0x1, 0xfc}, @supported_rates={0x1, 0x6, [{0x5, 0x1}, {0x9}, {0x18}, {0x1b}, {0x9, 0x1}, {0x6, 0x1}]}, @fast_bss_trans={0x37, 0x6d, {0x7, 0x1, "ac4c6941369e3b67d8678de6aebd6829", "e5310e0530c29f03b5ac46c9b9c789616fc474159c2c270c3b043070a423de3d", "2374ff5373b0d928cbec74771749faf35b1f70085cda7f6f250870f430fe9265", [{0x1, 0x19, "cc3bddfc353e251be9e4c4934b59510bd5b847bd36732f853b"}]}}, @erp={0x2a, 0x1}, @chsw_timing={0x68, 0x4, {0x2, 0x1}}, @random_vendor={0xdd, 0x36, "11126e2a23e49187b3870289aec4dcf05c37f68419406a9dd0abd89c7fdc8aa23534710840a13ae826b16f8e66895d3ff43246c4fa0a"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x6, 0x1f}}, @cf={0x4, 0x6, {0x7, 0xfb, 0xaa, 0xfffe}}]}, @NL80211_ATTR_FTM_RESPONDER={0x90, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x81, 0x2, "9d960a6b1eebc80796a2122b7ffe640b5932f57b3adfb40c41644440c51e259db2ef99e27961b88d3a0c01a8fc5582bb1f0e667c5a82042c4595e0ca70c6428f16610f05dcf4bad348b77494f55d0b8ff7d2011137b4ce978b835b883743305079daeb72882e9d19a31ef3c500f64fd6756e15a666c58ea8746b5acf97"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@cf={0x4, 0x6, {0x9, 0xfc, 0x81, 0x20}}, @preq={0x82, 0x36, @ext={{0x0, 0x1, 0x1}, 0xff, 0x8, 0x10001, @device_b, 0x2, @device_b, 0x1, 0x80000001, 0x2, [{{0x1}, @device_b, 0x5}, {{0x1}, @broadcast, 0x9}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x94, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x68, 0x5}}, @preq={0x82, 0x41, @ext={{0x0, 0x0, 0x1}, 0x2, 0x5, 0xb45, @device_b, 0x36a, @device_a, 0x8, 0x1, 0x3, [{{0x1, 0x0, 0x1}, @broadcast}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1}, @device_b, 0x10001}]}}, @ibss={0x6, 0x2, 0xf505}, @preq={0x82, 0x41, @ext={{0x0, 0x1}, 0xad, 0x3, 0x7, @broadcast, 0x6, @broadcast, 0x800, 0x0, 0x3, [{{0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x1ff}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}]}, @NL80211_ATTR_PROBE_RESP={0x36a, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x18c, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x1, [{0x6c, 0x1}]}, @measure_req={0x26, 0xba, {0x20, 0x7, 0x0, "627f8f3df1fc1ee175e33a1afef9f9354567c9f453a4a2f3c1825ee6f31884d8215303ec13903d56deec0410f78bd4c71be14d4e9cc95addfff27a1731cc9c09c8a17cf313209cdf734044090f2c1e8f8793d8ebefc1532efbadfcd7286647a01c41a00c5da21361477f75bae43e8c6428020b97d60dd2376b4d0febecefac8997f38293aa565d72b7427bcb93fa8bc7506669b62e3066ae53eb496deea940e6487fc5bc7d2313ef53ff241daaaba1a481706e819601c6"}}, @measure_req={0x26, 0xc4, {0x8, 0x4, 0x3, "a186623f6c144bedc3ce6e8a2d81859c017f97fc1cacfdd1c35fcfd5f66301628019bdb6e11d01d554b6fa96a3838df925363f00e1220912ece832f43c26f9093bc5d4e5e570bf67dc0a69091d98f3d0a172963e0702946a9ca7b1f16a09bc74e29b95f620bf6af6f4d75d2141192c959bdb5f6bcaf0b7fad93e7df767daba2d306a1104ad4af7c4af591f99a07a2bf7809831c7369430497a7c5d60a0b1d91d5e38f1fe59c13ca9bb7c2c824f3a1d0ad76c656df4d38aa0d81b3caf3cb709b261"}}]}, @NL80211_ATTR_BEACON_HEAD={0x2a8, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_a, @broadcast, @random="aea6918231f8", {0x4, 0x2}}, @ver_80211n={0x0, 0xff, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x2, @random=0x7, 0x10, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa5}, @val={0x4, 0x6, {0x6, 0xf7, 0x1, 0x2}}, @val={0x6, 0x2}, @val={0x5, 0x62, {0x9d, 0xa1, 0x9, "fc5acaca9ee746366f70f19cf352f9c2c1b265a55b2ba5195c103981acc0ea2b075db2783ea18dda27c3781f6729e672a083eeee9cfc9df3aef07b11d8aed691774ad8f57c6be2348d2a7ec0e32754f4557b1020ba4fe54dd9c181dcd02f6e"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x3, 0x78, 0x40}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x7f, 0x41}}, @val={0x76, 0x6, {0x5, 0x70, 0x5, 0xf4cb}}, [{0xdd, 0xbb, "667d479d65dd77d7745c3954ade4d3f2fdb15f66fdeb3844fa2596c58808beb59cf750457447f0a332bdf81d10c32febfed962c6ba94440733cfc172eab5fa2542cc225b3c49a7efb0c63318504377242c93f2791fc497ec14abab13a450e07bdc48c2d4826c5c5b8bfbe41bf646c96119bd6f34846e779f2ad130b24e3110683817a616db0f5044ce99dffe11499bf96536c021245935e6379de4eb6365b806b1cda165f065a932116628dfc7de24beca63303aef5a8febc59bf0"}, {0xdd, 0x9a, "5441e4668308b563a45553bdb7ddfad34bc704c46ab097e6cdd6e5d2937fd321210257c361e07d5e1f3537b4aa5c445e90e9053d054b1d4d9df045ab3b7e52fd04519154c0285c7ffbeeca42cf2f1eea3ea2d98a1bd0ee3309697e08babbcd95855dcef16a22afc76d710497d764e6386fcff4e4ab209ff0a90441e98c6bdc63029b2feddcf6dc9c2d34cd7368fef4a4088819df0de228691b5f"}, {0xdd, 0x87, "9656417a3e1cd555651bd4887ef415abca61984b516ae250f47938db4be51ddd26c54543232be35b567abadee791c7c582ab11f2c3cdde72d1bcf56b607d50459fe93c51f8acde7462aefe81f85f57050ed1d6053bf4a06a9d02e4149aae233fd6b658566f97c0e09c1c23e8b96a867f180ce640d0520421d2ed033d65d7308de74c5e9ea628ba"}]}}, @NL80211_ATTR_BEACON_HEAD={0xfd, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x20}, @broadcast, @device_a, @initial, {0x7, 0x2}}, @ver_80211n={0x0, 0x7f6f, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x5b, @random=0xd47, 0x320, @val={0x0, 0x15, @random="f7f2826e05617d72c0a0408fbbe2e8b37a2a3478f0"}, @val={0x1, 0x6, [{0x1}, {0x9}, {0x48}, {0xb}, {0x18}, {0x18}]}, @void, @val={0x4, 0x6, {0x3, 0x20, 0x800, 0x3ff}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0xaf, 0x5}}, @void, @val={0x3c, 0x4, {0x0, 0x3, 0xa9, 0xd2}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x40}}, @void, [{0xdd, 0x3f, "58358c28597eac411aae58c29a1a78fb75f024a8f3cff349db0b51b236955bf921316ba5c909bf98769db649ff8702695a9eeb1abfc41c1a7bf0c06b42ef41"}, {0xdd, 0x47, "c7b5e56e1ef795491651eb8f612ed98486b218f3908420502e533f2e4f149dd3621836c28db02d47bed85e9f7e53e1047367afc4dfab50d5cc41a903bcc4d4abee25e5ab24bd73"}]}}]}, 0xca8}, 0x1, 0x0, 0x0, 0x40804}, 0x40c0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000001080), 0x0, 0x4) 16:56:52 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x1f01}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:52 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20ffd000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:52 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x1e010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:52 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x50ba, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x4, 0x26f, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000300)=0x0) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r4, 0xe5a, {0x0, r1}, 0x8, 0x0, 0x1, {0x0, 0x0, r0}}, 0x3) syz_io_uring_setup(0x3399, &(0x7f00000000c0)={0x0, 0xb7cc, 0x20, 0x2, 0x163, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) 16:56:52 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x2000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:52 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20ffe000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:52 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0xfffffffd}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb5}, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0) 16:56:52 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x1ffff000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:52 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:52 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x2001}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:52 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x40000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:52 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:52 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:52 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0x403452, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0xc0}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) 16:56:52 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x42000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:52 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000100)=[r0, r1, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0], 0x8}, 0x0) r3 = syz_io_uring_setup(0x1c68, &(0x7f0000000140)={0x0, 0x76dd, 0x2, 0x0, 0x3, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x15ce, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x108, &(0x7f0000000000)=0x5, 0x0, 0x4) 16:56:52 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x4000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:52 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:52 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x4, 0x10, 0xfffffffe}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x204001, 0x0) write$tcp_congestion(r0, &(0x7f0000000080)='vegas\x00', 0x6) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:52 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) io_uring_setup(0x5c41, &(0x7f00000000c0)={0x0, 0x17e0, 0x10, 0x3, 0x3e, 0x0, r0}) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:53 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x4200}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:53 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20ff9000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:53 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4a000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:53 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:53 executing program 2: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) io_uring_setup(0x41f4, &(0x7f00000000c0)={0x0, 0x3111, 0x1, 0x0, 0x117, 0x0, r1}) 16:56:53 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x4a00}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:53 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xa0020000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:53 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20ffd000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:53 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0xddf4, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:53 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x6000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:53 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x48000) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:53 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x20ffe000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:53 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xa2020000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:53 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) write$P9_RGETATTR(r0, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x30, {0x20, 0x0, 0x3}, 0x19e, 0xee00, 0xffffffffffffffff, 0x8, 0x1, 0x1, 0xc423, 0x7, 0x4, 0x1, 0x7fff, 0x1, 0xff, 0x3f, 0x0, 0x200, 0x10001, 0x1ff}}, 0xa0) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x1, 0x0, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r2 = io_uring_setup(0x1af5, &(0x7f00000000c0)={0x0, 0xa1bb, 0x4, 0x0, 0x67, 0x0, r1}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3) syz_io_uring_setup(0x29f8, &(0x7f0000000300)={0x0, 0xb0e0, 0x4, 0x3, 0x34b, 0x0, r2}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) 16:56:53 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x6601}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:54 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:54 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xe601}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:54 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfeffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:54 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x40000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:54 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002840)={&(0x7f0000001700)={0x1138, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x75}}}}, [@NL80211_ATTR_TESTDATA={0x8e, 0x45, "97add4b28d06f3e15b43f06eba73760feb9666f036aa37d1dbece75d6cd9ad0b2070ed31671277fc263aa3b11be1c3a1d07ea5c514c89fc28d41ea92fd3f911ac4e362f8a0e05154bab3977d9b78c99ad462c07654038e697c1287a2b8021f6b9a20bc0c75cd227c1c8a138174007cae12d5eac088479dbea605909fc1e5dcafa4cfee4dd3e4d9f58852"}, @NL80211_ATTR_TESTDATA={0x3b, 0x45, "71708f92ea4e3732914bd667aa682028dc3ccdb93e4e4cf5f37cb0c0ed8dcf62fa33c34ae9c5fb05df23991dcbea90f9bfff94c498b814"}, @NL80211_ATTR_TESTDATA={0x48, 0x45, "08adb9bae25ea972cf75545a7d44d3a25810024db3a4813e9d40127aa3bb89375429d5b0f286844b49dc377f23e066f12cbd64bd9808bbe6741aa05a197504558b0208a2"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x1138}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x100010, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000001640)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)="d5aec01d4b6bb79858045c9067e8a46207c7a0570296206e17bc012b431b4bbe39052e8a7476966ab43e8d46677585cc2ec4549269f01422a655080ce810babe6dc2736c83a63229791578d7f33b0b3260dcf25a7400f721adec2fb3a9c0beaea0f385fae0b9039ff37d0383110be4501df00265b388c69a8d6a50ada88652551e88130514160d48ec17252ad72cc0cda44d8fa9b4c24f1656e766dc29c293f113d6a82cca39cb37deca5806594c7dc69d3c9c8f60fd5afd6aaaf74ce1db9fedcafb90122494d635c394bf878f4f4e79d7ea3d4086", 0xd5}, {&(0x7f0000000400)="47923fbaa83705ba4d24eb9cf5a602eb6021260c65d10fd72d25fd22087213cfa123ebff5f575a58bd772ad1dcc1034cb2d1ebbf71fcb684987d63ca2073b932a522aa90ff6a354306c99d89912b85984557055646b633ca0a17775b03dcef7d425093895110ec9a71820f86b25c1fdac5e870ed6768797115e122b87a0f124658", 0x81}, {&(0x7f00000000c0)="07163856549cf946e9e4dcece67f23b5f69163599b3ed2aeb8a8be1a3a9011db17d5a3b5703c4a0a4245b0b25325f0d5d68041b69a953578205337ff10198c2976396beaa140eab87d50baf39c0b5022749bd4ed770460ea45", 0x59}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000000)="085a2cf5d2c36c90c860abb1503e257fadae620db7365dbd0421d83358d864d80f345f18016d94b328cd3d56044650a7", 0x30}, {&(0x7f00000014c0)="e7efaed96f832cd406cd49b51fde434b6b47f92f953d59bd2e8a1e532335d1373197cd5cc3b9390e55c2f8196d210843b38ea42704c0c07bb169142726c02ee2aa24d952c64aec40255ce3b2820dcc54f64a15ada11b226972ce2d39636e7769f9b5c2e505e5539c5451533a891fdee3564ab44eddf9f773c75e94966198962b0d0aaf4536f2f443928784687744cbf6871fb2bd731358523b8303b58ff503d04d5c", 0xa2}], 0x6, &(0x7f0000000200)=[{0x38, 0x10f, 0x6, "24a3c37ba5b1bd2e3769810335ce0d80ba4ba5070ee2fe2e4314f533ed5a0f39cf20cbcfaa1c57"}], 0x38}, 0x0, 0x8000}, 0x4800) 16:56:54 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xffff8000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:54 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x101ff}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:54 executing program 1: r0 = syz_io_uring_setup(0x402e, &(0x7f00000001c0)={0x0, 0x94a2, 0x4, 0x1, 0x165}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) syz_io_uring_complete(r1) 16:56:54 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x42000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:54 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x4200, 0x0) io_uring_setup(0x2a83, &(0x7f0000000300)={0x0, 0x4000fb85, 0x8, 0x3, 0x277}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r0, 0x9}) r2 = syz_io_uring_setup(0x2fad, &(0x7f0000000140)={0x0, 0xa0df, 0x1, 0x0, 0x170}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r2, 0x8000000) 16:56:54 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xffffc000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:54 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x80000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:55 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:55 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)) r2 = syz_io_uring_complete(r1) write$P9_ROPEN(r2, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x4, 0x3}, 0x6b1}}, 0x18) 16:56:55 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:55 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x100000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:55 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x48010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:55 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x400000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:55 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000000)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2a0125bd7000fbdc01010000000000000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb562a9f91d6a87145306a118da4d8a7e192aedee9a97f185a4d517033472815a76fd69ded38a10bf39de5fff407dd3e1d28a9f8405341ae4928816b1b1708574e85e44"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x4008840) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) io_uring_setup(0x7791, &(0x7f00000000c0)={0x0, 0x2f53, 0x10, 0x0, 0x28, 0x0, r1}) 16:56:55 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 16:56:55 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x600000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:55 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4a000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:55 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:55 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f00000000c0)=@target={'target ', {'PCI:', '0', ':', '11', ':', '2', '.', '18'}}, 0x15) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:56 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:56 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:56 executing program 2: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) syz_io_uring_setup(0x935, &(0x7f0000000140)={0x0, 0x80000002, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:56:56 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x4a010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:56 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x80ffff}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:56 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x1cc, &(0x7f00000000c0)=0x4, 0x0, 0x4) 16:56:56 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfeffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:56 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xc0ffff}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:56 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x20, 0x0, 0x3}, 0x8}}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x800) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x3}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:56 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:56 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xffff8000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:56 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x103a, &(0x7f00000000c0)={0x0, 0xc4ec, 0x10, 0x1, 0x183, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5}, 0x5) 16:56:57 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0) 16:56:57 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:57 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:57 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xd0ff20}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:57 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xffffc000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:57 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xf0ff1f}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:57 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x7}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:57 executing program 2: r0 = syz_io_uring_complete(0x0) write$P9_RWRITE(r0, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x100000}, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) write$P9_RWSTAT(r0, &(0x7f0000000580)={0x7, 0x7f, 0x2}, 0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x52f2, &(0x7f0000000240)={0x0, 0xa051, 0x0, 0x4000000, 0x7d, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) r3 = syz_io_uring_complete(r2) syz_io_uring_setup(0x5ab9, &(0x7f00000000c0)={0x0, 0x0, 0x34, 0x1, 0x2033e, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = syz_io_uring_complete(r2) write$P9_RSTATFS(r4, &(0x7f00000003c0)={0x43, 0x9, 0x2, {0x8c14, 0xd0c, 0x2a19, 0xff, 0x8, 0x20, 0x800, 0x2, 0x4}}, 0x43) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x0) syz_io_uring_setup(0x2215, &(0x7f0000000300)={0x0, 0xf3ed, 0x4, 0x2, 0x2ff, 0x0, r5}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x2d8}, @NL80211_ATTR_IE={0x3a, 0x2a, [@supported_rates={0x1, 0x2, [{0x1b}, {0xb, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe0, 0x80, 0x8}}, @supported_rates={0x1, 0x8, [{0x4}, {0x9}, {0x14}, {0x16, 0x1}, {0x1}, {0x48}, {0x6c}, {0x1a}]}, @ht={0x2d, 0x1a, {0x800, 0x1, 0x1, 0x0, {0x1, 0x1ffe, 0x0, 0x80, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x9, 0x95}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xc, 0x2}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x240c4010}, 0x4000004) 16:56:57 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x1000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:57 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:57 executing program 1: select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 16:56:57 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:58 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0) 16:56:58 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x8}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:58 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:58 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x134, &(0x7f0000000200)={0x0, 0x8a58, 0x21, 0x3, 0x4d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000280)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000002, 0x10010, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_NOP={0x0, 0x5}, 0x4) syz_io_uring_setup(0x3452, &(0x7f00000000c0)={0x0, 0x0, 0x34, 0x3, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:58 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x2000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:58 executing program 1: r0 = syz_io_uring_setup(0x4672b, &(0x7f00000000c0)={0x0, 0x80000, 0x10, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5}]}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000000), 0x0, 0x4) select(0x40, &(0x7f0000000040)={0x0, 0xffbffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)={0x8, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xb2}, 0x0) 16:56:58 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x2040000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:58 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:58 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:58 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5bd52d007c41836d44d0d8192d7aa8defeb600e4fd4729dd08bf71085e21566eb66e703eddc27d74d11a0dcf553423b7706fa600000000000000000029ffa62b8606a80482b37402b5d86f041bdcf3cc51df0f242534c4", @ANYRES16=0x0, @ANYBLOB="080b25bd7000ffdbdf250600000005003300020000000800390007000000050033000000000006002800010000000500380001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008042) r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:58 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x4000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:58 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:58 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, 0x0, 0x0) 16:56:58 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x6040000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:58 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x42}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:58 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r0 = syz_io_uring_setup(0x52f4, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) io_uring_setup(0x3419, &(0x7f00000000c0)={0x0, 0x86bf, 0x4, 0x1, 0x230, 0x0, r1}) epoll_create(0xffff) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:58 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:59 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:56:59 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x7000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:59 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4a}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:59 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x2, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:56:59 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x7}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:59 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1812090}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4e200000efcb57648b352a088d03ae613c6cf0a15b7ba15d5ec95d0b5e663cc89c20262793ba7882085e0b2302c5ffdf2c6e0f1e33c5df1c5df2b729ac4727729833763f0a8e6a912f3325c1abecced775c0f12e2fe071a71bd68befba1dcaf2530161", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf250a00000008003a004c00000008003a0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xc880) 16:56:59 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x8000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:59 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180), 0x0) 16:56:59 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84c7104}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x101, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_setup(0x6a3a, &(0x7f0000000300)={0x0, 0x7558, 0x8, 0x3, 0x29a, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:59 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x60}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:59 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x8}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:59 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x10000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:59 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x11e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:56:59 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x323, &(0x7f00000000c0)={0x0, 0x84f9, 0x0, 0x0, 0x29d}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRWALK(r5, &(0x7f0000000400)={0xf, 0x1f, 0x1, 0x7fff}, 0xf) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x80000000, 0x1, 0x0, {0x0, 0x0, r1}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 16:56:59 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x1f010000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:56:59 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x10}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:00 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x120}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:00 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x8, 0x0, 0xffff, 0x3, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd}, 0x0) 16:57:00 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x1ffff000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:00 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180), 0x0) 16:57:00 executing program 2: r0 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) io_uring_setup(0x2b7e, &(0x7f0000000140)={0x0, 0x78ec, 0x0, 0x0, 0x201, 0x0, r0}) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000080)=@ipx, 0x0, 0x1400}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x7, 0x7fffffff, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x20, 0x8, 0x7}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000026698c254b8082d6c964f0a2f29f24f31f12d22ce6f1dfd8a4ae25d0355b4b35e2ebae246fc1", @ANYRES16=r4, @ANYBLOB="20002dbd7000fcdbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="0a0009000180c20000010000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x81) 16:57:00 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x20000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:00 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x42}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:00 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x204}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:00 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x20010000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:00 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2a0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:00 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4a}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:00 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x20ffd000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:00 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_io_uring_setup(0x4389, &(0x7f0000000d80)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000680)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r3, 0x6, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000200)=""/17, 0x11}], 0x7, 0x8, 0x561220d366a60550}, 0x80000001) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r5, r2, &(0x7f0000000d40)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000740)=""/198, 0xc6}, {&(0x7f0000000840)=""/96, 0x60}, {&(0x7f00000008c0)=""/243, 0xf3}, {&(0x7f00000009c0)=""/189, 0xbd}, {&(0x7f0000000a80)=""/92, 0x5c}, {&(0x7f0000000b00)=""/116, 0x74}, {&(0x7f0000000b80)=""/8, 0x8}, {&(0x7f0000000bc0)=""/126, 0x7e}], 0x9}, 0x0, 0x40010001, 0x0, {0x1}}, 0x1) 16:57:00 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:00 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x40000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:00 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2a2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:01 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180), 0x0) 16:57:01 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x60}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:01 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x2bef, &(0x7f00000000c0)={0x0, 0x3c01, 0x4, 0x0, 0x3, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) 16:57:01 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x402}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:01 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x42000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:01 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x4a000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:01 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r1, 0x0) 16:57:01 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x11e}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:01 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x406}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:01 executing program 1: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x8000000) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12, 0x12, r0, 0x8000000) syz_io_uring_setup(0x86f, &(0x7f00000001c0)={0x0, 0x8a6f, 0x14, 0x2, 0x155, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0xc0, &(0x7f0000000240)=0x1418067c, 0x0, 0x4) syz_io_uring_setup(0x21da, &(0x7f00000003c0)={0x0, 0x575c, 0x4, 0x0, 0x186, 0x0, r0}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x1, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r0, 0x8000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000380)={r4, 0x1, r0, 0xff, 0x80000}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) io_uring_setup(0x6178, &(0x7f0000000280)={0x0, 0x72b, 0x20, 0x0, 0x73, 0x0, r3}) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 16:57:01 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:01 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x148}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x7df1, &(0x7f00000002c0)={0x0, 0xfaa4, 0x8, 0x0, 0xfffffffd, 0x0, r0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000000), 0x401) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000200)=0x10) 16:57:02 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x66010000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:02 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x600}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x14a}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000e2abd7000fddbdf25010000000000000008410000004c001800670fff62726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x45}, 0x20004011) 16:57:02 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xe6010000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:02 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x604}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x0) 16:57:02 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x204}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:02 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xfeffffff}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:02 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x700}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x402}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xff010100}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:02 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) 16:57:02 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x1e01}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:02 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:03 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0xfffffffd}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:03 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xffff8000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:03 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x406}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:03 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) gettid() syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:03 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:03 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:03 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xffffc000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:03 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x10003452, &(0x7f00000000c0)={0x0, 0x200, 0x1, 0x0, 0x88, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:03 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x600}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:03 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:03 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2001}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:03 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x604}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0xfffffffe}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:04 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x20003452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x3, 0xfffffffe, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x410c013, r0, 0x0) syz_io_uring_setup(0x488, &(0x7f00000000c0)={0x0, 0x64e0, 0x1, 0x0, 0x2db, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) r1 = inotify_init() fstat(r1, &(0x7f0000000300)) 16:57:04 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x700}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x80, 0x0, 0x922, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x89}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x20008400) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x45) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r4 = syz_io_uring_complete(0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c4}, 0xc0) 16:57:04 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4200}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340), &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:04 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x1e01}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 2: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x7f, 0x2, 0xb, @mcast2, @rand_addr=' \x01\x00', 0x80, 0x0, 0x1, 0x40b}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000200)={'tunl0\x00', r0, 0x8000, 0x7, 0x0, 0x1, {{0x6, 0x4, 0x3, 0x21, 0x18, 0x67, 0x0, 0xff, 0x4, 0x0, @broadcast, @loopback, {[@end]}}}}}) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:04 executing program 0: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:04 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x8081, 0x17, 0x7, 0x5, {{0x7, 0x4, 0x3, 0x30, 0x1c, 0x67, 0x0, 0x4, 0x2f, 0x0, @local, @empty, {[@ssrr={0x89, 0x7, 0xea, [@empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r1, @ANYBLOB="780080477fffffff0000004045250054006800007f0490780a010102e000e80194040100040c2f83640101010000001d8307a6000000008327cbac14140eac14140aac14142be00000017f00000100000000000000007f0000010000"]}) r2 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2b90, &(0x7f0000000a80), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000b00), &(0x7f0000000b40)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = syz_io_uring_setup(0x2832, &(0x7f00000000c0)={0x0, 0x53a0, 0x10, 0x0, 0x131, 0x0, r2}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000300), 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000006, 0x8010, r5, 0x0) 16:57:04 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4a00}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:04 executing program 0: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x800000010, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000180)={0x70a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0) 16:57:05 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:05 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000000)=0x9, 0x0, 0x4) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:05 executing program 0: syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x6000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x7}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:05 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x4, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) 16:57:05 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xa002}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000180)={0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10007}, 0x0) 16:57:05 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x8}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:05 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xa202}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:05 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4200}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3c4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8000, 0x80, 0x3, 0x2, {{0x57, 0x4, 0x0, 0x37, 0x15c, 0x66, 0x0, 0xf7, 0x29, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x4c, 0xd, 0x3, 0x2, [{@multicast2, 0x4}, {@private=0xa010101, 0xfffffffc}, {@local, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3a0a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x6}, {@local, 0x8}, {@loopback, 0x3}, {@empty, 0x4}]}, @cipso={0x86, 0x5d, 0x3, [{0x1, 0x6, "c4babb64"}, {0x2, 0xc, "bb7e0a5abcc4e58343ff"}, {0x0, 0x12, "83d0612725cae10a996d73a3b61119f1"}, {0x6, 0xe, "371aeeb52c2725ae1d5d8615"}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x5, "ddfada"}, {0x5, 0x9, "03759f9dc1c4ba"}, {0x0, 0x11, "259924c37db4145f7d6f5427cf7a8b"}, {0x0, 0x2}]}, @timestamp={0x44, 0xc, 0x68, 0x0, 0x3, [0xffff599e, 0x6]}, @timestamp_addr={0x44, 0x4c, 0x79, 0x1, 0x5, [{@empty}, {@remote, 0x7}, {@empty, 0x7f}, {@empty, 0x40}, {@multicast1, 0xe3}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010102, 0x36}, {@rand_addr=0x64010100, 0x7}]}, @timestamp_addr={0x44, 0x44, 0xf5, 0x1, 0x1, [{@loopback, 0xffffffa7}, {@rand_addr=0x64010102, 0x101}, {@multicast2, 0x5}, {@multicast1, 0x5}, {@local, 0xfff}, {@rand_addr=0x64010100, 0x7}, {@local, 0x3}, {@multicast2, 0x7f}]}]}}}}}) syz_io_uring_setup(0x7527, &(0x7f0000000240)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_complete(r2) 16:57:05 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x80000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:05 executing program 0: syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 1: ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0xffff, 0x0, 0x1, 0x2}) syz_io_uring_setup(0x4662e, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) syz_io_uring_setup(0x7d3c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd=r1, 0x37fa, &(0x7f00000001c0)=""/153, 0x99, 0x1, 0x1}, 0x3) 16:57:05 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4801}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 0: syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:05 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3450, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x34, 0x0, 0x127}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1f, &(0x7f0000000240)={0x77359400}) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000200)=0x4, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x2, 0x2}) 16:57:06 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x42}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:06 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x400000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4a00}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 0: syz_io_uring_setup(0x4662b, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) 16:57:06 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x4a}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:06 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x600000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4a01}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) pipe2$9p(&(0x7f0000000000), 0xa4d793c35d3774ee) 16:57:06 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8000c8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x344f, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 16:57:06 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x60}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:06 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x80ffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x6000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x208080, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000100)={0x800}) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000200)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000300)=0x5) 16:57:06 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x11f}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:06 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x90ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:06 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x80000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:07 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xc0ffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:07 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf25010000000c00020001800000000000009387b1964bf8ee30909e40af0c3cfc526c1dcc268ab89ca40f9d9b345bf3b963e45970a539e9a116ff60f87c5f99b253db94c71dc7775086028393a564c7b6c2d6084d26a8feb2bddabbee01c553f8841ededa522ce460c1edfdc61f283b1f95bc403b5b2315d6b40aa2231b2800e1a3304fe3daf18611ca2e37ded0cdc1d8c00bfd680793338502288600c303c86b5ca7c82790be4190f394a5e589c0164b068b2b35b7df00"/202], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:07 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x400000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:07 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x120}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:07 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:07 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0xc779, 0x0, 0x0, 0x227}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000001c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1, &(0x7f0000000440)={0x0, 0xf98c, 0x2, 0x2, 0x19f, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000004c0)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x26880, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r1, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r4, 0x0, r5}, 0x9) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf2514000000080001000100000008001c00", @ANYRES32, @ANYBLOB="88c2a98d54be28dbf0858eb009a6475d3acd11636a8da283217840c1265b597bf187bd892673440d5160ad2440c22864f679eaec39a906322fe97489d080790ff8ba1b93461a9fd9cfdcf2dece0ac24bdeb0b34567eb793c946680f8d0706925bcdb3bcfa30965d4a1a4210c92ce057f661b0480cfce1a3f4ae966ebc716145f758ae9a4a91a5191b721df58750a779f3619c868c9ed933ef73628ca7c393d85a54d795af188b6cc48d5773d6939"], 0x24}, 0x1, 0x0, 0x0, 0x12}, 0x4000) syz_io_uring_setup(0x3452, &(0x7f00000005c0)={0x0, 0x0, 0x34, 0x3, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000040)) 16:57:07 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xd0ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:07 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x166}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:07 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:07 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x600000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:07 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x14f0, &(0x7f00000000c0)={0x0, 0xe087, 0x0, 0x3, 0x15a, 0x0, r0}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x412740, 0x0) syz_io_uring_setup(0x607, &(0x7f0000000340)={0x0, 0x8636, 0x8, 0x1, 0x1ca, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0xc4e5f9328bf25c31, r1, 0x0) 16:57:07 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xe0ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:07 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x1e6}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:08 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:08 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:08 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x80ffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:08 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xf0ff1f}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:08 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x204}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:08 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x2, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:08 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x402}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:08 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x1000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:08 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:08 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x90ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:08 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x339e, &(0x7f00000000c0)={0x0, 0x661f, 0x8, 0x0, 0x246, 0x0, r0}, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:08 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x406}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:09 executing program 1: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2004, @fd_index=0xa, 0x8000, &(0x7f00000001c0)=""/187, 0xbb, 0x5, 0x1}, 0x1f) r1 = syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) r3 = inotify_init1(0x80000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000000, 0x2010, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000280), 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0xffffffffffffffff, r3, r0, r6], 0x4, 0x0, 0x1}, 0x9) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8, 0x2}, 0x0) 16:57:09 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x604}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:09 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10c, &(0x7f0000000080)=0x7, 0x0, 0x4) 16:57:09 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:09 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:09 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xc0ffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:09 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xd0ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:09 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x3c9, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) arch_prctl$ARCH_GET_CPUID(0x1011) 16:57:09 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:09 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x700}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:09 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2040000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:09 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x1f01}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:10 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, 0x0, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:10 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xe0ff20}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:10 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x2eee, 0x0, 0x0, 0x118}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:10 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:10 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x2000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:10 executing program 1: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000400)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x3, 0x7, 0x4, 0x7, {{0x2b, 0x4, 0x2, 0x3, 0xac, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0xa, [{@private=0xa010101, 0x7f}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0x56, 0x3, 0x9, [{@local, 0x18f}, {@remote, 0xfffffff7}, {@broadcast, 0x6}, {@private=0xa010102}, {@multicast1, 0x1fcd}, {@multicast1, 0x800}, {@rand_addr=0x64010101, 0x7}, {@local, 0x1}, {@empty, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x8000}]}, @timestamp_prespec={0x44, 0x34, 0xa4, 0x3, 0xc, [{@broadcast, 0x9}, {@multicast2, 0xb503}, {@rand_addr=0x64010101, 0x1}, {@private=0xa010100, 0xca63}, {@loopback, 0x6}, {@private=0xa010102, 0x7}]}]}}}}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xa0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4051}, 0x0) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:10 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x80, 0x0, 0xaab9ed6b2c78f9ba, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x80000001, 0x1, 0x3, 0x4]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe8d9}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf3b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000891) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:10 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x2001}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:10 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:10 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xf0ff1f}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:10 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x6000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:10 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={0x0, 0x9, 0x4}) r1 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:10 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:10 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x4000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:10 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x4200}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:10 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x6040000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 1667.285019][T27223] ================================================================== [ 1667.293235][T27223] BUG: KCSAN: data-race in netlink_insert / netlink_sendmsg [ 1667.300562][T27223] [ 1667.302869][T27223] write to 0xffff88811e1b5330 of 1 bytes by task 27224 on cpu 1: [ 1667.310565][T27223] netlink_insert+0x5b5/0x7f0 [ 1667.315229][T27223] netlink_autobind+0xa9/0x150 [ 1667.319974][T27223] netlink_sendmsg+0x48a/0x7d0 [ 1667.324719][T27223] ____sys_sendmsg+0x39a/0x510 [ 1667.329476][T27223] __sys_sendmsg+0x244/0x2c0 [ 1667.334049][T27223] __x64_sys_sendmsg+0x42/0x50 [ 1667.338804][T27223] do_syscall_64+0x44/0xa0 [ 1667.343204][T27223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1667.349106][T27223] [ 1667.351410][T27223] read to 0xffff88811e1b5330 of 1 bytes by task 27223 on cpu 0: [ 1667.359031][T27223] netlink_sendmsg+0x281/0x7d0 [ 1667.363783][T27223] __sys_sendto+0x302/0x3e0 [ 1667.368281][T27223] __x64_sys_sendto+0x74/0x90 [ 1667.372940][T27223] do_syscall_64+0x44/0xa0 [ 1667.377347][T27223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1667.383232][T27223] 16:57:11 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:11 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xfffffffd, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) 16:57:11 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:11 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x1000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:11 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x7000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:11 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x4a00}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1667.385536][T27223] value changed: 0x00 -> 0x01 [ 1667.390274][T27223] [ 1667.392576][T27223] Reported by Kernel Concurrency Sanitizer on: [ 1667.398699][T27223] CPU: 0 PID: 27223 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 1667.407441][T27223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.417476][T27223] ================================================================== 16:57:11 executing program 2: r0 = io_uring_setup(0xf7b, &(0x7f00000000c0)={0x0, 0x49de, 0x20, 0x0, 0x164}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x8010, r0, 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:11 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:11 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x6000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:11 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:11 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x8000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:11 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, 0x0, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:12 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x725040, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x1}, 0x7) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000140)) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x20000000000002, 0x40000000000, 0x1}, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 16:57:12 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x2040000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:12 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x6601}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:12 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:12 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x6ea8, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x200840, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e8cf2bd875c2d6", @ANYRES16=r3, @ANYBLOB="010026bd080000000000000000000000000007410000004c00180000000462726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x13, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2a, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008001}, 0x4010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 16:57:12 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x10000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:12 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:12 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:12 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0xe601}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:12 executing program 2: syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:12 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x1e010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:12 executing program 2: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x6df8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x4, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x45c}, 0x1}, 0xbd) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_setup(0x2afc, &(0x7f00000000c0)={0x0, 0x4fe4, 0x8, 0x2, 0xbc, 0x0, r3}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000300)) 16:57:13 executing program 1: r0 = syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) clock_getres(0x1, &(0x7f0000000140)) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x10) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x100000a, 0x80010, r0, 0x8000000) r2 = syz_io_uring_complete(r1) io_uring_setup(0x3778, &(0x7f0000000200)={0x0, 0xa733, 0x10, 0x0, 0x314, 0x0, r2}) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) 16:57:13 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:13 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x101ff}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:13 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x6000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:13 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x1ffff000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:13 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0xdbcf, 0x0, 0x2, 0x200000}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:13 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x6040000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:13 executing program 2: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/99, 0x63, 0x393d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000380)={0x43, 0x9, 0x1, {0x6, 0x9, 0x0, 0x820, 0x1, 0x100000000, 0x800, 0x8, 0x101}}, 0x43) 16:57:13 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:13 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x80000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:13 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:13 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x7000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:14 executing program 1: syz_io_uring_setup(0x2df4, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) select(0x40, &(0x7f0000000000)={0x200, 0x6, 0x8, 0xad, 0x80000001, 0x100, 0x5, 0x2}, &(0x7f0000000080)={0x3, 0x580, 0x183e, 0x5, 0x6, 0xf2a7, 0x7, 0x4}, &(0x7f0000000140)={0x5, 0x4, 0x7f, 0x401, 0x5, 0x5, 0xaac, 0x4}, &(0x7f00000001c0)={0x77359400}) 16:57:14 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x4000, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:14 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x100000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:14 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:14 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:14 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x8000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:14 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x10000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:14 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @ipx={0x4, 0x6, 0x3f, "7a7720873855", 0x20}, @isdn={0x22, 0x9, 0xe9, 0x5, 0x9}, @hci={0x1f, 0x3, 0x3}, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa3ab, 0x2, 0x200}) prctl$PR_GET_SECUREBITS(0x1b) 16:57:14 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, 0x0, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:14 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20ff9000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:14 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x400000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:14 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x1e010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:15 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x40000000000, 0xcf4, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)={0x8, 0x9, 0x0, 0x8, 0x2}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44000) write$P9_RVERSION(r0, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x447, 0x8, '9P2000.L'}, 0x15) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x309000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) write$P9_RREMOVE(r0, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) pselect6(0x40, &(0x7f0000000000)={0x8, 0xffff, 0x2, 0x40, 0x806, 0x2c6, 0x6, 0x3}, &(0x7f0000000080)={0x100000000, 0x5, 0x1, 0x7, 0xc84, 0xe250000000000, 0x2, 0xffffffff}, &(0x7f0000000140)={0x81, 0xfffffffffffffff7, 0x8, 0x2, 0x6, 0x401, 0x3f, 0x80000000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0xd43]}, 0x8}) 16:57:15 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:15 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5775, &(0x7f0000000140)={0x0, 0x1000000, 0x20, 0xffff7fff, 0x22002}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:57:15 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x600000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:15 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20ffd000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:15 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x1ffff000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:15 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x80ffff}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:15 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20ffe000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:15 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 16:57:15 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:15 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0xc0ffff}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:15 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x4004, @fd=r0, 0x1ff, &(0x7f0000000000), 0x0, 0x6, 0x1}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x4260, 0x34, 0x0, 0x0, 0x0, r3}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x20, 0x7800, 0x9, 0xff, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @loopback, {[@end]}}}}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcfdf}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48084}, 0x10) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:16 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20ff9000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:16 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 16:57:16 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x40000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:16 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0xd0ff20}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:16 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_setup(0x5bb5, &(0x7f00000000c0)={0x0, 0x30e6, 0x4, 0x0, 0x246}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200)) 16:57:16 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20ffd000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:16 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0xf0ff1f}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:16 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x42000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:16 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) 16:57:16 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x1000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:16 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) 16:57:17 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x20ffe000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:17 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x2000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:17 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4a000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:17 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 16:57:17 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MDID={0x6}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xcc}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x44}, 0x1, 0x0, 0x0, 0xc841}, 0x4800) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x2000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:17 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_setup(0x1e78, &(0x7f00000000c0)={0x0, 0xff6e, 0x4, 0x3, 0x379, 0x0, r2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)=0x0) r4 = epoll_create(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4}, 0xed) 16:57:17 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x2040000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:17 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 16:57:17 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r1 = io_uring_setup(0x7690, &(0x7f00000000c0)={0x0, 0x89e3, 0x0, 0x1, 0x268, 0x0, r0}) syz_io_uring_setup(0x79c8, &(0x7f0000000300)={0x0, 0xb97c, 0x20, 0x2, 0x249, 0x0, r1}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xac54, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) 16:57:17 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xa0020000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:17 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x40000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:17 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x4000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:17 executing program 0: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), 0x0) 16:57:17 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xa2020000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:17 executing program 2: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:57:17 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x6040000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:17 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x9}, 0xf) syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) select(0x40, &(0x7f0000000140)={0x2, 0x1, 0x6, 0xc5c, 0x2, 0x400, 0x9, 0x9}, &(0x7f00000001c0)={0xd6ac, 0xfffffffffffffff8, 0x4, 0x6, 0x101, 0x6, 0x4, 0x800000000000000}, &(0x7f0000000200)={0x9f, 0x10000, 0x100000000, 0x589, 0x2, 0x2, 0x2, 0xe9}, &(0x7f0000000240)) write$P9_RSETATTR(r0, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) 16:57:17 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xfeffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:17 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x42000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:17 executing program 0: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x400000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:17 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1d}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x804) syz_io_uring_setup(0x3ff8, &(0x7f00000000c0)={0x0, 0x944a, 0x0, 0x3, 0x240, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200)) 16:57:17 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x7000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:17 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x48010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:18 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xffff8000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:18 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x8000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:18 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/99, 0x63, 0x393d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000380)={0x43, 0x9, 0x1, {0x6, 0x9, 0x0, 0x820, 0x1, 0x100000000, 0x800, 0x8, 0x101}}, 0x43) 16:57:18 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4a000000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:18 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x0, 0x3}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000440)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x8, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r5 = syz_io_uring_setup(0x3d3c, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x2000000, 0x330}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)) io_uring_setup(0x13de, &(0x7f0000000480)={0x0, 0x9e15, 0x20, 0x2, 0x168}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000003, 0x10, r3, 0x8000000) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2, 0x80010, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000ac0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r7, 0x0, &(0x7f0000000a80)={&(0x7f0000000600)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000400)=""/27, 0x1b}], 0x4, &(0x7f0000000980)=""/234, 0xea}, 0x0, 0x40011003}, 0x2) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x0) accept4$packet(r7, &(0x7f00000000c0), &(0x7f00000003c0)=0x14, 0x80000) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_io_uring_submit(r8, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x2, 0x4007, @fd_index=0x7, 0xafaf, &(0x7f0000000500)="5589670738a024ead3c8c4453c21d30c179ca989fd43008d682d94fe28d9790415a167b7f6b52a372f61be83b40a324fa8c473d837f3ab0c9bc75022057965176ac49152a5f5a8de4714ea2b988ec381db1563dcf0ecd6a50bd56ec40422178ac40a52d6291b2ee0d6e56b36267f7c2e3cccffa22e089425613c574b238931aa39dfba3db5e76441854c536a186632022e5fb5150d2d0e1569606eccdd787c82b7a2b67cdaf00b2e8bdef2b4eb08b25f853385d3c18548b1fd47a83e02add1da2191eacb721c9880b770bbe8224e04b52574bd758602199fd85ea3f1f0c3", 0xde, 0x3}, 0xfffef801) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r6, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r9, 0x0, &(0x7f0000000300)="f352fb39d7be8121952aa4ea63585ac7333f9e2900eaa2405700b2a67645091f562a104174fef9bdbe373c6ce1d61dffe58ee8dfb759fa2aede4815548f3a090dc8482b9c5aaf36a823db82d29e9fc07c4dfad44e841e0fca88941d62e38e84ca194b3c232b7d4b8fb4fa0566a620855715b532378096d0ea69f6ecafbe2a775b7cfd2a4b02a01a2c0c8e314ac7ca5333ee580961c4ac62f23a289f9", 0x9c}, 0x3ff0) 16:57:18 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x6e51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)={0x8}, 0x0) 16:57:18 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x10000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:18 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/99, 0x63, 0x393d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000380)={0x43, 0x9, 0x1, {0x6, 0x9, 0x0, 0x820, 0x1, 0x100000000, 0x800, 0x8, 0x101}}, 0x43) 16:57:18 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xffffc000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:18 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x4a010000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:18 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) 16:57:18 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x7d3c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0xfffff801) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000000), 0x0, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x400181, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000300)={0x8001, 0xc4cf}) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r0, 0x8000000) 16:57:18 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/99, 0x63, 0x393d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000380)={0x43, 0x9, 0x1, {0x6, 0x9, 0x0, 0x820, 0x1, 0x100000000, 0x800, 0x8, 0x101}}, 0x43) 16:57:18 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:18 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x1f010000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:19 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xfeffffff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:19 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:19 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 16:57:19 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/99, 0x63, 0x393d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x0) 16:57:19 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x1ffff000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:19 executing program 2: r0 = syz_io_uring_setup(0x52f0, &(0x7f0000000300), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0xc, 0x45, "503ccb5936b6adf4"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x301a80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x12, r2, 0x0) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x25, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)) 16:57:19 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:19 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xffff8000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:19 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xffffc000}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:19 executing program 2: r0 = syz_io_uring_setup(0x52f5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x402000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000300), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) syz_io_uring_setup(0x58f0, &(0x7f00000000c0)={0x0, 0x25db, 0x20, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200)) 16:57:19 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:19 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/99, 0x63, 0x393d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) 16:57:19 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x20000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:19 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0xfffffffe}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:20 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/99, 0x63, 0x393d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) 16:57:20 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) io_uring_setup(0x10e5, &(0x7f00000005c0)={0x0, 0x1b77, 0x8, 0x5, 0x46}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x22040, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000300)={0x2}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000000)={r3, 0x100000000, 0x3}) syz_io_uring_setup(0x77e0, &(0x7f0000000400)={0x0, 0x930e, 0x10, 0x1, 0x92, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000480)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000004c0)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2000, @fd=r6, 0x9, 0x100, 0x7, 0xc, 0x0, {0x3}}, 0x8000) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r7 = gettid() syz_open_procfs$namespace(r7, 0x0) sched_rr_get_interval(r7, &(0x7f0000000500)) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r8, 0x0) write$nbd(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="6744669800000000010001000100000090c81c6259cd01407ee95863f972f8b7fd9c1a49ac373075e8d99c952b7ae47743fadee382e124cca9c35f5653c5a4cbbd8c0b8c2ae316fb679661b776408dd8d642528052dbacd0a8e02c3c0b97f3bce4ea5352253fdd83a4606bdc66989f5099a8fd"], 0x6a) 16:57:20 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300), &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:20 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:20 executing program 1: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000180)={0x8}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x2a4, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x208, 0x8, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc00}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fa195c1fc059083b81af5a0da884e2a75afeeba5732fd4618fd686d5cf826cec"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4000000}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "daa5b2ebc6081e27fad0ec42e9597ad0f65220bb0abefccec5fe7a8c885765f7"}, @WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x8}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x27}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 16:57:20 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x20010000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:20 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x20ffd000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:20 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x11, 0xffffffffffffffff, 0x8000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) 16:57:20 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:20 executing program 2: r0 = syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x3452, &(0x7f0000000240)={0x0, 0xe9e, 0x34, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x84240, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf, 0x100010, r2, 0x8000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x381b00, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x40010, r3, 0x8000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2cd2ee0e", @ANYRES16=0x0, @ANYRES64=r1, @ANYBLOB="ae85dd0eda4870976580d69d5f8ebfba4efb49cc3373a06e99b8f2594c68bc6912ce61dbb4fb92659a7ec6a4d2b38d6f3228ce8282d8a4b986207daef8a7721e876770e13a653db67a9a7ad7d1b356e3d36a4b2af515a63c4b43230a8ba459eb2217c9f57c84950dcc0ab202309fe674a92d10ba8847019d225cfd586022125992612312a80bc843399500a72e9f78276a5296ad8d", @ANYBLOB="0c000200d200000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000100)) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, 0x0, 0x0) 16:57:20 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:20 executing program 5: syz_io_uring_setup(0x52f3, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) syz_io_uring_setup(0x1e, &(0x7f0000000340)={0x0, 0x0, 0x40000000}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 16:57:20 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/69, 0x45, 0x0, &(0x7f0000000480)={0x0, 0x3938700}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) 16:57:20 executing program 4: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 16:57:20 executing program 0: syz_io_uring_setup(0x3456, &(0x7f0000000240)={0x0, 0x0, 0x34, 0x2}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x10482, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2d, 0x20, 0x40, 0x5}, {0x3, 0x8, 0x81, 0xe9}, {0x8, 0x1, 0xff, 0x8001}, {0x1000, 0x81, 0x5, 0x1000}]}) 16:57:20 executing program 3: syz_io_uring_setup(0x4662b, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x45cf, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1354, &(0x7f00000001c0), &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x411c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))