f00000000c0)=@udp}, 0x20) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x8, &(0x7f0000000d80)=@raw=[@exit, @map={0x18, 0x3, 0x1, 0x0, r4}, @map={0x18, 0x4, 0x1, 0x0, r3}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @generic={0xff, 0x2, 0xb, 0x4, 0x400}], &(0x7f0000000dc0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001e00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001e40)={0x3, 0x7, 0xd86, 0xfffffff7}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0xb, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000101000000000000d20300004a68800200000000000000000800000018300000050000020000c08d87ae3ae592d1fb00006da5554b05b48000fcffffff85100000f9ffffff183000000210000000000000000000000f90feff04000000cd3ac0ff01000000"], &(0x7f0000000c80)='syzkaller\x00', 0x400, 0x28, &(0x7f0000000cc0)=""/40, 0x41000, 0x1c, '\x00', 0x0, 0x14, r6, 0x8, &(0x7f0000000d00)={0x18, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x9, 0x6, 0x101}, 0x10, 0x0, r7}, 0x78) r8 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000b40)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000000a00), &(0x7f0000000b00)='./file0\x00', 0x20, 0x100, 0x1}, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) sendmsg(r8, &(0x7f0000000280)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x200}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000180)="df4d317970355fe247ad744278d0a1a69c1ae9221c25a5a86ba5e4154357a9801e2d55e46e07f3169a904b9ba5945e736ea518fbc4e19992b12af825bee781447c965bd62e22a59d2b688d5b1bb9528522bf525affdd39bd2ab7b6da680cf1456cfef1ea268a7b9dd9afc08ae6818026d217962903113df2faa628868459ecce75ed33d1919502f1fae313e1d9ae5a810b6b447f0b2a9e2ff083d337b97a82c48f4859227b1f6efd7130a9a861a0af2a0df5dc107d596ce49e09e946d81c97ba5fa92a577ed66f5eb195f32d189b570e3fb821eeec925efe498cda1bd509a757fe436e16a12b73fcf1a3097536a8bf1661ba85d57f00ed38", 0xf8}, {&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000002000)="9cbad4f6f69b93bfa4c5504cd8741ce69207ef88859448441bb66e03a04cc54f740a29a75b7af21e17a102a2cd2dff07662156b889698e4d4fa35ef772b896acfff19fbe3b0666428e6b2bf8f6a029437c74abb69d09673a87763477b115382f11331e5c9a2160c24573fedd06a65c0d9d29d11f2dcc7f3d260f7b51ccb3b020b3160c69b57d8e403b450f91540d5cc1e51741251c01e759ecc22eefe2a534352704e9b7fc8b5db31a44703e3c805b74feb9953d04d0c9ba27a2a8a0a39ddaa309c55a5e8309bef61953c79c2b4562f80f292d40e89214f82565e86a64a33b903848641e", 0xe4}, {&(0x7f0000000600)="0eb757d215df6b084806824df7d4b65269c39099721bf6b3e27ad46250e0b63d60efa463ccf71cb71f854ce4e1ecd3ac101811a9ee56c2baf50229c14f32afecc61b8a152099947adeeacb18685f7d69deb1759f4c2fa749d5100e7954fcf7802f79c2a04f9b7b2dcd55be070179c0dce6437ca358c8f56e9d12ef778b24502c140b4a1830c7e0716d99c339f11a81a9fd206a2a471286fe0dde8b29164ef8660c28bb523792399e91faebc7609fcf73fb96c4b6", 0xb4}, {&(0x7f0000000540)="64735a57a4dcbeaf2636f4ac09dd9fa74bb15ba550d99e4e9b72cfb09da258d14de3a081cb789a25d2328d0ec9763b80f9472e544d8209553c10ee1117895d46971bc6c6a0162c7d9c3d94641d9579dce4be3572ae95a5c3cd54e0ca2cc51539b06e5921c7cb658f01bb54387b807155f387f76c", 0x74}, {&(0x7f0000000080)="b045158ab220e9a409a96026f21de0cde1e6d40689d025a362a1168bab796332afd141", 0x23}, {&(0x7f00000006c0)="6e4609eba2aad6348b3bbe165a48320dc2c858a79a73d1a5d66fe0c7b596d38a125e5960ca8729b5fe9d0c7f80ac93c87ccce4dc00a50277fd206d9548ca794db97c8c30e577c26a946b0c9fc09e220cf775128e642f3444b27fdc45b6af86b3c4ef29e69d839aa9026705120166c2bcadaadeb7e1e7070e41e626eaadad2923bbf2d8d65de5", 0x86}, {&(0x7f0000000780)="faff10e0e6ce8ea448b4dfea0d72a0f9451963f941085f9529eba1ac5d3bbd030098957755fda36c96b9077c3208ebbc1713d78800c353003aae120cc21e2aaa200276e8985009694671aeaf27ef5ecc9c2f4a295efcd91e1e4cf8fc4c51cbdc83e2a75f69514e4b2f0601b88a54330572e2da0c3aeef335c9def3da5ff0c9b839e7bd89997b4b65d94f52f124f7cd08418e27d9eae1a529b87c3a226ed621868cad41b75afaa0812f1679e5166c0ba1d1491c989156811f3f87dade2a6751aaad0c34b1d3e099e74df66a1ab18f2bca12d5eb51363e6e3b9ebee79f72a88940aaff0cbe794fd64e3f1df6", 0xeb}, {&(0x7f0000000440)="9b22c243ec557e0a1b85a3187ccad05f903392133af5f7c659eb9b64456f211e6b1c6ca3fd304a1015a02a46c1bd763688eff1ac258bb59440f2cfc77d9c97249b5cd374932c3c0c0758e0fb2d62d4d7e5aa6c3e4acb350aa1f3a786606eb113f7c9f8bc75469936f3613b93544e30f368f9f16f62d7372772149f179327519ad4d431c0f2957181daab", 0x8a}], 0x9}, 0x40080) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) syz_io_uring_setup(0x10000187, &(0x7f00000002c0)={0x0, 0x1, 0x10, 0x0, 0x11f}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000500)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1f, 0x74, 0x3f, 0x80000000}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)={&(0x7f0000000b80)='./file0\x00', 0x0, 0x14}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r5, 0x0, r5) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x8, &(0x7f0000000d80)=@raw=[@exit, @map={0x18, 0x3, 0x1, 0x0, r4}, @map={0x18, 0x4, 0x1, 0x0, r3}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @generic={0xff, 0x2, 0xb, 0x4, 0x400}], &(0x7f0000000dc0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001e00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001e40)={0x3, 0x7, 0xd86, 0xfffffff7}, 0x10, 0xffffffffffffffff}, 0x78) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0xb, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000101000000000000d20300004a68800200000000000000000800000018300000050000020000c08d87ae3ae592d1fb00006da5554b05b48000fcffffff85100000f9ffffff183000000210000000000000000000000f90feff04000000cd3ac0ff01000000"], &(0x7f0000000c80)='syzkaller\x00', 0x400, 0x28, &(0x7f0000000cc0)=""/40, 0x41000, 0x1c, '\x00', 0x0, 0x14, r6, 0x8, &(0x7f0000000d00)={0x18, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x9, 0x6, 0x101}, 0x10, 0x0, r7}, 0x78) (async) fcntl$dupfd(r3, 0x0, r3) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000b40)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000000a00), &(0x7f0000000b00)='./file0\x00', 0x20, 0x100, 0x1}, 0x2) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) (async) sendmsg(r8, &(0x7f0000000280)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x200}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000180)="df4d317970355fe247ad744278d0a1a69c1ae9221c25a5a86ba5e4154357a9801e2d55e46e07f3169a904b9ba5945e736ea518fbc4e19992b12af825bee781447c965bd62e22a59d2b688d5b1bb9528522bf525affdd39bd2ab7b6da680cf1456cfef1ea268a7b9dd9afc08ae6818026d217962903113df2faa628868459ecce75ed33d1919502f1fae313e1d9ae5a810b6b447f0b2a9e2ff083d337b97a82c48f4859227b1f6efd7130a9a861a0af2a0df5dc107d596ce49e09e946d81c97ba5fa92a577ed66f5eb195f32d189b570e3fb821eeec925efe498cda1bd509a757fe436e16a12b73fcf1a3097536a8bf1661ba85d57f00ed38", 0xf8}, {&(0x7f0000000340)="cd74cf7203e06eb322acd0c2a2fc4f2f5c3469b206d3bde6889d5d24b648347f57b1d0eeff442fca998cea9543bc416deae1d937b1543619f56c558971fa231f561799728c9b9993244f9bc047aeb0c4a67d257d4cefe7520f141b9658321995cc882b8312e35c210169d2e626ce9bdd5b6c8b4a8828aad23351f8f7c4c1c11b51b8ceb776e8eb950a289c3eb8ac0f774082a43a65308785f79fd213d4f300594566101b457e6eba4a69ea75ebe7ff3afdd314f18417d3cf8fd829c37b85d7118da9066dd1fbebf51328f570be7bb40cdf5b96a850a2e37c2255e11afb58266f5727cceb6872d25e98f1698198227c2900519ec0975c1ae4cf35665ac772", 0xfe}, {&(0x7f0000002000)="9cbad4f6f69b93bfa4c5504cd8741ce69207ef88859448441bb66e03a04cc54f740a29a75b7af21e17a102a2cd2dff07662156b889698e4d4fa35ef772b896acfff19fbe3b0666428e6b2bf8f6a029437c74abb69d09673a87763477b115382f11331e5c9a2160c24573fedd06a65c0d9d29d11f2dcc7f3d260f7b51ccb3b020b3160c69b57d8e403b450f91540d5cc1e51741251c01e759ecc22eefe2a534352704e9b7fc8b5db31a44703e3c805b74feb9953d04d0c9ba27a2a8a0a39ddaa309c55a5e8309bef61953c79c2b4562f80f292d40e89214f82565e86a64a33b903848641e", 0xe4}, {&(0x7f0000000600)="0eb757d215df6b084806824df7d4b65269c39099721bf6b3e27ad46250e0b63d60efa463ccf71cb71f854ce4e1ecd3ac101811a9ee56c2baf50229c14f32afecc61b8a152099947adeeacb18685f7d69deb1759f4c2fa749d5100e7954fcf7802f79c2a04f9b7b2dcd55be070179c0dce6437ca358c8f56e9d12ef778b24502c140b4a1830c7e0716d99c339f11a81a9fd206a2a471286fe0dde8b29164ef8660c28bb523792399e91faebc7609fcf73fb96c4b6", 0xb4}, {&(0x7f0000000540)="64735a57a4dcbeaf2636f4ac09dd9fa74bb15ba550d99e4e9b72cfb09da258d14de3a081cb789a25d2328d0ec9763b80f9472e544d8209553c10ee1117895d46971bc6c6a0162c7d9c3d94641d9579dce4be3572ae95a5c3cd54e0ca2cc51539b06e5921c7cb658f01bb54387b807155f387f76c", 0x74}, {&(0x7f0000000080)="b045158ab220e9a409a96026f21de0cde1e6d40689d025a362a1168bab796332afd141", 0x23}, {&(0x7f00000006c0)="6e4609eba2aad6348b3bbe165a48320dc2c858a79a73d1a5d66fe0c7b596d38a125e5960ca8729b5fe9d0c7f80ac93c87ccce4dc00a50277fd206d9548ca794db97c8c30e577c26a946b0c9fc09e220cf775128e642f3444b27fdc45b6af86b3c4ef29e69d839aa9026705120166c2bcadaadeb7e1e7070e41e626eaadad2923bbf2d8d65de5", 0x86}, {&(0x7f0000000780)="faff10e0e6ce8ea448b4dfea0d72a0f9451963f941085f9529eba1ac5d3bbd030098957755fda36c96b9077c3208ebbc1713d78800c353003aae120cc21e2aaa200276e8985009694671aeaf27ef5ecc9c2f4a295efcd91e1e4cf8fc4c51cbdc83e2a75f69514e4b2f0601b88a54330572e2da0c3aeef335c9def3da5ff0c9b839e7bd89997b4b65d94f52f124f7cd08418e27d9eae1a529b87c3a226ed621868cad41b75afaa0812f1679e5166c0ba1d1491c989156811f3f87dade2a6751aaad0c34b1d3e099e74df66a1ab18f2bca12d5eb51363e6e3b9ebee79f72a88940aaff0cbe794fd64e3f1df6", 0xeb}, {&(0x7f0000000440)="9b22c243ec557e0a1b85a3187ccad05f903392133af5f7c659eb9b64456f211e6b1c6ca3fd304a1015a02a46c1bd763688eff1ac258bb59440f2cfc77d9c97249b5cd374932c3c0c0758e0fb2d62d4d7e5aa6c3e4acb350aa1f3a786606eb113f7c9f8bc75469936f3613b93544e30f368f9f16f62d7372772149f179327519ad4d431c0f2957181daab", 0x8a}], 0x9}, 0x40080) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r9, 0x0, 0x0) (async) 11:36:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x2000, &(0x7f0000000000)={0x0, 0xd5d2, 0x5, 0x3, 0x229, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r0, 0x0, 0x80, 0x3, 0x9, 0x0, {0x2}}, 0x0) 11:36:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000002161800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00220300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000001", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000181800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="004a0300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:39 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3cf}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x80}, 0x4) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) pwritev(r0, &(0x7f0000001600)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="d62ef0bcfebf5c954b736211ee15c8b12b9a2f922030f293097e071da077abe58a85bd9848e0e8d7c5fca25efeac3047c8382f1d17936a1cda305e0acdfbfd416d3b1db2725039ec8f2f8e0c21ce7bc1d78a6c9b21cec194b3c7c2a63649bac49e475222f24737ab77935b79b6f6b8fbc182f147e503b832058d1c8a74c9d95ea9dba83c1c272090b0b5b43cc34884ece645b808a5e5c2e5d2ac548b079b3fe9bc2d9a586fc191fcdcab0c7785eb92bb", 0xb0}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)="af04fd3c4f45c399c6be51732b6fcbdeaa45f471b77ccfe7f1b5396d74ce6e32d2aa9e9c5a90c64396524ff840236ac30984f45034dc9a5acd78f8b8ac6ddb3ca29330fe01189534f5825d2404c96e71050a", 0x52}, {&(0x7f00000002c0)="98b9e9997d375e618bdcb5521748f683b32d122b43fa89b18a2c3f266bc0fd4f2b5905a4e91099b04fb68f0dd4ab234ebcaece76b11f6f0428ab022bbd12df814a2af8889f3621c32e20044b9edc0092e312e6ae8fce7d7e0c362feaa422a965e02b8aefee9766ac5400819a8a5a0afb8f82aea8b9f0f29963e1dbd4397015bf99f515aa2e6b2621629fa6fa13df7bb5e81d94e1", 0x94}, {&(0x7f0000000380)="40abbdafea57b380d87ad667ed9bef26e206c136a3aaca0efac3ec3e2a627e9f05fdf1ff58ba8ca42c6b2a5c33bd743c5bf009fc1c9926b3122933ae3d86a003db133ce23cb462e8a268cb2845093dc2a294923b38765c2523f80d6ffc40fef04f42e9d2ac150f29dcf4a5c0e9fc08f99cd42f4232c23e987ada51b38b06b9473c397669760f546b087716919505d38af84a53881a8a37a4434f21bf9aeed78b5cb739ca47b646d24d1054e29088cf97f6b02208241d4e767052f9fabde910121604edec6c0f8f3fc6c0eae9d1624b23dac26bf381c2104b1088b0990add4b6c", 0xe0}, {&(0x7f0000000480)="a181863e5c2a6b87dd1ede1eccf182dd0a647516d675488a9fb798bd1fa67012d8347c1fed0b4fa320e4ea0482c9805bac8b6f4479fde35f567bdc4e41ef93d33936667a4400858ff47845380068db09d9ee453da51b614d1eb12e270e14929cf47dbc72999414f6e3eaca56a46c", 0x6e}, {&(0x7f0000000500)="bb366b9567d7ad2b262afa351a6ca921dcfa58eb4b9c481134be03faed429599d7a9525e6e9f8d6b7e3a70336868b2da872734f51549c14269c5732e16ab6b491314abaefccebbace3e4fd14ad630e", 0x4f}], 0x8, 0x281c, 0x100) 11:36:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000251800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:39 executing program 2: r0 = syz_io_uring_setup(0x10000187, &(0x7f00000002c0)={0x0, 0x1, 0x10, 0x0, 0x11f}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1f, 0x74, 0x3f, 0x80000000}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)={&(0x7f0000000b80)='./file0\x00', 0x0, 0x14}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x8, &(0x7f0000000d80)=@raw=[@exit, @map={0x18, 0x3, 0x1, 0x0, r4}, @map={0x18, 0x4, 0x1, 0x0, r3}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @generic={0xff, 0x2, 0xb, 0x4, 0x400}], &(0x7f0000000dc0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000e00)=""/4096, 0x41100, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001e00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001e40)={0x3, 0x7, 0xd86, 0xfffffff7}, 0x10, 0xffffffffffffffff}, 0x78) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0xb, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000101000000000000d20300004a68800200000000000000000800000018300000050000020000c08d87ae3ae592d1fb00006da5554b05b48000fcffffff85100000f9ffffff183000000210000000000000000000000f90feff04000000cd3ac0ff01000000"], &(0x7f0000000c80)='syzkaller\x00', 0x400, 0x28, &(0x7f0000000cc0)=""/40, 0x41000, 0x1c, '\x00', 0x0, 0x14, r6, 0x8, &(0x7f0000000d00)={0x18, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x9, 0x6, 0x101}, 0x10, 0x0, r7}, 0x78) r8 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000b40)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000000a00), &(0x7f0000000b00)='./file0\x00', 0x20, 0x100, 0x1}, 0x2) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) (async) sendmsg(r8, &(0x7f0000000280)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x200}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000180)="df4d317970355fe247ad744278d0a1a69c1ae9221c25a5a86ba5e4154357a9801e2d55e46e07f3169a904b9ba5945e736ea518fbc4e19992b12af825bee781447c965bd62e22a59d2b688d5b1bb9528522bf525affdd39bd2ab7b6da680cf1456cfef1ea268a7b9dd9afc08ae6818026d217962903113df2faa628868459ecce75ed33d1919502f1fae313e1d9ae5a810b6b447f0b2a9e2ff083d337b97a82c48f4859227b1f6efd7130a9a861a0af2a0df5dc107d596ce49e09e946d81c97ba5fa92a577ed66f5eb195f32d189b570e3fb821eeec925efe498cda1bd509a757fe436e16a12b73fcf1a3097536a8bf1661ba85d57f00ed38", 0xf8}, {&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000002000)="9cbad4f6f69b93bfa4c5504cd8741ce69207ef88859448441bb66e03a04cc54f740a29a75b7af21e17a102a2cd2dff07662156b889698e4d4fa35ef772b896acfff19fbe3b0666428e6b2bf8f6a029437c74abb69d09673a87763477b115382f11331e5c9a2160c24573fedd06a65c0d9d29d11f2dcc7f3d260f7b51ccb3b020b3160c69b57d8e403b450f91540d5cc1e51741251c01e759ecc22eefe2a534352704e9b7fc8b5db31a44703e3c805b74feb9953d04d0c9ba27a2a8a0a39ddaa309c55a5e8309bef61953c79c2b4562f80f292d40e89214f82565e86a64a33b903848641e", 0xe4}, {&(0x7f0000000600)="0eb757d215df6b084806824df7d4b65269c39099721bf6b3e27ad46250e0b63d60efa463ccf71cb71f854ce4e1ecd3ac101811a9ee56c2baf50229c14f32afecc61b8a152099947adeeacb18685f7d69deb1759f4c2fa749d5100e7954fcf7802f79c2a04f9b7b2dcd55be070179c0dce6437ca358c8f56e9d12ef778b24502c140b4a1830c7e0716d99c339f11a81a9fd206a2a471286fe0dde8b29164ef8660c28bb523792399e91faebc7609fcf73fb96c4b6", 0xb4}, {&(0x7f0000000540)="64735a57a4dcbeaf2636f4ac09dd9fa74bb15ba550d99e4e9b72cfb09da258d14de3a081cb789a25d2328d0ec9763b80f9472e544d8209553c10ee1117895d46971bc6c6a0162c7d9c3d94641d9579dce4be3572ae95a5c3cd54e0ca2cc51539b06e5921c7cb658f01bb54387b807155f387f76c", 0x74}, {&(0x7f0000000080)="b045158ab220e9a409a96026f21de0cde1e6d40689d025a362a1168bab796332afd141", 0x23}, {&(0x7f00000006c0)="6e4609eba2aad6348b3bbe165a48320dc2c858a79a73d1a5d66fe0c7b596d38a125e5960ca8729b5fe9d0c7f80ac93c87ccce4dc00a50277fd206d9548ca794db97c8c30e577c26a946b0c9fc09e220cf775128e642f3444b27fdc45b6af86b3c4ef29e69d839aa9026705120166c2bcadaadeb7e1e7070e41e626eaadad2923bbf2d8d65de5", 0x86}, {&(0x7f0000000780)="faff10e0e6ce8ea448b4dfea0d72a0f9451963f941085f9529eba1ac5d3bbd030098957755fda36c96b9077c3208ebbc1713d78800c353003aae120cc21e2aaa200276e8985009694671aeaf27ef5ecc9c2f4a295efcd91e1e4cf8fc4c51cbdc83e2a75f69514e4b2f0601b88a54330572e2da0c3aeef335c9def3da5ff0c9b839e7bd89997b4b65d94f52f124f7cd08418e27d9eae1a529b87c3a226ed621868cad41b75afaa0812f1679e5166c0ba1d1491c989156811f3f87dade2a6751aaad0c34b1d3e099e74df66a1ab18f2bca12d5eb51363e6e3b9ebee79f72a88940aaff0cbe794fd64e3f1df6", 0xeb}, {&(0x7f0000000440)="9b22c243ec557e0a1b85a3187ccad05f903392133af5f7c659eb9b64456f211e6b1c6ca3fd304a1015a02a46c1bd763688eff1ac258bb59440f2cfc77d9c97249b5cd374932c3c0c0758e0fb2d62d4d7e5aa6c3e4acb350aa1f3a786606eb113f7c9f8bc75469936f3613b93544e30f368f9f16f62d7372772149f179327519ad4d431c0f2957181daab", 0x8a}], 0x9}, 0x40080) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:36:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00670300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000001", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:40 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x2000, &(0x7f0000000000)={0x0, 0xd5d2, 0x5, 0x3, 0x229, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) (rerun: 64) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r0, 0x0, 0x80, 0x3, 0x9, 0x0, {0x2}}, 0x0) 11:36:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000002f1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00700300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000003", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000047", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00880300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:40 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3cf}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x80}, 0x4) (async, rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000001600)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="d62ef0bcfebf5c954b736211ee15c8b12b9a2f922030f293097e071da077abe58a85bd9848e0e8d7c5fca25efeac3047c8382f1d17936a1cda305e0acdfbfd416d3b1db2725039ec8f2f8e0c21ce7bc1d78a6c9b21cec194b3c7c2a63649bac49e475222f24737ab77935b79b6f6b8fbc182f147e503b832058d1c8a74c9d95ea9dba83c1c272090b0b5b43cc34884ece645b808a5e5c2e5d2ac548b079b3fe9bc2d9a586fc191fcdcab0c7785eb92bb", 0xb0}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000240)="af04fd3c4f45c399c6be51732b6fcbdeaa45f471b77ccfe7f1b5396d74ce6e32d2aa9e9c5a90c64396524ff840236ac30984f45034dc9a5acd78f8b8ac6ddb3ca29330fe01189534f5825d2404c96e71050a", 0x52}, {&(0x7f00000002c0)="98b9e9997d375e618bdcb5521748f683b32d122b43fa89b18a2c3f266bc0fd4f2b5905a4e91099b04fb68f0dd4ab234ebcaece76b11f6f0428ab022bbd12df814a2af8889f3621c32e20044b9edc0092e312e6ae8fce7d7e0c362feaa422a965e02b8aefee9766ac5400819a8a5a0afb8f82aea8b9f0f29963e1dbd4397015bf99f515aa2e6b2621629fa6fa13df7bb5e81d94e1", 0x94}, {&(0x7f0000000380)="40abbdafea57b380d87ad667ed9bef26e206c136a3aaca0efac3ec3e2a627e9f05fdf1ff58ba8ca42c6b2a5c33bd743c5bf009fc1c9926b3122933ae3d86a003db133ce23cb462e8a268cb2845093dc2a294923b38765c2523f80d6ffc40fef04f42e9d2ac150f29dcf4a5c0e9fc08f99cd42f4232c23e987ada51b38b06b9473c397669760f546b087716919505d38af84a53881a8a37a4434f21bf9aeed78b5cb739ca47b646d24d1054e29088cf97f6b02208241d4e767052f9fabde910121604edec6c0f8f3fc6c0eae9d1624b23dac26bf381c2104b1088b0990add4b6c", 0xe0}, {&(0x7f0000000480)="a181863e5c2a6b87dd1ede1eccf182dd0a647516d675488a9fb798bd1fa67012d8347c1fed0b4fa320e4ea0482c9805bac8b6f4479fde35f567bdc4e41ef93d33936667a4400858ff47845380068db09d9ee453da51b614d1eb12e270e14929cf47dbc72999414f6e3eaca56a46c", 0x6e}, {&(0x7f0000000500)="bb366b9567d7ad2b262afa351a6ca921dcfa58eb4b9c481134be03faed429599d7a9525e6e9f8d6b7e3a70336868b2da872734f51549c14269c5732e16ab6b491314abaefccebbace3e4fd14ad630e", 0x4f}], 0x8, 0x281c, 0x100) 11:36:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000341800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ce0300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:40 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, 0x0, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:36:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000048", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000003a1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:41 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x2000, &(0x7f0000000000)={0x0, 0xd5d2, 0x5, 0x3, 0x229, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r0, 0x0, 0x80, 0x3, 0x9, 0x0, {0x2}}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) syz_io_uring_setup(0x2000, &(0x7f0000000000)={0x0, 0xd5d2, 0x5, 0x3, 0x229, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r0, 0x0, 0x80, 0x3, 0x9, 0x0, {0x2}}, 0x0) (async) 11:36:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00d20300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000401800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000002", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00da0300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3cf}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x80}, 0x4) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000001600)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="d62ef0bcfebf5c954b736211ee15c8b12b9a2f922030f293097e071da077abe58a85bd9848e0e8d7c5fca25efeac3047c8382f1d17936a1cda305e0acdfbfd416d3b1db2725039ec8f2f8e0c21ce7bc1d78a6c9b21cec194b3c7c2a63649bac49e475222f24737ab77935b79b6f6b8fbc182f147e503b832058d1c8a74c9d95ea9dba83c1c272090b0b5b43cc34884ece645b808a5e5c2e5d2ac548b079b3fe9bc2d9a586fc191fcdcab0c7785eb92bb", 0xb0}, {&(0x7f0000000600)="d8eea99628efdd5fc28780d22f28af4fc7f1e1a9280ce50428129660300cc2c13ef42995e4ccb40cdd941bc7cc93fc1b527bd725a03183ebe15db26267c54676e0ffce1bc07f8f3a2f9e545bf3309c7b7f246f40e11dc354bfcf239648cf05c5c1f29a1584da0b550315cce7e95c3d0a5855e54bd6ae7bfb37d26a1e003ec6ad2d58ec6f4fc96e7ea600ecc922e6b3553f72ec3ef860e9807ed5426a627a3769a4077215a6e0e59b5691515a90098bb8fe3a7f1071ae3395128ec7179bdadc22859b5b036511914ac6c203419c2c7d299afaf5c35b2f34d0e55962d57c2e0bbd8c7704d78de7aec07546c5bbb2a7cc8d551c39a9709e2f82e926ecb961bdcb82b5ede362d0c75ec80b6aebd29c1870a8dd36e2cf10554e9640641ade22f9e026fac9bde26083ba31953856de24a2a37a1c2802467d8082e6d7a889da960c265de1150dd812885f6269568ab0d209f51139917219004643eaf50acd5a0807e070bf7cffd08d10caee525ce8392e5a5127be5148705a58cad6902be87fdd8ff92b329e9587bb9070a9877e05eb25c0bdc635d1974d4efb21b890a6561d15c1c48517174d136b7e1b0d58919df341916bf368636307611942f7896c5a03862b381ed82e2d121aefb551368939aca12198756a658333c961b4ef4873f34b09d55c9a412e65119e8c8d3f9de157a442b74bbe30dcb1f067bd76bae243c286933d1367ae24dece5c3761d5b833e1b157a90fed74fc258fd96323d87e0222e7931f09b78de0ef15d59e71d80b0a3d7987fea21c4222ea4d921537f7f4debd43c5695aac2002ebe71829d40dee72e87297c4a67fcda3a609b5be94d6e754e845ec5e66ceffe2279b08dda5067175dcfc83b856a761a02628dc7215f301e8bd1845f01c901be7e62d3d0f64a86bacf2b412d9aa4ca70ac335b93f7b52063ae06db06c379ec604ec58ccde355157e401494eb23c44a986582e312ed3dadc7b28e6c346562de60378e8e16c6e460d5653435fc3359174be7903c096eaed23a0a83aeb68cec6cd57d5d3fd38df5aef353c1532bc2b9b0d2e6d5d72870d0b15e04cb91e7a21efc5a2f257d14d58cd4c349d53901ef611a12d344f7c90cd7464804b7c8c34cb9588cf008aa06aadea9a8243bf131149a4b283a34b44096e57326ddfb9a793bb2e9447f9773540d6ac3dba9a6fea92f7b0c859ab5b8648acbe33da2c4a2f62465c6db00576d11386a041d327855e5d064404e2b238f15674e66a8c54fff663de50711f8286ab97a3aa2c58c7e1bbe96b38b81d2e64adc0f53c51f48689c139378c61b5e3d6bd19a1e5a891eab377a57d712f391dec9f10c82a5b253f0a502e22fbc1a957e53ffc1d2537c4b45740156e147e2f73d340ac43ff72f5d530d359ef672f09463593313f726b298bcdfba92f049764a524ce1ef07001465252d7f74242b35b41d8dc8e94659db2d48d4b896e895328a953701445e239a637247ec83dce40ce404f3e32e103fe9e2dec9d25a936fb0b03c9eb555af65d8ecd4c956fab8ad2179442d7d2490c3889112271f351eb0b45386134acfbb9f000402dadfef9a5d4a6280893e81e65f2148c84f33f4fba589240dfdaf5ec04a264babaa567159424f4f788d6632f7ff0a805dbfd997f21725c6c149ce38e9888e99b8c4b16958b3ba405478d82cee3af39671d4d68b8043007bf989452ef883991d7d612dd737d5457d425ca45163aa03722c2c3a7d6849ce7d1345754ef1e0df4ddfa475ca589fc655cb1e2a554aeab65aae70a7ea59772f33eff740f8446ac4b963b393347f50884bd720204704855038fa104133cebc90b8a7306af6870e0c69897d4a1b6548ccc118bc0de5b52388cea97e7b35ab18dbad201e5281f05a4a6d819556ceb778ed1df0001cbaf4a2b99a3ff09c00bb9b83f7407c9e4de5eec8443309c92e3168efd9d09ae8d7947ed8e53d14ca4109bd309f5a498615c82e63d9119b8bfd5d88a581de14987df8686e624ceccee0cc717c83f3b9245ba61edd061ad6fb9c714686cd3a2557390cc522359861f42c65de5e6008c8f3a4101bedb84967f93c426b5367e91ac1bf3315b611635331922785f0690c57c3e2b81c6f4361925a1f748a31e6e7dccfbff1c76d4d699e3b3955ea72ac90a71d7e1a5a231ee6b20410b074c55c9fc1816f42cd796ff0de1b7a4772e25715c82cb2ecb6d950de0cf260ffd9521f0c96f24d4a035951dd9ac43b63583009f513703decd480ebcbdf0d71b8abad3ef6533259a8b2e3073d4c2847082dc34f5ad1ff23cb1907eec7bf74b03be15fa1850955e4a7b10c1128eba0b1c363f37510d1ef470b2ee25b2d1998972506a135933d77a655a20132a2e3e62f6d0e48d220836a47e3d145432b93d7879dfdfab0a160edb52f3eafff2d3a0c0a4d25aa0ce084e512c81cc9350078518e89b040def9374ada033164b5f78d6cf4d1cb8f5155887981f9595161cbb9d48ad466c578f6728abbe1c29ccd034b2a5c36aa410330a615b948806126121af793fd002ad71578d3fbb90df094f3cd4d9453c0f0ced5e4f089e2ebeaf6d11eb5435f8ce034b3ba29905cf038f57d188a6ababe56656481e5f43e294138f653652cdb39be0b181f78cb28932f2f6c73c966e8d7ef8d26475b76b46d7c46cad070a79790699a6f8b18f3a92b41f20f08f3337cdca9f6e1f00fece2a42a958e72f715fa90250c312ec7946a83fd8bc9a85f43aff0a3d153f5bf77f0900f92c7f9a29d984a1c38d23d4e6eeaad7b8543c7a4931311f54b3d4fbec393f782d308f6584d733d0f7aa7d96c799191020649cab95b4bba4f9b288f4d12f8670a8641837aba8d775d5d65fe0661ea67bbae4e8aaa910c40fac9321ace30caced8a793fed79b92bd778b2897df128e6ab5f99806476d724b702390192ce417a6c63a0cfd098fffa728d9d99794239fa8fd4e4a12b0dcd95ff5ec8c87acd1accc43aa87d737fee4eca53e422441d7cbab76bac7318cbb074dd65eb2259d93154ba215e1708479dbbe248f5eb7a69e343ddd6d14d65ac81a89e78f629c3e05aa827c200ef179e30ccefbb68de43d49e04bf5f82052ae6a7e3a9a2a2fa16ca478eb7fc95ac71a07ef4d3faa34864f682ad3974ceef030babb5b89771ac1611977e28c3344b877e08462c37a5493245684a008bbbeb9a82ba166a2204c971067a873ec2f1fe251ee61fcffe2d8a025a2b50999ad6a27a2e7c8c6597de0c045ea433faae7422602388f0701ac2a1fdffd6f6abdf5e1a00924c14cca58001daaa73f47afc661e994c11db32a696aeae320158c5cbdb779f1db5b8f088e6243199d7cf11ab9081ead85439ec8ec5f17338ea4398956e5b2336ea935efd5e457ed8a682cc188c5cec589cb3214fbc7862156a115e0a5d32f04e83acc7d0a644f31997a1f24be8bda29ba450aceab398c3c9b05d387f938896c24a15334504873d86b633174fc4b958f79942c45b239987c8537a81adc3d242e02efceda55f18ffcf3d5971a522d6f97d84b24e5f8f233b51a34b9e48b3c37ebf4bd3e59a56a5470170aaf35972eb5cfa2bbd672e34f143b7afb95ffb5d77f2601ef15ce53d898181632c4ac61a71cb54b21e4ff2bbb3f3f2097bec4eebef6b9155a74424efbe8d363e4f24dc6ec39ed7c51d0b772317c973c48314de9912b34e08b6d4e52e8b7fdeb872002ae4132347f52a8ec6e8c78b50405389f5933b2bfa9d63e57fb072d480e5d7ce12d55bd5dd61c20b1187dc37a6be51e26699f1d2c37d53b55b504f47a38fd674ffd92dcaf049f63a646a20862c142676d6ec13ca6f30a3af75b22e66de957498e1fc060885111569176848a5ba406d9ec4c2dd84086c77a7af7e7d73b81c0e9bdfc4cb19df9c1145e290da81e3121b2f43f388827b26232a4589530396f9cb0e9f38cb62af8b3a8e4e789979e6053009765e9dd203ddd55f09294abb8a4666b5f5a7cf187154f1ecff2da17f032e9da118b51d7d77096bb5c19fd1c48a70313e2099726d74d882dfe96d2104f5813edae0c7094659ee303f1040941d43fa034606ddbf309a6dd8b4026f31e5aa2f520dd7cc5e419fd35bc16dd3ec262f843a02fe18f35eb4ea0d7ea821ad72ab7691b72c2dd5ed21f12e688c126186aa9b394e4984333ee49faffa4c09ff8148fb55a25077784b7fa9397e20899bba5efc25d10758d6ec1ea91d327566266750212e09063c1f3cf3186f13c75de6204b3c0d862b20af3520bb8ec76428e093ddca7b18f912b5199d8c63e1eb2684f3188504661800952326cbd20ededd4c1cb3f4324aa127cf8eacc5bf8092d6b62030191d7fce2fb7956c46a23083a3b0120f05c71478c7eab0466e42974b172c71bd5ca043c3eeaf9b012a58cb44e4da2268d60f7af2e31832b947be1d358fb423749f74974ccb23037116555e7301834ccdfd5afea37ed01f4e8bc9bdf28bf0b248d77919274898b3f4bd234d7c20c6de2fab7089eded8385b45c2f326d67aee4b0fa9b6d26f0cbadb23efca58ba3dbd54a2eaf18e75b3881479b739529d788de3abbfc7f86649abf41aa37ff66e814ecfab1861b654284d189828f9de2e83ba64c28f041df6111fd9eb523819aa3948ddf9d1e74201cf373b37471e918b36f8423b43e7bf227dda56293c6c84c0cadb1083ffbdb522ccb0454ca7a48c00d432ab2288c1347a730549fc12ed7e8db7b70619eb7e242abb4bf01e3ee51af0116692f1ea0a7d844e1ca4c58b3252825981084d88ce3364c702ac125559d5498e7711c33e4aeb3bd46c7bef4d50d95cf089b29a4a9ebf6e99e27e146765f87bebd0e9233b34fa6739642744077c9eb930bf3e1e67891cf45c60fbc6072e4ed4de5514f61e99123605bf85e363b189f8f6ba465efd47b342f36259be27e0ce520c11fcf4d74b6f5a68cd2ef1f5075045abd330d8dc8d34ce5a539939c6ba4d3520e447034b4843358a138bb970037be8f5ae71ddddf1d6eb44f33eecc1eb093fb2a3f2818eb68f8545ad712636ebef31835b87f78568ff26b725d4e9c12e751e7c60bad2d1103342818eaad72fcf0afe774944ce132925067e4246c0fd4f534cffbc7ad6f25e302f2e1d57b90ab537a8f94f433ab379aba8d5e7e56af3a9f4cac19b195893ea4e4cb7097f69433347ba0b49b654f7e85d6824cf28c7d7468e34cef39b44724771bad7e0a6e8377f90337d1cd135a472b169023ddb1b6d7c3e01805c85082293c807ee0c83a152bb7c8c7704e275edcdc753b92143f1c5370a754b2e044da8621475832a83cf141f10e696c8e1c294c1834c6c5da5eb9dd4201f40d060a87a7f01ce4989af7b6eae8c599313eefe1bea171b7de5694eac96e9f6d730ae2b84a050e3a620272ea72aa546fd0746dd831d2c331d5a17286f897957cf66f737bf8ddf38c2bb407869c78cf66d4c0bd33497646b8f9a26c3c10ded8eb8dc0bc3c2211f4626482d990906f99c95cdb64cce346fff5659549ed7ac307e913b7a872262ac19733c1121d7886abf95d21f1906491d0afcfc46171dcf441becb67c4f162c52d07d7ebb4bb555d435ebd51d86c296723cf6d80ee5dd526fb19a100ebb4022070f75b6f3565dcffe9792889a0dd655f88f0a9a1ed8fb37f4fb0388d820c0d8f9abb0350091529e93fb0efdb84edc57d0be57f13efb251c8b0cc77ffc2cf79f28bcb08391ad682c9d60ce8eeec83197635e2f455fa699ad736abeb819fd872e101cdaf3c8cd00369fd0a12d9f9b6337e35445ffee5f0f758ca158ea0c2e18e26794f04c5c1c3fc", 0x1000}, {&(0x7f0000000240)="af04fd3c4f45c399c6be51732b6fcbdeaa45f471b77ccfe7f1b5396d74ce6e32d2aa9e9c5a90c64396524ff840236ac30984f45034dc9a5acd78f8b8ac6ddb3ca29330fe01189534f5825d2404c96e71050a", 0x52}, {&(0x7f00000002c0)="98b9e9997d375e618bdcb5521748f683b32d122b43fa89b18a2c3f266bc0fd4f2b5905a4e91099b04fb68f0dd4ab234ebcaece76b11f6f0428ab022bbd12df814a2af8889f3621c32e20044b9edc0092e312e6ae8fce7d7e0c362feaa422a965e02b8aefee9766ac5400819a8a5a0afb8f82aea8b9f0f29963e1dbd4397015bf99f515aa2e6b2621629fa6fa13df7bb5e81d94e1", 0x94}, {&(0x7f0000000380)="40abbdafea57b380d87ad667ed9bef26e206c136a3aaca0efac3ec3e2a627e9f05fdf1ff58ba8ca42c6b2a5c33bd743c5bf009fc1c9926b3122933ae3d86a003db133ce23cb462e8a268cb2845093dc2a294923b38765c2523f80d6ffc40fef04f42e9d2ac150f29dcf4a5c0e9fc08f99cd42f4232c23e987ada51b38b06b9473c397669760f546b087716919505d38af84a53881a8a37a4434f21bf9aeed78b5cb739ca47b646d24d1054e29088cf97f6b02208241d4e767052f9fabde910121604edec6c0f8f3fc6c0eae9d1624b23dac26bf381c2104b1088b0990add4b6c", 0xe0}, {&(0x7f0000000480)="a181863e5c2a6b87dd1ede1eccf182dd0a647516d675488a9fb798bd1fa67012d8347c1fed0b4fa320e4ea0482c9805bac8b6f4479fde35f567bdc4e41ef93d33936667a4400858ff47845380068db09d9ee453da51b614d1eb12e270e14929cf47dbc72999414f6e3eaca56a46c", 0x6e}, {&(0x7f0000000500)="bb366b9567d7ad2b262afa351a6ca921dcfa58eb4b9c481134be03faed429599d7a9525e6e9f8d6b7e3a70336868b2da872734f51549c14269c5732e16ab6b491314abaefccebbace3e4fd14ad630e", 0x4f}], 0x8, 0x281c, 0x100) 11:36:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000421800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00e40300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, 0x0, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, r2, 0x0, 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) 11:36:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000001", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ee0300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000481800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000003", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fa0300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fc0300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d1000/0xb000)=nil, 0xb000, 0x2000000, 0x4000010, r0, 0x8000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r5, 0x4969, 0x86f7, 0x1, &(0x7f0000000040)={[0xfffffffffffffffe]}, 0x8) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x6000)=nil, 0x6000, 0x1, 0x40010, r0, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)="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", 0x1000, 0x30002, 0x1}, 0x37) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000005, 0x40810, r5, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r5, 0x80, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x6, 0x1, 0x5, "0a355330429a872de37303080041a9fee1eff5f6bb4a4a509d98c141a24d8db659bb8d3ac8c53b95c21c8c98075e6d2c6c05ff6aa965b53c75db28eeb784f2", 0x3e}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x3deee479) 11:36:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000004c1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000003", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000500000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x105081, 0x23456}, 0x0) io_uring_enter(r0, 0x3252, 0x9fd9, 0x2, &(0x7f0000000400)={[0x5]}, 0x8) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x5000, @fd, 0xfffffffffffffffb, &(0x7f0000000600)="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", 0x1000, 0x5, 0x1}, 0xfe) read(0xffffffffffffffff, 0x0, 0x0) 11:36:42 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, 0x0, 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:36:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000003", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000005e1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000600000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000025e1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000003", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x105081, 0x23456}, 0x0) (async) io_uring_enter(r0, 0x3252, 0x9fd9, 0x2, &(0x7f0000000400)={[0x5]}, 0x8) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x5000, @fd, 0xfffffffffffffffb, &(0x7f0000000600)="71d262f5890aa1da38a6e4696356349ff37b6e347725aa58d6b11faf7c3a710ce9cadcaf4ac4f1ab0b99ee6fea793ef2e102cb9ac51c1ba04768b4ebcffa20c1b0bfe08937c0b0433ba8b67704509d7b761767c2e6c57a09110c3a4ae5e72ccc286f1c2a6b0f32628bfe74e2878622bc4c094fd6cd903a50a3de595aecb72fdb82acf1fa3e86add1a91851f4addec077b04975023ff14f3a9fe636de64aad4bf8e6ed3a76c7647c7b24b071bd30d12c933ce7e6bc8414e3c300b42c58c12496b0d7cd56c32d7e6ed392795e626b4aa35f84a2cd92236435e34eb5abfdea32bd1bba5d98872ccb66921e54ad9a78d73acb24fbed019c401dcfbf82baf3468e2560cffe21a1b9f63b90764c341e00ca70ee2c663cee43b78cc8671428401ba85e19a43c670624739a15d01b0bdfa88705003e6edb6b946d874c3f6a2348d723a2704b97c57b735a152bc9f04ec33d300374ba9a2bb287af200d405740c3d25905fcf206fcd2dddef7af0c3e0000a66d8b8cd9fb7a8be7adf45ddbc3ea39c83a3f048515d1ae95b7436d6e64abc3fbd14252aa36ca065ae84a6db0232199b4a0f25299412df0e72b266534458f3f70f75f96db2ed58bc79c1b28f29394e709810499802aff247a121a139132c1a50a16b3bee82853713d30801d41a8a836d7587190914e78d2fe10c06afb5e986469ef4e185577ca2b4f04e87d7c4d35f23b11b76b96893ba880b8f93aeca07224472e41e686310061685574f59fbd9c0257763d8a6c671e45e971329c073e7540e46f2dabf0305ea810da3f4cba4ec8013dcd523034feddcb28609ad01ca22c8e43aeece6b93b64eca8dae1b89643221bdce5b7209ae9e2cc5c9552aa7b96ed76271c484da3e54e7f2d736c62b10735c3b7c73c183aa4f016cb025eadfcc2c281dda7685f313eb223604fcbc9e8bd11ab6607fc4e50a2ca46016f2c04e9179366a38c6863c9156f9a4887cc3738d8e3edb24db9d6989dd5868eedb4cb0030bc0d592545d53e8d87c8282f2c480926d19d1807ceee8df7dc3bdc1a4b21a250f37622eec38627f17267e7e1cabece6934d301b5e825059ffe919fbb701d2dfe0a66c367a4e4537d35cfbd648c09ff18f94358eddf29a3dd043ddfc739177efe10075d0ad5c22d2a0931aa1f648151b33c5f83917ad7f988b78b73877c5d9157d940d86888772c21f06a1b46304a52d7a5731c790face4eaed2ee2d46b5804ca5122e64dc3d386d7d83683e95db9be93e7092e8535fc7a1afb72e2c7994c7dcce6de5abcc76a8706009484524e8e18101ba9b58027b3e6f6ba357d857b95ca37805edb697cb6e88c6541e5316c7c6c29eb65cfa9796a6ac5e84d693036c86548e99a5b3dda93d21319bd24734b909efa7a74478829cafb003c1d8f7b8c8aacb4eadd7e6a5a7925580e371426780b44c3fab82715416cc755e259930e56fef45da8b5da615cb343db1bc62daae462a0b2d503e7d801250f4291bfe1c7881d3cc0be035a1c9cc741f75e316e6fe47ab01734f75fce9b6710a5fcf7526a7a6fdfea17964ec1b9d05fc3b3f6905bf4e89ac75a14529fd41ef067ca712304812cead50bfc916e5f95ede54c457457da0b15a0dcb8a913d8203aa52db1b7c68564f833e4cb784c21262cd8b30c4d2204438b35ce149baced0c5964c139051f226b3034ae5f489266e0ff5bd363006f4e11e8ec435d34928a1790db48b1e747ebe80359a0128207e72d4fb93515c0d5a2f7df9b0c915187560538d239e4cf73213863518c581bbfe75b09ad33ac6d4b357547ce5040d56ab8bb2bff9e1f96303b6122e83a9e449f790a7226e03ae15f358fd7e84b5af39437f5511951aab3e265e4a35cc02e293dbd3fb2970ab9df0e1f81340e5dd60b290b2acf2e332a4bb99196dbb38d57e62344c358831de4d92d2948c914cd195c26f6bf605e5543b2106922e6a52e2d8c0774378c362787d5af1e7035e41854da70880372e2132c1cad7f48f925a839b37ee6055a33e6c7d11c57d7182493786ce3242abed4643683b97f959b5486a68d2424192e49ceec8f35597532e5a7cad8484f5bcbdc7ab6477bc742ec3a1f39ab086610ff7901dc9b34f1aa7bfa52ce97b80461383b2c27dd5a1210b4b679674e28e1dd1b4976be371e0149587efb31d83363ce41c3e2a121e8e10facc81d3bba522191378131834102bc979b0e4dfa47bdf9e3c06a74597b1827aac8b1729688de281a086ad6761dff72f4df2dd117b65308a84feea49a256b98cc362eebdc3065922082cd554750c3c4d66ad66bb46d27800c194aeca0e3201c2da661caa77aa8ea4a8a8c1482fe968309d5bba916058d3c838a2de6195f5dbc4b40f3f772717737da0ac123818bf1282f502e2d07f85ee5f6ab573b49325b7c37c13fcad24a16c383ee62db048278a21a6cf578e93651331470f8baf1f10052445a3ed2492927ee3d311811ff1e1186dce3c8f2b85d7338a0b61d2ab99320a9f9de60b5cb1ab8ee2149fb477959e19d9d4672db15042b253b41dc727bdd5979417df6de43c44f14632a2526f3007ffac9ebf02541ce3479c27c803318cb2ceabfe13b10c0023eeb49ad0570352f1e000745d542d41deed360ec325fa5f94f37e6565b85fcc79dbe0255738b11d56ad0e08a966fb146e910be1010dceb879c24e7be9564a043e62202330975ce0028bff415e1bcbe3bb29e3b63ec26c865548b3666a5e9d243b2ccef1a94d7b5276eeef059aec9f2ab7c91f6f83dfb7f4b1d87f3e2ed86032b4d123e79c93c14665ba4454c9e49270930d633d243b69d14fb9b88cf9b22f4e0ba88cf5aa87090910f8088386293acb9b13b511f54342eac8d5a70029bf2a637337882e4ace50bd5eaf7c22e61d922be3ee39d05be21cb22d98728f1dd2958393844538510c8f1a136deac2725c1a69c139ae03fa4db6e6ec7c2d7040b29c04a2455693b8e5cde5dccc766aa4409b88806a02374d93d5d8f312ec4cdcf3c80fcffbbeeaa52f086b40a889055519d5e303b6c0fd63814bcfac66a7da8a7d22a13688a583f51a42dee3423cfe60c9fbc6e3dd9f26ca752e0e637d378a59878459c63cca6a63a6244c7e8596a6447bd90254c5b0ccdcf2efd20b02b251f357b0a684d9d14c44d854c330ff3e2ca4ea1f32abb593b89567a2f4472894aa70735c3dfe37b60cff6c6a5339805714468a128822d3e02ed30b1dffe5d4ac17c2fe50513f18b361242e5c02fc4bcbaae2f93fb051d2a23da1fe617575212c8f1f934133971b2c20fe0b2b443d4f3e42e6ab65fb97c5cb54c4002ba02037b28eaf96eeace7a40dbf84193e97fe5a4a69ff6c3773382d51b766637ffff07b695d7601f24616637ea1ebc42873f1cde654798d440bc223b0dcb2cdedde02d4c0697239551ad549e9624fd2b252cf580567dcdf9906e8d3b06d8727a6f4ad8f4150b06dc91fb59777707dcec81fef63f194df86c96246fd4b8e8f5d05b93ffceafc5ea34853dd35ea07048e0f457f1a0b5cb8ef6c1f388fbbd35a1391cd867e7b2883efee5d95cbd9c34ff247a57f4769f3c53c561866e2edf4cf6cf3c09cede7c172e3af4db4f0c5897b4f5d93eed4d946046229081b5f873740db220edb7c89fa82432cf48175b93ed16244c72fb975f574b104d541fb59515b67dc7afef5db37f415fa70a424ba75dbcd093b9829bb39b7e9628ac09cb60303c704076da65a74292acfaaabc05b9b85b621ddaf6d9e507a082dd5344f34da840877550c645c03260e11d78f075c01e842e7004bed9633c58ca21754834ce3b005b99fcefcc8451978e43c4b3e666853550d83c123fae5904bf54a89b7cfc40353a6bc31dbafcd88a796985e05e8f1be98c84662c901401534864b0a9e324d894f5dbbac27f495d9da90a3a8dd13b0ed9cf17510c27ddbf17fb5d13b35f1a4397d00ab22b7d1c27a4a951d55314c519af4b8714532932b3c4ce6031365bda27c6b216996a025cd9db408ade1ecabcc10959e530d19a82de4a176d8aa142d4fa573568cefc463e668d1ee030df70758bdc5bb16fb550922c2079d1c4485528d80f8cdee0f44417d38083ba1a274feda3160ca005239503d6e68da207d4dfefd99e62b96ffdbfdbde4bc3cc4f1616f32e5af4cb4a54aa642af8b0aa99c5b5b200113e20838fd7c46cab33989bc6243d1fdee9db8f91966c8b151ec1c6a9df6ccccd254fdfe2b8071e783920bad0858bb892bc79789182f295bccb358bc0ee19abeab76cb1a233274796b4e5b95f30081203ba22c14b18ed17473e07976584b9bd794919f0551122d49bb9e6b69b2a56f72019cf00f144cb04943acdb1aa0bfdcafa0adf86e302ff1ce849fc439fe6cc2308bb1a083a2fdddbc0ad4413d9cc005dfa16325d189422c1dd2ff0ba483d77c41ed19d6d358b72922bfe955e5fbebd6c4b0865704e2177c057155520d0a0fceddde8cbbc2e98b45e0611056002aac3eb6546ea57ddb33d2819a5c5b96368bcf60dead5b5075d0716ee8927dc04ab2ca9ac22a4aaa80819b58a9fcaecd56d037ee0a4e7a31f337342f2c3df9267265469901f60b5e548d8ff280fb97dcc5397b82edaf046b9d7bfb791458c75ae2e2ddc30081d3fce61c56386da4435f180fcadca6acc2b8b156f7001c82a3dee1d6b087d9db7029dcf6a84a58b02cb8dcc09ef0e41752c2ff37a3783e0527223977a8c319bdceccbfe2d458dfdc0be002927e7478e610c17071452554d0aa626b4cf6128e475dc87838d6b84dad7c1e504dada1d11773e84f6533abd3a43a40962811fa42983b8da41b3173b7dc3e86324c85ca7d22cc89970d54c8ec7568b7caad8b3afe47235ce8b628fae90ef243abf7bcd455a77cbe25091874f7730670c3853143b76a9d1fb35b38435ceb9f74c7a3709055d925a0b3a243a2f6c5413320e45130bbf95ebf73716f3c6bcde06e244d96a663024844af92fbf8cda179e4dbc2d362ae84afdf685a60b8b6d94a28ca14c88d0fb4271da228cbe14216409fbb3810ddbeaee5bf35f721ab3aa53f0521b3d39f2591d58a90a5a7f936741ac9aea98c7045e2167d43711e260b49b32f7af400d48ab047e6fce83ea10c389919c29d502aeb440034f3e4eab074b0659d63ed6c32b4ba5b0e5649ac4a98c623d469ec254132701cc5fa7caeee493e0eede6059b129632a850da5564752093f7df460efc26787590fcb988dbd968b0ae66238dde16ec9fcbc559c67233cf2a4b8f03b1d65e377a7905015226eb7302178a4840c71f5c8d3df5d6dd7ef82db1d19a609d682117acdd07b72fa8b5f748d24c42eec12fbd76bb474ab852d04dc1ce0a1a6303ea15087f2378821396542938af70ab23b11009d424b0dac8484a339995db95ae8ab75a5ea79f3e8174def0e3976ff2261b2c39e0d9f669274de933cbb16b684cd59531f02a181f9828f5ce51df022a2b7920494eb3f93eea327fd2a4951158b701565dad2d025221ab455098b1288c7af7d6adfdb18bebe50633178e47741375450d25e43805fe9405fac57fff9508dc0a5885331cfc9ef5ecf4706047648fc8b4d064ff6733aead43522b74f971c483740c8937006dfead30a912121ab21a9f6c5e496743fd307ec0e04b499cdcb153a875aa62c86a34fdf990ad43adb2593a09b8981be211085135d46c3803e7e668e543e33674150bf8942a60ff9df9cd29c077e0d3a4fe73b33bde3f057a01d637599291c7a52c91f60b095a99fb35a2eeda1cad28887fe91d2534eaa860384b250364ddfb124ae3e177391f23047bc1", 0x1000, 0x5, 0x1}, 0xfe) (async) read(0xffffffffffffffff, 0x0, 0x0) 11:36:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000700000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000601800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ff", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d1000/0xb000)=nil, 0xb000, 0x2000000, 0x4000010, r0, 0x8000000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_enter(r5, 0x4969, 0x86f7, 0x1, &(0x7f0000000040)={[0xfffffffffffffffe]}, 0x8) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x6000)=nil, 0x6000, 0x1, 0x40010, r0, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)="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", 0x1000, 0x30002, 0x1}, 0x37) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000005, 0x40810, r5, 0x10000000) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r5, 0x80, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x6, 0x1, 0x5, "0a355330429a872de37303080041a9fee1eff5f6bb4a4a509d98c141a24d8db659bb8d3ac8c53b95c21c8c98075e6d2c6c05ff6aa965b53c75db28eeb784f2", 0x3e}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x3deee479) 11:36:42 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async, rerun: 64) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x105081, 0x23456}, 0x0) (async) io_uring_enter(r0, 0x3252, 0x9fd9, 0x2, &(0x7f0000000400)={[0x5]}, 0x8) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x5000, @fd, 0xfffffffffffffffb, &(0x7f0000000600)="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", 0x1000, 0x5, 0x1}, 0xfe) read(0xffffffffffffffff, 0x0, 0x0) 11:36:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000900000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000058651800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc002000001000700000f", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:42 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xc, 0x4000810, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ed2000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x4000, 0x80}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x7, @fd=r0, 0x0, 0x8, 0x7fffffff, 0x8, 0x0, {0x2}}, 0xffff) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) 11:36:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc002000001000700007f", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000a00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:43 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x42c040, 0x3c, 0xa}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r3}}, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x1000000) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x10000}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:36:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000002661800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000b00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003671800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d1000/0xb000)=nil, 0xb000, 0x2000000, 0x4000010, r0, 0x8000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_enter(r5, 0x4969, 0x86f7, 0x1, &(0x7f0000000040)={[0xfffffffffffffffe]}, 0x8) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x6000)=nil, 0x6000, 0x1, 0x40010, r0, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)="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", 0x1000, 0x30002, 0x1}, 0x37) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000005, 0x40810, r5, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r5, 0x80, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x6, 0x1, 0x5, "0a355330429a872de37303080041a9fee1eff5f6bb4a4a509d98c141a24d8db659bb8d3ac8c53b95c21c8c98075e6d2c6c05ff6aa965b53c75db28eeb784f2", 0x3e}, 0x0, 0x0, 0x0, {0x0, r9}}, 0x3deee479) 11:36:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000fe", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000c00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000681800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00020c00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:43 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xc, 0x4000810, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ed2000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x4000, 0x80}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x7, @fd=r0, 0x0, 0x8, 0x7fffffff, 0x8, 0x0, {0x2}}, 0xffff) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x9, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xc, 0x4000810, r0, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ed2000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x10000000) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x4000, 0x80}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x7, @fd=r0, 0x0, 0x8, 0x7fffffff, 0x8, 0x0, {0x2}}, 0xffff) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r7, 0x0, 0x0) (async) 11:36:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000006c1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000d00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000036c1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:43 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x42c040, 0x3c, 0xa}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r3}}, 0x2) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (rerun: 32) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 32) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (rerun: 32) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async, rerun: 64) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x1000000) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x10000}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:36:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000e00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003701800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000f00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xc, 0x4000810, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ed2000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x4000, 0x80}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x7, @fd=r0, 0x0, 0x8, 0x7fffffff, 0x8, 0x0, {0x2}}, 0xffff) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x9, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xc, 0x4000810, r0, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ed2000/0x2000)=nil, 0x2000, 0x1000004, 0x810, r0, 0x10000000) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x4000, 0x80}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x1) (async) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x7, @fd=r0, 0x0, 0x8, 0x7fffffff, 0x8, 0x0, {0x2}}, 0xffff) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r7, 0x0, 0x0) (async) 11:36:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001100000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 0: r0 = syz_io_uring_setup(0x82, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x210}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x1, 0x1}}}, 0x7ff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r5, 0x63ba, 0xd16f, 0x0, &(0x7f0000000240)={[0x9]}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r7 = fcntl$dupfd(r6, 0x0, r6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r7, 0x7247, 0x4, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="cd617e7c3d84174fb0725268a731ff5c2ebff11052689c5c5285fc2b01e24eed71680850b68167e0d5541b6f01d4ea8d31a0b7cb3d1cf628d1e67e0436d5a105cd4bc65be55140", 0x47, 0x4010, &(0x7f0000000300)=@can, 0x80) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:36:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000741800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001200000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x42c040, 0x3c, 0xa}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r3}}, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x1000000) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x10000}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x42c040, 0x3c, 0xa}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r3}}, 0x2) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x1000000) (async) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x10000}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r8, 0x0, 0x0) (async) 11:36:44 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r6, 0x0, r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x180000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@debug={'debug', 0x3d, 0x1}}, {@posixacl}, {@nodevmap}, {@fscache}], [{@seclabel}, {@fowner_lt={'fowner<', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x65, 0x62, 0x36, 0x62, 0x30, 0x64, 0x63], 0x2d, [0x39, 0x36, 0x62, 0x38], 0x2d, [0x35, 0x65, 0x38, 0x61], 0x2d, [0x65, 0x33, 0x65, 0x34], 0x2d, [0x66, 0x36, 0x64, 0x32, 0x62, 0x64, 0x61, 0x33]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 11:36:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000007a1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00011200000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000801800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00021600000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:45 executing program 0: r0 = syz_io_uring_setup(0x82, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x210}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x1, 0x1}}}, 0x7ff) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r5, 0x63ba, 0xd16f, 0x0, &(0x7f0000000240)={[0x9]}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r7 = fcntl$dupfd(r6, 0x0, r6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r7, 0x7247, 0x4, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f0000000280)="cd617e7c3d84174fb0725268a731ff5c2ebff11052689c5c5285fc2b01e24eed71680850b68167e0d5541b6f01d4ea8d31a0b7cb3d1cf628d1e67e0436d5a105cd4bc65be55140", 0x47, 0x4010, &(0x7f0000000300)=@can, 0x80) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:36:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000811800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:45 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x73, 0x3, &(0x7f0000000180)="bb1754e2a37e89dbcfb9055f2100538fbf4393a204567f10b056f91f8cf61d97c3d36653e2337c9abf70ac168cd087ce7279abafefea87596b9e2a3551f535800df67f1aad20aff52313bab0583034598baec8e49c7fe45fcef1a5cef3cb594ba009564b55ee94db27334b35a264e9f83dabae8cf2f60137d4d951b441e65ee079438a73632df355cab0c2588ef436933baaf5b78687fb4b8b4ec355d45c919ddb6805bb87a3638b104609a73421d3e703682e8cc606e27bece2ebb8dff0f71fb4", 0x9, 0x0, 0x0, {0x1, r7}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:36:45 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r6, 0x0, r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x180000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@debug={'debug', 0x3d, 0x1}}, {@posixacl}, {@nodevmap}, {@fscache}], [{@seclabel}, {@fowner_lt={'fowner<', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x65, 0x62, 0x36, 0x62, 0x30, 0x64, 0x63], 0x2d, [0x39, 0x36, 0x62, 0x38], 0x2d, [0x35, 0x65, 0x38, 0x61], 0x2d, [0x65, 0x33, 0x65, 0x34], 0x2d, [0x66, 0x36, 0x64, 0x32, 0x62, 0x64, 0x61, 0x33]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r4, 0x0, r4) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r6, 0x0, r6) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setuid(r8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x180000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@debug={'debug', 0x3d, 0x1}}, {@posixacl}, {@nodevmap}, {@fscache}], [{@seclabel}, {@fowner_lt={'fowner<', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x65, 0x62, 0x36, 0x62, 0x30, 0x64, 0x63], 0x2d, [0x39, 0x36, 0x62, 0x38], 0x2d, [0x35, 0x65, 0x38, 0x61], 0x2d, [0x65, 0x33, 0x65, 0x34], 0x2d, [0x66, 0x36, 0x64, 0x32, 0x62, 0x64, 0x61, 0x33]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) (async) 11:36:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003881800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00021c00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00032200000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000047881800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000048881800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:46 executing program 0: r0 = syz_io_uring_setup(0x82, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x210}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x1, 0x1}}}, 0x7ff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r5, 0x63ba, 0xd16f, 0x0, &(0x7f0000000240)={[0x9]}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r7 = fcntl$dupfd(r6, 0x0, r6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r7, 0x7247, 0x4, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000280)="cd617e7c3d84174fb0725268a731ff5c2ebff11052689c5c5285fc2b01e24eed71680850b68167e0d5541b6f01d4ea8d31a0b7cb3d1cf628d1e67e0436d5a105cd4bc65be55140", 0x47, 0x4010, &(0x7f0000000300)=@can, 0x80) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) syz_io_uring_setup(0x82, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x210}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r3, 0x0, r3) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @remote}, 0x1, 0x2, 0x1, 0x1}}}, 0x7ff) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) io_uring_enter(r5, 0x63ba, 0xd16f, 0x0, &(0x7f0000000240)={[0x9]}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r6, 0x0, r6) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_enter(r7, 0x7247, 0x4, 0x3, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f0000000280)="cd617e7c3d84174fb0725268a731ff5c2ebff11052689c5c5285fc2b01e24eed71680850b68167e0d5541b6f01d4ea8d31a0b7cb3d1cf628d1e67e0436d5a105cd4bc65be55140", 0x47, 0x4010, &(0x7f0000000300)=@can, 0x80) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r8, 0x0, 0x0) (async) 11:36:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:46 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r6, 0x0, r6) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x180000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@debug={'debug', 0x3d, 0x1}}, {@posixacl}, {@nodevmap}, {@fscache}], [{@seclabel}, {@fowner_lt={'fowner<', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x65, 0x62, 0x36, 0x62, 0x30, 0x64, 0x63], 0x2d, [0x39, 0x36, 0x62, 0x38], 0x2d, [0x35, 0x65, 0x38, 0x61], 0x2d, [0x65, 0x33, 0x65, 0x34], 0x2d, [0x66, 0x36, 0x64, 0x32, 0x62, 0x64, 0x61, 0x33]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 11:36:46 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x73, 0x3, &(0x7f0000000180)="bb1754e2a37e89dbcfb9055f2100538fbf4393a204567f10b056f91f8cf61d97c3d36653e2337c9abf70ac168cd087ce7279abafefea87596b9e2a3551f535800df67f1aad20aff52313bab0583034598baec8e49c7fe45fcef1a5cef3cb594ba009564b55ee94db27334b35a264e9f83dabae8cf2f60137d4d951b441e65ee079438a73632df355cab0c2588ef436933baaf5b78687fb4b8b4ec355d45c919ddb6805bb87a3638b104609a73421d3e703682e8cc606e27bece2ebb8dff0f71fb4", 0x9, 0x0, 0x0, {0x1, r7}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:36:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002500000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002f00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000ffffa8881800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00003400000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000911800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00003a00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:46 executing program 0: r0 = syz_io_uring_setup(0x2f92, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x80201) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:36:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000ffffff9e1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) [ 692.480050][ T24] audit: type=1400 audit(1639654606.511:299): avc: denied { execute } for pid=26476 comm="syz-executor.0" path="/dev/vcsa2" dev="devtmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 11:36:47 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:36:47 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 32) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x73, 0x3, &(0x7f0000000180)="bb1754e2a37e89dbcfb9055f2100538fbf4393a204567f10b056f91f8cf61d97c3d36653e2337c9abf70ac168cd087ce7279abafefea87596b9e2a3551f535800df67f1aad20aff52313bab0583034598baec8e49c7fe45fcef1a5cef3cb594ba009564b55ee94db27334b35a264e9f83dabae8cf2f60137d4d951b441e65ee079438a73632df355cab0c2588ef436933baaf5b78687fb4b8b4ec355d45c919ddb6805bb87a3638b104609a73421d3e703682e8cc606e27bece2ebb8dff0f71fb4", 0x9, 0x0, 0x0, {0x1, r7}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:36:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003a61800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00884700000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000001b21800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:47 executing program 0: r0 = syz_io_uring_setup(0x2f92, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x80201) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:36:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003ce1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) 11:36:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003d21800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00884800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003da1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00034a00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 2: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) r3 = syz_io_uring_setup(0x33d1, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x100000001, &(0x7f00000003c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0xa}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index, 0x10000000000, 0x0, 0x5, 0x7, 0x1, {0x0, r8}}, 0xbd) io_uring_enter(r0, 0x22f8, 0xfffffffb, 0x0, 0x0, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:36:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003e41800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:48 executing program 0: r0 = syz_io_uring_setup(0x2f92, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x80201) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r3, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:36:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004c00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) 11:36:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000ffffffea1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00655800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003ee1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00586500000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 2: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xfffffffb) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) r3 = syz_io_uring_setup(0x33d1, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x100000001, &(0x7f00000003c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0xa}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index, 0x10000000000, 0x0, 0x5, 0x7, 0x1, {0x0, r8}}, 0xbd) (async) io_uring_enter(r0, 0x22f8, 0xfffffffb, 0x0, 0x0, 0x0) (async) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:36:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x5, 0x4000010, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r0, 0x10000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r5, 0x0, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r5, 0xfffffffffffffbe6, 0x9, 0x9, 0x10, 0x0, {0x3}}, 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:36:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00026600000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000ffffffef1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) io_uring_enter(r3, 0x594d, 0x918, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r5, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000600)="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", &(0x7f0000000080)=""/28, 0x4}, 0x20) read(r6, 0x0, 0x0) 11:36:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00036700000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000fffffff01800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 2: r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xfffffffb) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) r3 = syz_io_uring_setup(0x33d1, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x4, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) (rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x100000001, &(0x7f00000003c0)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0xa}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index, 0x10000000000, 0x0, 0x5, 0x7, 0x1, {0x0, r8}}, 0xbd) (async) io_uring_enter(r0, 0x22f8, 0xfffffffb, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (rerun: 64) read(r9, 0x0, 0x0) 11:36:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006c00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x5, 0x4000010, 0xffffffffffffffff, 0x8000000) (async, rerun: 64) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r0, 0x10000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r5, 0x0, r5) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r5, 0xfffffffffffffbe6, 0x9, 0x9, 0x10, 0x0, {0x3}}, 0x2) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:36:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003fa1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:50 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) io_uring_enter(r3, 0x594d, 0x918, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r5, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000600)="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", &(0x7f0000000080)=""/28, 0x4}, 0x20) read(r6, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) (async) io_uring_enter(r3, 0x594d, 0x918, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r4, 0x0, r4) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_enter(r5, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000600)="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", &(0x7f0000000080)=""/28, 0x4}, 0x20) (async) read(r6, 0x0, 0x0) (async) 11:36:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00037000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:50 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1ff}, 0x9) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xdbedc18bf72b55a2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x4, 0x2000}, 0x7fffffff) read(r3, 0x0, 0x0) 11:36:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000003fc1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000000fffe1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007400000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007a00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:50 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x5, 0x4000010, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r0, 0x10000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r5, 0x0, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r5, 0xfffffffffffffbe6, 0x9, 0x9, 0x10, 0x0, {0x3}}, 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x5, 0x4000010, 0xffffffffffffffff, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r0, 0x10000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r5, 0x0, r5) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r5, 0xfffffffffffffbe6, 0x9, 0x9, 0x10, 0x0, {0x3}}, 0x2) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r6, 0x0, 0x0) (async) 11:36:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000fffffffe1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:50 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) io_uring_enter(r3, 0x594d, 0x918, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r5, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000600)="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", &(0x7f0000000080)=""/28, 0x4}, 0x20) read(r6, 0x0, 0x0) 11:36:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00017e00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000000000fff1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00008100000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:51 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1ff}, 0x9) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xdbedc18bf72b55a2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x4, 0x2000}, 0x7fffffff) (async) read(r3, 0x0, 0x0) 11:36:51 executing program 0: r0 = syz_io_uring_setup(0x6fdf, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x10, 0x74, 0x3f, 0x10001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x3, 0x7, {0x0, r3}, 0x7, 0x6, 0x0, {0x0, 0x0, r0}}, 0xaecd) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) dup3(r0, r0, 0x80000) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet(0xa, 0x6, 0x84) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000005440)={{r8}, r9, 0x8, @unused=[0x0, 0x7, 0x0, 0x3ff], @name="e4ef60b313de210209dd8857c6d47fa35b72fe3063c2c58cf51a2c2cbe80d668bdf527aec6786de757bb4f026c942d7bdd225437a240c8fa9673bb90c0607dc2a0a60a0c620ad1dee949efcce42551a777f6b17fc0e520c043d101b277d993224f863755b62e4072f0a5019f8b11401d5381ab2120fef877db43165ca0adca9fe2009976e77d5704635b3a3c04a983f8f650db4a6f450c97908597123eb8379387b6bb85c3fd29f7c6eba6eee5301b12c2d1f1cd176eaf8cd4aa273b47b723312ed918ee4fdd7872dbd0ef414b7a52b1a4f6e8d7d9cd708bcca8cca6ecd61a0375179a6e1d1e7074dfcde97eb6582c8d02f7f6699f30f82b0867d69b5d113a5e55dcca995824f2c6fb2a8fadd31ddf795a1a9ba4d3cad30b5ac1a713b10636ce43d47001d0ea68a6cdd1e29f4aa851f6fcf924f4d6a95a19e336e91de5060ac47f8cce0479282100a2c2db7b63309b0c25474c87edb8c69f34b79f8fde29c0cce919adde2a273c8643a595b89843e2721263cd3d46f115d3a4b11ce7b1f8e844a45a996183d23a3c5ce6a42bd18add77ec518ba2bce61663d57ad587c434af70718b445578d7d8f093b83e16e1fe7f58397d4e3a870f7591ba3336f7842a67fcc14ab56f2642c86355be4934c83f73b6c5728852e12025d7034ea5be2537176dbbabaaf3b114839092397a1b3d09b530c89999026deadb1c801428e2759cf5d5b1dc485cff9f38b1105cba49f0aaaa5c2c9271ed090a7857be3f7c8e7b44100bff1cc42cd5bb4f3df5068e525d50fe2e1f8527a9a9253a48794a354fa2bdca9f86d7e90ea79e9c730cefd4676d5311fdd89c726b67c6511a34024e1413a84780fc85fa60650fbad07dbd0e66645dcd1c3ee84a10a1f0b331a070d153386fab9f68391294b5b4d96c8ef4b4897cde74c666f8923ba24bccd1b01776658b4e4d7e1df65deead8dc400acc447b9ac15db2767220b053b98971cc1956bb5f07420cfdf70d20469c7826636bcd2c108c447ba7e6d6cd56e1eb9a4a76c1aeae193de56b65ee970cf392589323e8aa967a9300ebe96f51a39beac1315294bb9d4749c3de6831e5d0097e2a10827020e1291aeb8a7a2aa5fcaae2b0c5c3798020114dcd9364580c1ca817d5328ae81c809cef5b401e8f49ef945471be5c2ad7a2978547446baf445c7199a191562c9eba8cf4acc977d41883e9fc9a4dae28b3278a8b267daa336cb8f5a8c4c45c4af2231f321a29b972ace2a381a159124d0c06c9a2c11f0afea1afb09968103830f1cfc8a66a8998c2de93d0fcdbca37712998f86a3f35335fd0b63c44c6e938b93da95275b72c5697d4aa6742df9b74c5425e36de2c4401501352c781edbc1574d03f9d3e73233acad19f67e9b261853a484baf109ec1417ceefa8a85b158a4b97eb74bf0acba74201a656e69cfb0308c64edd171aa19902ec6df112af3fcb54402cb754ccd6ba35bea66c76289dd53e1e8638798e70035c12d0a2931281caa66b614274caa14cbf9762e1f05980a1cd6ca700203cb15facdca6b27cd5da5460ddea84dfa81c0ddfbc6130a3361a2d3e443e889da4fca9e0da41287651da01952c7bdd2304def94b903fd607b14b8cc1532a6741fe20be5fc3008a7976101b1f772e116bc94b971859933f365210cb38d3b2d9c72aec80829bd487da83d9ab78de7feda1837c8fc5a064d1b4df8070e29fa682dda857f8c0cae3596144abb6c6b2b983b18921ad8b25a225dfaabf4b93ab8572a472506b464163cdcfeb291bccdd20622eb870e5a652713b747a0b2d01b0233ac23d27c20530af341ae648c04bc27364b93e81c4a4072806892e71d4360a30a0d724ab468d39276eeedc5f59a800274b80340cdd6f3280ef5c37baede4904df420ca81ff352f679b07798cbf2c77d451302ffa4855c715645e8feb039f19b15f211c8f9f2c3cbcf812453f42304c57d037554c9f5340a4f05483ae1199982e8fb9fc3a247a0c5bc1535adaf90e8a5cf85cf60009b2febc45d1955cd2c89aa0a665df0f068b5d21adda4f677294247b812494c16ac10bd974507e5dbc36aa57279f085e1fc5912fbf5e0124442004d199a37f43ef238ef41c7476d6cf87861e53afc27ad097a521acbb61ad435bafa710d84d0bdd992f7f739b8b8ea12d656da606220ba5e2b2b63587e20d97c1db464a95350391404fd62361149e951571a6e0477e7f96c5d933a12464f0c8213a0303880a5758f4a630a60915f4b2fd2cba19546c4823ac5eda294b72c20584d0050cfeec71c300db854d38037d94857b55eb6cd2c8fc35c3b828149e5b4044ccd1062bf7d6c45dd3a93220b01a7e61b785d15ea758a8b223e23703d54e547dfadaa25a5a48f9bbdcee4c1bd4fca865b68b7d340e55ade559b0391bace9bdb0b21f7f4f82edefc2ec8dc4e4f47da6b7d3ad1826203da244033450c62b80f3e9b1877b2c7e01a9b005673770a98ee6974a6b1398c43ea3b223186e928591f646b598891dfb5992292ae557fecb2ce6160d886f3ac5cd8e786db659f675370680ad530e2a82b2d14547846b140753ef37675d24f3ed2dc35b23a938680cca6448cef45769682b0abc67fe134be4af8374a7aca876d8759d995773ff913230c08f1d8fe9d1c451ef751d994fa457a0c3b6a70ac74a25ae76f4af0fa03381c3c957f8e00f2aee976c035ec941568572924a756da92ad73e63fe8541980e7f0ac37e880305056a84c7db33133f6fbdc233e4caeefb6ddb5a7e282378f6c5a793281f3a08bcac2f56ab74fbbd0fc807b089d76211409cde22192c7fe5a0092337aef20fa4e46e72c090e2e9f388d4743c198c1741407867a37bb60cc7bb914ba29d71f343c80999cdf1a16f69ea04ef575a91e75cfd692d01e4f04ad7bfa7653ec10a918fad03fb308f9951e207d854316db1d7d5f31688a277637506e26c394c73f4080101a436dc5052503f1eae3fdc51eb6622a41ae439c2b0de13ba74f8270b331bb784f582b50ecc18ca0e8b20d35d26fcc4950bdd6934a22b522031b1ee619ffdf2a0fc4db7eec6cbd371b4d116d83afdd8278da9855c4637ffeda6464e94cc4d79f5b3813032092e2b4aad023207ef39a157714e8d3026b65d5eb131c34703e9d7ece7de9f5b59ae70b0f9433c19a37426748e742b8c6e2d23d2ad2448f456a8683d3772a27fedd5b2055124a2986577e1028bc71b72b4c520f75d22c8ba1466ba9b9bc0615f58a558e2908df30853fc7178d75f46b34a52a98597edac070db067ab7f561dc4d17e0fbcb4250bf695b7aab6ce409d7593cda2a83258471b1f385301721732537dcaac778bfb1fe3be601b99c5e2da8f736bbfd2a34035230783f03fa0737663ed96361286a1df3d19bc8bf14ac3102d7c8372c183c327540a790bee18bdafaf7b2696672885a025c8fc21e58d2a10131270033c7d7f365ea72f544290b9b441c4444a4ad256cac23b79f6efcd291fca8a7d2ebc7dddc3c2257e23731cc33e034ebf0501b551f479ef0eb121129555930b684ea331bd0c94118383506225e12fea376e7a571fb69269c351921575d6a1052e6dc0855be72120697ce76c108ef7a6c70490b42055ad8503612777f53e8a82d09c1e8a24b612425cb81da72e0abbae0861728c4777836a1ff00389a2704943b71f19dfebd3fe06399c18298ed07f5e8756761c6f72d3336179cb691593e96044863dc22e9890d70129253293d47bffdd56c3c1fb9ac60a63815a6da15867aec555de77c463e9cfa8698eed7a52aa7f5e8b4a15b530d82bdf6c2177bb351224810803a074f8952ecafec51c6a7a6263518fb17b5ad121c5c9d46e26c97b6420d8ffbf43f961fddef3fdeb728338ece3558cb9dd513ae9bfea142e5085f7e02fa1e037b2a4b29377e1aead6eca841c5eded9027548964791e9ab11fae7822767e92515c0a6b483e0e3b8051446a8e0cf30791ac3b862d75ac2c0ee36fa41b5ad0326b5c1786759975cef480617519838f2819562c73d5a8769d04792d3ba78e8d2da0e96d43bce2cd25d28762c225d1ef5bc703d82833976e73c28df450185457f7eb399e529863aedfc158cca74eb8fb92716cbb537eb8c497a008479461ecea862edb16e03a777720f00b08a652ae5bd810a0383bbf8a1795f37ce8aefe6782206bda25dd150117fe1de38aa0eb3ddd0f894febf58b6f54a64c4a8f6f9eece222432f1b17dd8a4b60974e29d2c69fa57ea856022377aba69e447af83b0b4705516107d04a54562cad82dec00357207c60809bc53ca7b9099c73cd87fdd968d611b5781aba63d76e62c3bcaae29466cb234f76b8b68effcd6d2862e3410325dfdedf7f8867a88567d36dcb274fd9075b305dc07b6f15667487e02de5baa5c018696b3536e5b4ede0bb9336c7403a4af564c322e4d67a5917e64729d4ccd278b8cb642cb24a3a4a2f3cea8386e3ca74c490f32d3ee93af899b14740bca54f6bc2bd7b13a82c77a484567222e8e34f4262f1aef3428f16dc6677699a320d3a9e104d661f5d782c1323d9288c59f0a4e6dce98232d153104b18a4a4af4cc936ef7630ebbc3965030b81f6f97577c72f9cb24e5e62e8c78883c251076153b04da2e5035624ac30c062323f7d1c2022e3013fb9f2bc6addcd124cfeb50e8221259f410c9a97db5e9f8458f5fe4a652e141e81c1396b252cc6c064b55520546134a1f6b7177f0cd8947e3fac245096720f388eab7ca48336f39726aac8762a9552c3155eab780ba49693816f6eccd6278093ada890bfbe9b6ec38891db41bef9c6b8ed46c0cd8e2d047884a8378b9462c9d5805a779fa2efbfe6763e204a37a24eaab73ffd1aa3b482a0b79e41a8b5c638ce93dc1397977dc4fe3188cf9f6e9061cc6013eb1c370f61e3f238fecc6c57ef29f9e7413e37911f8a96e6572cdc7244fcdeb823209579b6bf1aea0d61468b722271f7ada70fa82dd79321ff3109d9b40a12d1196543133effb4b26c0007b65e998af5b38e605bcad7f835bc65cb1e8a65219b9428897feee5006ad24faf6d5ef29eda4c869d66bde43a95307daa041b0630c4f05482f2b712210bf38ef32af0da109f1d29a274843b1c74271c8ba1b91499efa34cfee78d2034b979987971c5cf2395ea70b4a35da020052ce6babf9056b56320bb6a1262dd364c5e7624536081dc2ccd79841d2cd1e5bd1b2acc9798a9b45fc9f0074b6517c9e3f9479a00a999db04f07879c92b0738a7cc37636b864137ff014a8d4c5ba5b9d4cf96ef98eb67312336dfe2b15889ca3962d3993ec0a7e55e03f38861eb3eb77179ee10a6f7199dd1e56219c0625070623aba1685f744dffd1b55c3874ca22e0554e824592c270bc1c46bf469ffa5671e4c9e1d42547ee6e10511068c7efeb120c216667005575eb3de658ba9cb0799a50a1f08d65cc5338a8675eb90624fdb241aa844d990dd449f27d91c0b867973286d573f40dde5ed66b3b96a62e6c66a9990473f7ea2e8ce9cac1e2acc09da1ef9b7fbb99f0106cbce2dc5cf4437b6961e4f9214dece1217eede45e830e2d7828b6ca2e759055748f3abca52188b5c7e0a0db19cdbd0174521045d270ae29bc2825a23dcfcd3bef8768cfc1d106cac66a764926ef40f33f9d8aecfd5ec1fd44785168e80a651c8bdf1f0b4fcf739ed31f1c4f736631440f26cfdb6e34858616cd7cbb1905f41ae499aec99169c6"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000340)={{r4}, r9, 0x1a, @unused=[0xfffffffffffffffa, 0xfffffffffffffffe, 0x4, 0xffffffff], @devid}) 11:36:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00038800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:51 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1ff}, 0x9) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xdbedc18bf72b55a2, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x4, 0x2000}, 0x7fffffff) (async, rerun: 32) read(r3, 0x0, 0x0) (rerun: 32) 11:36:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000000007fff1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:51 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xffffffff, 0x10, 0x0, 0xdffffffe}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x8007934, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x80001}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r4, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r3}}, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r4, r6, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2004, @fd_index=0x9, 0x7fffffff, 0x0, 0x0, 0x11, 0x1, {0x3, r7}}, 0x3f) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r3, 0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x364) read(r8, 0x0, 0x0) 11:36:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00478800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000007fffffff1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00488800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000ffffffff1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 0: r0 = syz_io_uring_setup(0x6fdf, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x10, 0x74, 0x3f, 0x10001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x3, 0x7, {0x0, r3}, 0x7, 0x6, 0x0, {0x0, 0x0, r0}}, 0xaecd) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) dup3(r0, r0, 0x80000) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet(0xa, 0x6, 0x84) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000005440)={{r8}, r9, 0x8, @unused=[0x0, 0x7, 0x0, 0x3ff], @name="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"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000340)={{r4}, r9, 0x1a, @unused=[0xfffffffffffffffa, 0xfffffffffffffffe, 0x4, 0xffffffff], @devid}) syz_io_uring_setup(0x6fdf, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x10, 0x74, 0x3f, 0x10001}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r3, 0x0, r3) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x3, 0x7, {0x0, r3}, 0x7, 0x6, 0x0, {0x0, 0x0, r0}}, 0xaecd) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r5, 0x0, 0x0) (async) dup3(r0, r0, 0x80000) (async) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$inet(0xa, 0x6, 0x84) (async) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async) listen(r7, 0x8) (async) accept4(r7, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000005440)={{r8}, r9, 0x8, @unused=[0x0, 0x7, 0x0, 0x3ff], @name="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"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000340)={{r4}, r9, 0x1a, @unused=[0xfffffffffffffffa, 0xfffffffffffffffe, 0x4, 0xffffffff], @devid}) (async) 11:36:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00009100000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0fffffffffffffff1800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0002a600000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xffffffff, 0x10, 0x0, 0xdffffffe}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = syz_io_uring_setup(0x8007934, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x80001}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r3}}, 0x9) (async) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2004, @fd_index=0x9, 0x7fffffff, 0x0, 0x0, 0x11, 0x1, {0x3, r7}}, 0x3f) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r3, 0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x364) (async) read(r8, 0x0, 0x0) 11:36:52 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000632000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x2, 0x9, &(0x7f0000000180)="c68b63cf9657c0042da2ab4d9f74273a9ab9f6b8ab4dce8a796535d74f0b5030e0d2204000d29351bd5eb7a5296184628b246de2d461d4c4685d4db64a29bc0e05010a25e19837d9250965d11685ec898c8989612761973fafb4fd586fad9dd6f0bafb7680f39d601515603608e029e49f4c826bb419a258f7a794b5aa7f973a36d6d04645cb9bbf6c209241064c0ca28b305d2324e8ce642e976a350ac3cb804650be86ea2893aecabd84ab2489558c7267c4a9528a89b18837e8cdc98b488eba4a59b5c6f9b9aaa155695ae31a18f51dccfffe46ebae8e278176c2139f6b6bd247f5", 0xe3, 0x10, 0x1, {0x0, r5}}, 0x8) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:36:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000000300120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003ce00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 0: r0 = syz_io_uring_setup(0x6fdf, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x10, 0x74, 0x3f, 0x10001}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x3, 0x7, {0x0, r3}, 0x7, 0x6, 0x0, {0x0, 0x0, r0}}, 0xaecd) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) dup3(r0, r0, 0x80000) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet(0xa, 0x6, 0x84) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async) listen(r7, 0x8) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000005440)={{r8}, r9, 0x8, @unused=[0x0, 0x7, 0x0, 0x3ff], @name="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"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000340)={{r4}, r9, 0x1a, @unused=[0xfffffffffffffffa, 0xfffffffffffffffe, 0x4, 0xffffffff], @devid}) 11:36:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003d200000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 0: ustat(0x4cd, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) read(r3, 0x0, 0x0) [ 698.484393][T26813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 11:36:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000000400120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0xffffffff, 0x10, 0x0, 0xdffffffe}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x8007934, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x80001}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r3}}, 0x9) (async) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r4, r6, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2004, @fd_index=0x9, 0x7fffffff, 0x0, 0x0, 0x11, 0x1, {0x3, r7}}, 0x3f) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r3, 0x0) syz_io_uring_submit(r9, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x364) read(r8, 0x0, 0x0) 11:36:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003da00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000000800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000632000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x2, 0x9, &(0x7f0000000180)="c68b63cf9657c0042da2ab4d9f74273a9ab9f6b8ab4dce8a796535d74f0b5030e0d2204000d29351bd5eb7a5296184628b246de2d461d4c4685d4db64a29bc0e05010a25e19837d9250965d11685ec898c8989612761973fafb4fd586fad9dd6f0bafb7680f39d601515603608e029e49f4c826bb419a258f7a794b5aa7f973a36d6d04645cb9bbf6c209241064c0ca28b305d2324e8ce642e976a350ac3cb804650be86ea2893aecabd84ab2489558c7267c4a9528a89b18837e8cdc98b488eba4a59b5c6f9b9aaa155695ae31a18f51dccfffe46ebae8e278176c2139f6b6bd247f5", 0xe3, 0x10, 0x1, {0x0, r5}}, 0x8) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000632000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x2, 0x9, &(0x7f0000000180)="c68b63cf9657c0042da2ab4d9f74273a9ab9f6b8ab4dce8a796535d74f0b5030e0d2204000d29351bd5eb7a5296184628b246de2d461d4c4685d4db64a29bc0e05010a25e19837d9250965d11685ec898c8989612761973fafb4fd586fad9dd6f0bafb7680f39d601515603608e029e49f4c826bb419a258f7a794b5aa7f973a36d6d04645cb9bbf6c209241064c0ca28b305d2324e8ce642e976a350ac3cb804650be86ea2893aecabd84ab2489558c7267c4a9528a89b18837e8cdc98b488eba4a59b5c6f9b9aaa155695ae31a18f51dccfffe46ebae8e278176c2139f6b6bd247f5", 0xe3, 0x10, 0x1, {0x0, r5}}, 0x8) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r6, 0x0, 0x0) (async) 11:36:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003e400000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 0: ustat(0x4cd, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) read(r3, 0x0, 0x0) ustat(0x4cd, &(0x7f0000000000)) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) read(r3, 0x0, 0x0) (async) 11:36:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003ee00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 699.366675][T26880] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 699.376308][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:36:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x40000001}}, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x3ff) read(r3, 0x0, 0x0) 11:36:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003fa00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003fc00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000000a00120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fffe00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 64) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 64) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000632000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index=0x2, 0x9, &(0x7f0000000180)="c68b63cf9657c0042da2ab4d9f74273a9ab9f6b8ab4dce8a796535d74f0b5030e0d2204000d29351bd5eb7a5296184628b246de2d461d4c4685d4db64a29bc0e05010a25e19837d9250965d11685ec898c8989612761973fafb4fd586fad9dd6f0bafb7680f39d601515603608e029e49f4c826bb419a258f7a794b5aa7f973a36d6d04645cb9bbf6c209241064c0ca28b305d2324e8ce642e976a350ac3cb804650be86ea2893aecabd84ab2489558c7267c4a9528a89b18837e8cdc98b488eba4a59b5c6f9b9aaa155695ae31a18f51dccfffe46ebae8e278176c2139f6b6bd247f5", 0xe3, 0x10, 0x1, {0x0, r5}}, 0x8) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:36:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:53 executing program 0: ustat(0x4cd, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) read(r3, 0x0, 0x0) ustat(0x4cd, &(0x7f0000000000)) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) read(r3, 0x0, 0x0) (async) 11:36:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000001000120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 699.530157][T27061] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 699.610794][T27080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:36:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000fff00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00020000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006d3000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index, 0x6, 0x0, 0x5}, 0x10001) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r4, 0x0, r4) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x8, &(0x7f0000000000)={0x77359400}}, 0x368e) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r7, 0x1, 0x7, 0x1f, 0x100000001, 0x0, 0x403, @struct={0x40, 0x8}, 0x0, 0xc1e, [0x5, 0x81, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage, 0x8, 0x800, [0x9f3, 0x0, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={r7, 0x8, 0x1, [0x7f, 0x628f, 0x0, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x0, 0x7, 0x5, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x100000000, 0x81, 0x69ab, 0x0, 0x3, 0x7, 0x0, 0xffffffff, 0x0, 0x8, 0x1000000000, 0x4, 0x3, 0x0, 0x8, 0x1, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x0, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x10000, 0x4, 0x3, 0x0, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x0, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x0, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000600)={r7, 0x3, 0x1, [0xffffffffffff22d2, 0x723b, 0x9, 0x4, 0x5], [0x9ee9, 0x100000000, 0x4, 0x1ff, 0x71, 0x4, 0x8, 0x7, 0x400, 0x100, 0x1, 0x2, 0x81, 0x8, 0x20, 0x1f, 0x4800000000000, 0x400000, 0x1f, 0x7ff, 0xe12, 0x3, 0x7, 0x6, 0x100000001, 0xfffffffffffffffd, 0x100000001, 0x171f, 0x1, 0xb654, 0x100, 0x2, 0xd9e, 0x3, 0xffffffffffff8001, 0x2, 0x10000, 0xf8, 0x20, 0x0, 0x8000, 0x171, 0x7, 0x2ac804f0, 0x3, 0xf54, 0x2, 0x40, 0x2, 0x11, 0x7, 0x2, 0x7, 0xd8, 0x7, 0x2, 0x81, 0x20, 0x9, 0x80000001, 0x2aa, 0x6, 0x7, 0x1, 0x9, 0x6c, 0x5, 0xffff, 0x1, 0x80, 0x3f, 0x9, 0xfffffffffffffffe, 0x1d1, 0x1, 0x8, 0x8545, 0x6, 0x6, 0x6, 0x81, 0x400, 0xffff, 0x10000, 0x0, 0x80, 0x7, 0x5, 0x6, 0x62b, 0x4, 0x2, 0x800, 0xd6b, 0x1, 0x355, 0x0, 0x5, 0x5, 0x40, 0xffffffff80000000, 0x100, 0xfffffffffffffffe, 0x81, 0x7fff, 0x80000000, 0x401, 0x0, 0xfffffffffffffffa, 0x0, 0xffff, 0x5, 0x5, 0x10001, 0x3, 0xa0, 0x9, 0x1, 0x8, 0xcd5d, 0x800]}) 11:36:54 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x40000001}}, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x3ff) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x40000001}}, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x3ff) (async) read(r3, 0x0, 0x0) (async) 11:36:54 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd, 0x3, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2000e, 0x0, 0x0, 0x0, {0x4040}, 0x0, {0x0, r6}}, 0x4) 11:36:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00030000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="007fff00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ff", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00feff00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00040000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00050000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004003000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000004000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f00006d3000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index, 0x6, 0x0, 0x5}, 0x10001) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r4, 0x0, r4) (async) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x8, &(0x7f0000000000)={0x77359400}}, 0x368e) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r7, 0x1, 0x7, 0x1f, 0x100000001, 0x0, 0x403, @struct={0x40, 0x8}, 0x0, 0xc1e, [0x5, 0x81, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage, 0x8, 0x800, [0x9f3, 0x0, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={r7, 0x8, 0x1, [0x7f, 0x628f, 0x0, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x0, 0x7, 0x5, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x100000000, 0x81, 0x69ab, 0x0, 0x3, 0x7, 0x0, 0xffffffff, 0x0, 0x8, 0x1000000000, 0x4, 0x3, 0x0, 0x8, 0x1, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x0, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x10000, 0x4, 0x3, 0x0, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x0, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x0, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000600)={r7, 0x3, 0x1, [0xffffffffffff22d2, 0x723b, 0x9, 0x4, 0x5], [0x9ee9, 0x100000000, 0x4, 0x1ff, 0x71, 0x4, 0x8, 0x7, 0x400, 0x100, 0x1, 0x2, 0x81, 0x8, 0x20, 0x1f, 0x4800000000000, 0x400000, 0x1f, 0x7ff, 0xe12, 0x3, 0x7, 0x6, 0x100000001, 0xfffffffffffffffd, 0x100000001, 0x171f, 0x1, 0xb654, 0x100, 0x2, 0xd9e, 0x3, 0xffffffffffff8001, 0x2, 0x10000, 0xf8, 0x20, 0x0, 0x8000, 0x171, 0x7, 0x2ac804f0, 0x3, 0xf54, 0x2, 0x40, 0x2, 0x11, 0x7, 0x2, 0x7, 0xd8, 0x7, 0x2, 0x81, 0x20, 0x9, 0x80000001, 0x2aa, 0x6, 0x7, 0x1, 0x9, 0x6c, 0x5, 0xffff, 0x1, 0x80, 0x3f, 0x9, 0xfffffffffffffffe, 0x1d1, 0x1, 0x8, 0x8545, 0x6, 0x6, 0x6, 0x81, 0x400, 0xffff, 0x10000, 0x0, 0x80, 0x7, 0x5, 0x6, 0x62b, 0x4, 0x2, 0x800, 0xd6b, 0x1, 0x355, 0x0, 0x5, 0x5, 0x40, 0xffffffff80000000, 0x100, 0xfffffffffffffffe, 0x81, 0x7fff, 0x80000000, 0x401, 0x0, 0xfffffffffffffffa, 0x0, 0xffff, 0x5, 0x5, 0x10001, 0x3, 0xa0, 0x9, 0x1, 0x8, 0xcd5d, 0x800]}) 11:36:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ff", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00060000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000340000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:55 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async, rerun: 32) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) (rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x40000001}}, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x3ff) read(r3, 0x0, 0x0) 11:36:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd, 0x3, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2000e, 0x0, 0x0, 0x0, {0x4040}, 0x0, {0x0, r6}}, 0x4) 11:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00070000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000010000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00080000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000020000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00006d3000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index, 0x6, 0x0, 0x5}, 0x10001) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r4, 0x0, r4) (async) r6 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x8, &(0x7f0000000000)={0x77359400}}, 0x368e) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r7, 0x1, 0x7, 0x1f, 0x100000001, 0x0, 0x403, @struct={0x40, 0x8}, 0x0, 0xc1e, [0x5, 0x81, 0x0, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x7, 0x6, 0x4, 0x3ff, 0x11, @usage, 0x8, 0x800, [0x9f3, 0x0, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={r7, 0x8, 0x1, [0x7f, 0x628f, 0x0, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x0, 0x7, 0x5, 0x0, 0x9, 0x80000001, 0x0, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x100000000, 0x81, 0x69ab, 0x0, 0x3, 0x7, 0x0, 0xffffffff, 0x0, 0x8, 0x1000000000, 0x4, 0x3, 0x0, 0x8, 0x1, 0x4, 0x8, 0xe2, 0x1000, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x0, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x10000, 0x4, 0x3, 0x0, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x8e2, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x7, 0x6, 0x0, 0x9, 0x2, 0xb37, 0x159, 0x1000, 0x1, 0x10000, 0x0, 0xb56, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7fffffff, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x7, 0x100000001, 0x1000000009]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000600)={r7, 0x3, 0x1, [0xffffffffffff22d2, 0x723b, 0x9, 0x4, 0x5], [0x9ee9, 0x100000000, 0x4, 0x1ff, 0x71, 0x4, 0x8, 0x7, 0x400, 0x100, 0x1, 0x2, 0x81, 0x8, 0x20, 0x1f, 0x4800000000000, 0x400000, 0x1f, 0x7ff, 0xe12, 0x3, 0x7, 0x6, 0x100000001, 0xfffffffffffffffd, 0x100000001, 0x171f, 0x1, 0xb654, 0x100, 0x2, 0xd9e, 0x3, 0xffffffffffff8001, 0x2, 0x10000, 0xf8, 0x20, 0x0, 0x8000, 0x171, 0x7, 0x2ac804f0, 0x3, 0xf54, 0x2, 0x40, 0x2, 0x11, 0x7, 0x2, 0x7, 0xd8, 0x7, 0x2, 0x81, 0x20, 0x9, 0x80000001, 0x2aa, 0x6, 0x7, 0x1, 0x9, 0x6c, 0x5, 0xffff, 0x1, 0x80, 0x3f, 0x9, 0xfffffffffffffffe, 0x1d1, 0x1, 0x8, 0x8545, 0x6, 0x6, 0x6, 0x81, 0x400, 0xffff, 0x10000, 0x0, 0x80, 0x7, 0x5, 0x6, 0x62b, 0x4, 0x2, 0x800, 0xd6b, 0x1, 0x355, 0x0, 0x5, 0x5, 0x40, 0xffffffff80000000, 0x100, 0xfffffffffffffffe, 0x81, 0x7fff, 0x80000000, 0x401, 0x0, 0xfffffffffffffffa, 0x0, 0xffff, 0x5, 0x5, 0x10001, 0x3, 0xa0, 0x9, 0x1, 0x8, 0xcd5d, 0x800]}) 11:36:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000030000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00090000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 64) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd, 0x3, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2000e, 0x0, 0x0, 0x0, {0x4040}, 0x0, {0x0, r6}}, 0x4) 11:36:56 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x20) io_uring_enter(r3, 0x45cc, 0x9c1e, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:36:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000040000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000a0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ff", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000b0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000050000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000060000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9e8e, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:36:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000c0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:56 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x20) io_uring_enter(r3, 0x45cc, 0x9c1e, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:36:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000070000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7, 0x8, 0x0, {0x0, 0x0, r0}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r3, 0x0, &(0x7f00000001c0)="4887a6a7ca14be93bd14fab48b8615d8a2b9887effa5b5c4cd8db73dd8be3abdf926e4ec1f54f9583890a9fa06fe6b828166fa9a17991fe3e8e3784e7b749995f5b49f83e5", 0x45, 0x40000, 0x0, {0x0, r4}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) epoll_wait(r6, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000047c0)={0xffffffffffffffff, &(0x7f00000046c0)="83fca24c154e9723b93c63a03487a3aea06bbba37ebd18e494539224544cf892eff14a03f8c589565d96584be46bf5fbd5e8829a4cd8954a5d50f5aba6f2b35fb072c000a5f45d53d389ace6de703bec9d002e6bfb696098b3a59ab32a8826577ab075c036acf38329a366418658da96567d554e16f8d9973ff962775191b9354768e880511eb3b3e74c2a39810786e0b045001cb84335c167dc3a5fa2cbac6dcc32186eead96403", &(0x7f0000004780)=@buf="0eabe188fca0b1c888dbd09a2fa4ef700f8960a14535c7f24c42ea661274d6ffe63b75cde47fa6f6", 0x1}, 0x20) 11:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000d0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ff", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000080000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000e0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ff", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000090000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000a0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9e8e, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:36:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000b0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x20) io_uring_enter(r3, 0x45cc, 0x9c1e, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) creat(&(0x7f0000000000)='./file0\x00', 0x20) (async) io_uring_enter(r3, 0x45cc, 0x9c1e, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r4, 0x0, 0x0) (async) 11:36:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7, 0x8, 0x0, {0x0, 0x0, r0}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x800) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r3, 0x0, &(0x7f00000001c0)="4887a6a7ca14be93bd14fab48b8615d8a2b9887effa5b5c4cd8db73dd8be3abdf926e4ec1f54f9583890a9fa06fe6b828166fa9a17991fe3e8e3784e7b749995f5b49f83e5", 0x45, 0x40000, 0x0, {0x0, r4}}, 0x9) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) (async) epoll_wait(r6, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000047c0)={0xffffffffffffffff, &(0x7f00000046c0)="83fca24c154e9723b93c63a03487a3aea06bbba37ebd18e494539224544cf892eff14a03f8c589565d96584be46bf5fbd5e8829a4cd8954a5d50f5aba6f2b35fb072c000a5f45d53d389ace6de703bec9d002e6bfb696098b3a59ab32a8826577ab075c036acf38329a366418658da96567d554e16f8d9973ff962775191b9354768e880511eb3b3e74c2a39810786e0b045001cb84335c167dc3a5fa2cbac6dcc32186eead96403", &(0x7f0000004780)=@buf="0eabe188fca0b1c888dbd09a2fa4ef700f8960a14535c7f24c42ea661274d6ffe63b75cde47fa6f6", 0x1}, 0x20) 11:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000f0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000c0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000020c0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00100000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000d0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ff", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:58 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9e8e, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00110000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:58 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x810, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd_index=0x6, 0x5, &(0x7f0000000180)=""/230, 0xe6, 0x6, 0x3}, 0x8) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x7, @local, 'vlan1\x00'}}}, 0x10001) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x200a00, 0x108, 0x10}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x71) read(r4, 0x0, 0x0) 11:36:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000e0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7, 0x8, 0x0, {0x0, 0x0, r0}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x800) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r3, 0x0, &(0x7f00000001c0)="4887a6a7ca14be93bd14fab48b8615d8a2b9887effa5b5c4cd8db73dd8be3abdf926e4ec1f54f9583890a9fa06fe6b828166fa9a17991fe3e8e3784e7b749995f5b49f83e5", 0x45, 0x40000, 0x0, {0x0, r4}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) epoll_wait(r6, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6) (async) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000047c0)={0xffffffffffffffff, &(0x7f00000046c0)="83fca24c154e9723b93c63a03487a3aea06bbba37ebd18e494539224544cf892eff14a03f8c589565d96584be46bf5fbd5e8829a4cd8954a5d50f5aba6f2b35fb072c000a5f45d53d389ace6de703bec9d002e6bfb696098b3a59ab32a8826577ab075c036acf38329a366418658da96567d554e16f8d9973ff962775191b9354768e880511eb3b3e74c2a39810786e0b045001cb84335c167dc3a5fa2cbac6dcc32186eead96403", &(0x7f0000004780)=@buf="0eabe188fca0b1c888dbd09a2fa4ef700f8960a14535c7f24c42ea661274d6ffe63b75cde47fa6f6", 0x1}, 0x20) (rerun: 64) 11:36:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00120000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000f0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00180000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00250000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000088", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000100000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="002f0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:59 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x810, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd_index=0x6, 0x5, &(0x7f0000000180)=""/230, 0xe6, 0x6, 0x3}, 0x8) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x7, @local, 'vlan1\x00'}}}, 0x10001) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x200a00, 0x108, 0x10}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x71) read(r4, 0x0, 0x0) 11:36:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc002000001000700007f", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d2000/0x3000)=nil, 0x3000, 0x200000d, 0x810, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x10000000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x20, &(0x7f0000000240)=[r4, r5, r0, r0, r0, 0xffffffffffffffff], 0x6, 0x0, 0x1, {0x0, r6}}, 0x3ff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000134a4a800000018", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) io_uring_enter(r7, 0xab0, 0x61b4, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r9, 0x0, r9) write$binfmt_misc(r9, &(0x7f0000000340)={'syz1', "9fadbe9014d89938c1f37bba3caecbcebbe7dc00014b49f019cb18ca9e1100ab385bd59bb05172286f008b41adc75b248e67be1acc59c38a6e4ff6e527686abe7ebda268627f122f622a3dd434495c5ba79bd35f890a55998e38a94e3480336ed9efa3532c576a79ae7d72b25d943dd80b9f6bca39d425667181362cc6b2fb9e7e822b991b394f5e571b2554b4f3c604d0518df71f004db72b851833d2509ec85463c8165cdb58522bb30867f620ccd74dce5ff959f6b80ba86dfad30c79b4dec6c61c5b52b0e0"}, 0xcb) read(r8, 0x0, 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 11:36:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00340000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000110000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:59 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1, &(0x7f0000000340)=""/204, 0xcc}, 0x0, 0x3, 0x0, {0x3, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x2, r8, 0x1, 0x4, 0x6, @local}, 0x14) r9 = syz_io_uring_setup(0x7e5e, &(0x7f0000000500)={0x0, 0xed9d, 0x0, 0x3, 0x376}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000580)) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x3000001, 0x10, r0, 0x0) r11 = signalfd4(r0, &(0x7f0000000480)={[0x200]}, 0x8, 0x0) syz_io_uring_submit(r10, r6, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r11, &(0x7f00000004c0)={0x2}, r3, 0x1, 0x0, 0x1, {0x0, r7}}, 0x1) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ppoll(&(0x7f00000006c0)=[{r9, 0x4312}, {0xffffffffffffffff, 0x9a}, {0xffffffffffffffff, 0x104}, {r9, 0x10}, {r0, 0x6500}], 0x5, &(0x7f0000000740)={r13, r14+10000000}, &(0x7f0000000780)={[0xe489]}, 0x8) read(r12, 0x0, 0x0) 11:36:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc002000001000700009e", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="003a0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000120000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ea", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:36:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00420000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:36:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00480000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) [ 705.573826][ T24] audit: type=1400 audit(1639654619.601:300): avc: denied { write } for pid=27469 comm="syz-executor.2" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 11:37:00 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x810, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd_index=0x6, 0x5, &(0x7f0000000180)=""/230, 0xe6, 0x6, 0x3}, 0x8) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x7, @local, 'vlan1\x00'}}}, 0x10001) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x200a00, 0x108, 0x10}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}, 0x71) (async) read(r4, 0x0, 0x0) 11:37:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ef", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:00 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d2000/0x3000)=nil, 0x3000, 0x200000d, 0x810, r0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x10000000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x20, &(0x7f0000000240)=[r4, r5, r0, r0, r0, 0xffffffffffffffff], 0x6, 0x0, 0x1, {0x0, r6}}, 0x3ff) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000134a4a800000018", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) (async, rerun: 64) io_uring_enter(r7, 0xab0, 0x61b4, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r9, 0x0, r9) write$binfmt_misc(r9, &(0x7f0000000340)={'syz1', "9fadbe9014d89938c1f37bba3caecbcebbe7dc00014b49f019cb18ca9e1100ab385bd59bb05172286f008b41adc75b248e67be1acc59c38a6e4ff6e527686abe7ebda268627f122f622a3dd434495c5ba79bd35f890a55998e38a94e3480336ed9efa3532c576a79ae7d72b25d943dd80b9f6bca39d425667181362cc6b2fb9e7e822b991b394f5e571b2554b4f3c604d0518df71f004db72b851833d2509ec85463c8165cdb58522bb30867f620ccd74dce5ff959f6b80ba86dfad30c79b4dec6c61c5b52b0e0"}, 0xcb) (async) read(r8, 0x0, 0x0) (async) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 11:37:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000001120000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="004c0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000f0", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1, &(0x7f0000000340)=""/204, 0xcc}, 0x0, 0x3, 0x0, {0x3, r7}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x2, r8, 0x1, 0x4, 0x6, @local}, 0x14) (async) r9 = syz_io_uring_setup(0x7e5e, &(0x7f0000000500)={0x0, 0xed9d, 0x0, 0x3, 0x376}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000580)) (async) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x3000001, 0x10, r0, 0x0) (async) r11 = signalfd4(r0, &(0x7f0000000480)={[0x200]}, 0x8, 0x0) syz_io_uring_submit(r10, r6, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r11, &(0x7f00000004c0)={0x2}, r3, 0x1, 0x0, 0x1, {0x0, r7}}, 0x1) (async) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ppoll(&(0x7f00000006c0)=[{r9, 0x4312}, {0xffffffffffffffff, 0x9a}, {0xffffffffffffffff, 0x104}, {r9, 0x10}, {r0, 0x6500}], 0x5, &(0x7f0000000740)={r13, r14+10000000}, &(0x7f0000000780)={[0xe489]}, 0x8) (async) read(r12, 0x0, 0x0) 11:37:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="005e0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000fe", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000002160000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00600000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00680000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000180000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:01 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d2000/0x3000)=nil, 0x3000, 0x200000d, 0x810, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x10000000) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x20, &(0x7f0000000240)=[r4, r5, r0, r0, r0, 0xffffffffffffffff], 0x6, 0x0, 0x1, {0x0, r6}}, 0x3ff) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000134a4a800000018", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) io_uring_enter(r7, 0xab0, 0x61b4, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r9, 0x0, r9) (async) write$binfmt_misc(r9, &(0x7f0000000340)={'syz1', "9fadbe9014d89938c1f37bba3caecbcebbe7dc00014b49f019cb18ca9e1100ab385bd59bb05172286f008b41adc75b248e67be1acc59c38a6e4ff6e527686abe7ebda268627f122f622a3dd434495c5ba79bd35f890a55998e38a94e3480336ed9efa3532c576a79ae7d72b25d943dd80b9f6bca39d425667181362cc6b2fb9e7e822b991b394f5e571b2554b4f3c604d0518df71f004db72b851833d2509ec85463c8165cdb58522bb30867f620ccd74dce5ff959f6b80ba86dfad30c79b4dec6c61c5b52b0e0"}, 0xcb) read(r8, 0x0, 0x0) (async) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) 11:37:01 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x9de, 0x1, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x724, 0x547f, 0x2, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x8) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_setup(0x7a2b, &(0x7f0000000180)={0x0, 0x3abb, 0x1, 0x1, 0x8a, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) read(r3, 0x0, 0x0) 11:37:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="006c0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000021c0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1, &(0x7f0000000340)=""/204, 0xcc}, 0x0, 0x3, 0x0, {0x3, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x2, r8, 0x1, 0x4, 0x6, @local}, 0x14) r9 = syz_io_uring_setup(0x7e5e, &(0x7f0000000500)={0x0, 0xed9d, 0x0, 0x3, 0x376}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000580)) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x3000001, 0x10, r0, 0x0) r11 = signalfd4(r0, &(0x7f0000000480)={[0x200]}, 0x8, 0x0) syz_io_uring_submit(r10, r6, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r11, &(0x7f00000004c0)={0x2}, r3, 0x1, 0x0, 0x1, {0x0, r7}}, 0x1) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ppoll(&(0x7f00000006c0)=[{r9, 0x4312}, {0xffffffffffffffff, 0x9a}, {0xffffffffffffffff, 0x104}, {r9, 0x10}, {r0, 0x6500}], 0x5, &(0x7f0000000740)={r13, r14+10000000}, &(0x7f0000000780)={[0xe489]}, 0x8) read(r12, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1, &(0x7f0000000340)=""/204, 0xcc}, 0x0, 0x3, 0x0, {0x3, r7}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00'}) (async) connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x2, r8, 0x1, 0x4, 0x6, @local}, 0x14) (async) syz_io_uring_setup(0x7e5e, &(0x7f0000000500)={0x0, 0xed9d, 0x0, 0x3, 0x376}, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000580)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x3000001, 0x10, r0, 0x0) (async) signalfd4(r0, &(0x7f0000000480)={[0x200]}, 0x8, 0x0) (async) syz_io_uring_submit(r10, r6, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r11, &(0x7f00000004c0)={0x2}, r3, 0x1, 0x0, 0x1, {0x0, r7}}, 0x1) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) clock_gettime(0x0, &(0x7f0000000700)) (async) ppoll(&(0x7f00000006c0)=[{r9, 0x4312}, {0xffffffffffffffff, 0x9a}, {0xffffffffffffffff, 0x104}, {r9, 0x10}, {r0, 0x6500}], 0x5, &(0x7f0000000740)={r13, r14+10000000}, &(0x7f0000000780)={[0xe489]}, 0x8) (async) read(r12, 0x0, 0x0) (async) 11:37:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00740000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003220000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000250000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="007a0000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) read(r3, 0x0, 0x0) 11:37:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00910000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000002f0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:02 executing program 0: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x600, 0x18, 0x14}, 0x18) r1 = syz_io_uring_setup(0x18b, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x171, 0x0, r0}, &(0x7f0000634000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r9, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r8}}, 0x9) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) syz_io_uring_submit(r9, r11, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r9, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r0, 0x80, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x0, 0x0, 0x1}, 0x80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r12, 0x0, 0x0) 11:37:02 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x9de, 0x1, 0x3, 0x0, 0x0) (async) io_uring_enter(r0, 0x724, 0x547f, 0x2, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x8) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_setup(0x7a2b, &(0x7f0000000180)={0x0, 0x3abb, 0x1, 0x1, 0x8a, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) read(r3, 0x0, 0x0) 11:37:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000340000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00020100000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000003a0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00120100000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) read(r3, 0x0, 0x0) 11:37:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000400000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00b20100000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:03 executing program 0: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x600, 0x18, 0x14}, 0x18) r1 = syz_io_uring_setup(0x18b, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x171, 0x0, r0}, &(0x7f0000634000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r9, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r8}}, 0x9) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) syz_io_uring_submit(r9, r11, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r9, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r0, 0x80, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x0, 0x0, 0x1}, 0x80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r12, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x600, 0x18, 0x14}, 0x18) (async) syz_io_uring_setup(0x18b, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x171, 0x0, r0}, &(0x7f0000634000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r9, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r8}}, 0x9) (async) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) (async) syz_io_uring_submit(r9, r11, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(r9, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r0, 0x80, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x0, 0x0, 0x1}, 0x80) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r12, 0x0, 0x0) (async) 11:37:03 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x9de, 0x1, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x724, 0x547f, 0x2, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x8) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_setup(0x7a2b, &(0x7f0000000180)={0x0, 0x3abb, 0x1, 0x1, 0x8a, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000000)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x9de, 0x1, 0x3, 0x0, 0x0) (async) io_uring_enter(r0, 0x724, 0x547f, 0x2, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x8) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_setup(0x7a2b, &(0x7f0000000180)={0x0, 0x3abb, 0x1, 0x1, 0x8a, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async) read(r3, 0x0, 0x0) (async) 11:37:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00010200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000480000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000c0200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000034a0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) (async) read(r3, 0x0, 0x0) (async) 11:37:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00160200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000004c0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 0: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x600, 0x18, 0x14}, 0x18) r1 = syz_io_uring_setup(0x18b, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x171, 0x0, r0}, &(0x7f0000634000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r8 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r9, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r8}}, 0x9) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) syz_io_uring_submit(r9, r11, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(r9, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r0, 0x80, &(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x0, 0x0, 0x1}, 0x80) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (rerun: 64) read(r12, 0x0, 0x0) 11:37:03 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x52cb, 0xd0d0, 0x2, &(0x7f0000000000)={[0x7fffffff]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0xa, 0x8010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="3a93eae1c3f32e06b12ca60bf69c6abeeaa28eb04380e3f32acf9144f28b269e266c82a903bda8b428bf1197e278cd57ab16b8030922fb1768dc92faf4c561ec66aa0808526c855c2b1ffa29b1d5155bb0635ec2afe0b8832e98f09472d512d386a53ebb0ace73275634051079624fb1860b9155ac2776a02d8e7a81aab04c67a5c0d6a6b9677a559c0cf4c471fdafe47a9ea2e73a8ecf08071f971d93312d10d8b087b57e", 0xa5, 0x4c074, 0x0, {0x0, r4}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) r6 = socket$isdn(0x22, 0x3, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 11:37:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="005e0200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000600000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00660200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000058650000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000000)=0x4, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000002660000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="a266155b032e7dd6ab3734349a467b3fbfb6f53c22a30962c0f75c22c49e00066dd3c08c2c7b4fbf0cbc1da4efbada5618d2af134df9ecc57d58ec942d8617bd58368050b78664e8", 0x48}, {&(0x7f0000000180)="ec9fc26b92c2f45959a758c1f5621a70bc7c29621a85c10db5b2b7934e44ccbc84edad359e8ae370c9f41770ba6e20ec2173e36043016e1934117842a08222a21d2040e419d5c35d8259baa6a6b5a65f3494a65e634dc0f40499f607fce6f1cb9f3bf48c43c770", 0x67}], 0x2, &(0x7f0000000340)=[{0xe8, 0x117, 0x2, "9ae004d288e6e9181f13cbbac70666990c640651e84904a44ce97c42e505327d9838c417148ad2117661572d06689fd938fda69277a25767607b40606104f9d3acbf86e36fa9d715c276804425cc601ddd4d1d143bc510e1da97f1c5119b00d4b7c19290585c377ef2d2659d924e11d84939b8b7df340324b60090445af27a6dea68ff8d62a927c47a44f35578e2d3a9be41272e60b6e09721b6aafb189d2b77a77f1b799b06eac43f253509e4e3c24e0bbbeedc62f4b4b167afaafe74fafa99aea0f893899d417e4d1f2e897dd360ec6fe67ebcff99060c"}], 0xe8}, 0x0, 0x80, 0x1}, 0x6) 11:37:04 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x52cb, 0xd0d0, 0x2, &(0x7f0000000000)={[0x7fffffff]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0xa, 0x8010, r0, 0x10000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="3a93eae1c3f32e06b12ca60bf69c6abeeaa28eb04380e3f32acf9144f28b269e266c82a903bda8b428bf1197e278cd57ab16b8030922fb1768dc92faf4c561ec66aa0808526c855c2b1ffa29b1d5155bb0635ec2afe0b8832e98f09472d512d386a53ebb0ace73275634051079624fb1860b9155ac2776a02d8e7a81aab04c67a5c0d6a6b9677a559c0cf4c471fdafe47a9ea2e73a8ecf08071f971d93312d10d8b087b57e", 0xa5, 0x4c074, 0x0, {0x0, r4}}, 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) r6 = socket$isdn(0x22, 0x3, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 11:37:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00670300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003670000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000680000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="006c0300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000006c0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00700300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async, rerun: 64) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 32) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000000)=0x4, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 64) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (rerun: 64) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="a266155b032e7dd6ab3734349a467b3fbfb6f53c22a30962c0f75c22c49e00066dd3c08c2c7b4fbf0cbc1da4efbada5618d2af134df9ecc57d58ec942d8617bd58368050b78664e8", 0x48}, {&(0x7f0000000180)="ec9fc26b92c2f45959a758c1f5621a70bc7c29621a85c10db5b2b7934e44ccbc84edad359e8ae370c9f41770ba6e20ec2173e36043016e1934117842a08222a21d2040e419d5c35d8259baa6a6b5a65f3494a65e634dc0f40499f607fce6f1cb9f3bf48c43c770", 0x67}], 0x2, &(0x7f0000000340)=[{0xe8, 0x117, 0x2, "9ae004d288e6e9181f13cbbac70666990c640651e84904a44ce97c42e505327d9838c417148ad2117661572d06689fd938fda69277a25767607b40606104f9d3acbf86e36fa9d715c276804425cc601ddd4d1d143bc510e1da97f1c5119b00d4b7c19290585c377ef2d2659d924e11d84939b8b7df340324b60090445af27a6dea68ff8d62a927c47a44f35578e2d3a9be41272e60b6e09721b6aafb189d2b77a77f1b799b06eac43f253509e4e3c24e0bbbeedc62f4b4b167afaafe74fafa99aea0f893899d417e4d1f2e897dd360ec6fe67ebcff99060c"}], 0xe8}, 0x0, 0x80, 0x1}, 0x6) 11:37:05 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x52cb, 0xd0d0, 0x2, &(0x7f0000000000)={[0x7fffffff]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0xa, 0x8010, r0, 0x10000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="3a93eae1c3f32e06b12ca60bf69c6abeeaa28eb04380e3f32acf9144f28b269e266c82a903bda8b428bf1197e278cd57ab16b8030922fb1768dc92faf4c561ec66aa0808526c855c2b1ffa29b1d5155bb0635ec2afe0b8832e98f09472d512d386a53ebb0ace73275634051079624fb1860b9155ac2776a02d8e7a81aab04c67a5c0d6a6b9677a559c0cf4c471fdafe47a9ea2e73a8ecf08071f971d93312d10d8b087b57e", 0xa5, 0x4c074, 0x0, {0x0, r4}}, 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) (async) r6 = socket$isdn(0x22, 0x3, 0x24) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 11:37:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003700000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00880300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc00200000100070000ff", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000740000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00a60300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ce0300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00d20300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:05 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 64) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async, rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000000)=0x4, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000007a0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:06 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) syz_io_uring_setup(0x7c2e, &(0x7f0000000000)={0x0, 0xc57f, 0x8, 0x2, 0x2b, 0x0, r5}, &(0x7f0000634000/0x1000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 11:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00da0300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="a266155b032e7dd6ab3734349a467b3fbfb6f53c22a30962c0f75c22c49e00066dd3c08c2c7b4fbf0cbc1da4efbada5618d2af134df9ecc57d58ec942d8617bd58368050b78664e8", 0x48}, {&(0x7f0000000180)="ec9fc26b92c2f45959a758c1f5621a70bc7c29621a85c10db5b2b7934e44ccbc84edad359e8ae370c9f41770ba6e20ec2173e36043016e1934117842a08222a21d2040e419d5c35d8259baa6a6b5a65f3494a65e634dc0f40499f607fce6f1cb9f3bf48c43c770", 0x67}], 0x2, &(0x7f0000000340)=[{0xe8, 0x117, 0x2, "9ae004d288e6e9181f13cbbac70666990c640651e84904a44ce97c42e505327d9838c417148ad2117661572d06689fd938fda69277a25767607b40606104f9d3acbf86e36fa9d715c276804425cc601ddd4d1d143bc510e1da97f1c5119b00d4b7c19290585c377ef2d2659d924e11d84939b8b7df340324b60090445af27a6dea68ff8d62a927c47a44f35578e2d3a9be41272e60b6e09721b6aafb189d2b77a77f1b799b06eac43f253509e4e3c24e0bbbeedc62f4b4b167afaafe74fafa99aea0f893899d417e4d1f2e897dd360ec6fe67ebcff99060c"}], 0xe8}, 0x0, 0x80, 0x1}, 0x6) 11:37:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000017e0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00e40300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000810000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ee0300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:06 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x0, 0x253, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0), 0x10000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x20000) read(r5, 0x0, 0x0) 11:37:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003880000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:07 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) syz_io_uring_setup(0x7c2e, &(0x7f0000000000)={0x0, 0xc57f, 0x8, 0x2, 0x2b, 0x0, r5}, &(0x7f0000634000/0x1000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 11:37:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fa0300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000047880000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:07 executing program 0: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080), &(0x7f0000000180)=0x4) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000633000/0x3000)=nil, 0x3000, 0x100000f, 0x50, r0, 0x8000000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x3, r9}}, 0x6) 11:37:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000048880000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fc0300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000500000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ffffa8880000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:07 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 64) syz_io_uring_setup(0x15b4, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x0, 0x253, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0), 0x10000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x20000) read(r5, 0x0, 0x0) 11:37:08 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) syz_io_uring_setup(0x7c2e, &(0x7f0000000000)={0x0, 0xc57f, 0x8, 0x2, 0x2b, 0x0, r5}, &(0x7f0000634000/0x1000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 11:37:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000600000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000910000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:08 executing program 0: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080), &(0x7f0000000180)=0x4) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000633000/0x3000)=nil, 0x3000, 0x100000f, 0x50, r0, 0x8000000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x3, r9}}, 0x6) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080), &(0x7f0000000180)=0x4) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000633000/0x3000)=nil, 0x3000, 0x100000f, 0x50, r0, 0x8000000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x3, r9}}, 0x6) (async) 11:37:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000700000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ffffff9e0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000900000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000a00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:08 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x0, 0x253, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0), 0x10000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x20000) read(r5, 0x0, 0x0) 11:37:09 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340)) read(r3, 0x0, 0x0) 11:37:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000002a60000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000b00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:09 executing program 0: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080), &(0x7f0000000180)=0x4) (async) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000633000/0x3000)=nil, 0x3000, 0x100000f, 0x50, r0, 0x8000000) (async) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x3, r9}}, 0x6) 11:37:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003ce0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000c00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003d20000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00020c00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:09 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x36}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) [ 715.156750][ T24] audit: type=1400 audit(1639654629.191:301): avc: denied { ioctl } for pid=28186 comm="syz-executor.1" path="socket:[96744]" dev="sockfs" ino=96744 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 11:37:10 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340)) (async) read(r3, 0x0, 0x0) 11:37:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000d00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003da0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x27c}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = dup3(r0, r0, 0x80000) io_uring_enter(r3, 0x58a7, 0xe139, 0x3, &(0x7f0000000000)={[0xffffffffffffff7f]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000e00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003e40000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000f00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:10 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340)) read(r3, 0x0, 0x0) 11:37:10 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x36}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ffffffea0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003ee0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001100000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ffffffef0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x27c}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = dup3(r0, r0, 0x80000) io_uring_enter(r3, 0x58a7, 0xe139, 0x3, &(0x7f0000000000)={[0xffffffffffffff7f]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00011200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fffffff00000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:10 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = syz_io_uring_setup(0x4187, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x36}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x36}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) 11:37:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003fa0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00021600000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003fc0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x27c}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = dup3(r0, r0, 0x80000) io_uring_enter(r3, 0x58a7, 0xe139, 0x3, &(0x7f0000000000)={[0xffffffffffffff7f]}, 0x8) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002500000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000fffe0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async, rerun: 32) r0 = syz_io_uring_setup(0x4187, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (rerun: 64) read(r3, 0x0, 0x0) 11:37:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fffffffe0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002f00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00003400000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0xc, 0x4010, r0, 0x8000000) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x43, 0x200, 0x23456, {0x0, r11}}, 0x9) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r12}}, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x4ac2a0) read(r13, 0x0, 0x0) 11:37:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000fff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0xffffffff}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00003a00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000007fff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:12 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) r0 = syz_io_uring_setup(0x4187, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:12 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0xc, 0x4010, r0, 0x8000000) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x43, 0x200, 0x23456, {0x0, r11}}, 0x9) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r12}}, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x4ac2a0) read(r13, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0xc, 0x4010, r0, 0x8000000) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x1) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x43, 0x200, 0x23456, {0x0, r11}}, 0x9) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r12}}, 0x40) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x4ac2a0) (async) read(r13, 0x0, 0x0) (async) 11:37:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0088a8ffff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="007fffffff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0xffffffff}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0xc, 0x4010, r0, 0x8000000) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x1) (async) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x43, 0x200, 0x23456, {0x0, r11}}, 0x9) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r12}}, 0x40) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x4ac2a0) read(r13, 0x0, 0x0) 11:37:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00884700000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="009effffff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:13 executing program 1: r0 = syz_io_uring_setup(0x20e5, &(0x7f00000002c0)={0x0, 0x10, 0x2, 0xfffffffe, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000f88000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000140)=0x317e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000f8a000/0xb000)=nil, 0xb000, 0x1000007, 0x12, r0, 0x8000000) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0xfffffffe) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002100, 0x1, {0x2, r8}}, 0xffffffff) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00eaffffff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:13 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000635000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x502) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) 11:37:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00efffffff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00884800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0xffffffff}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (rerun: 64) read(r3, 0x0, 0x0) 11:37:14 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000635000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x502) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000635000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0x10000000) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x502) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) 11:37:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00f0ffffff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004c00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:14 executing program 1: r0 = syz_io_uring_setup(0x20e5, &(0x7f00000002c0)={0x0, 0x10, 0x2, 0xfffffffe, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000f88000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000140)=0x317e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000f8a000/0xb000)=nil, 0xb000, 0x1000007, 0x12, r0, 0x8000000) (async) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0xfffffffe) (async) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002100, 0x1, {0x2, r8}}, 0xffffffff) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00655800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00feffffff0000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:14 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000635000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x502) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) 11:37:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x4, 0x2, &(0x7f0000000000)="bde46abd5a028bb0647e349477aebe2bf28fc064548a9b61c4e00d8815a6c2b92ffb876d23d800", 0x8, 0x0, 0x0, {0x1}}, 0x101) 11:37:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00005e00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000001c00120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:15 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r0, 0x0, 0x0) 11:37:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:15 executing program 1: r0 = syz_io_uring_setup(0x20e5, &(0x7f00000002c0)={0x0, 0x10, 0x2, 0xfffffffe, 0x30a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000f88000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x118, &(0x7f0000000140)=0x317e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000f8a000/0xb000)=nil, 0xb000, 0x1000007, 0x12, r0, 0x8000000) (async) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r4}}, 0x9) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async, rerun: 64) syz_io_uring_submit(r5, r7, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE, 0xfffffffe) (async) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002100, 0x1, {0x2, r8}}, 0xffffffff) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (rerun: 32) read(r9, 0x0, 0x0) 11:37:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00025e00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000002900120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 721.354857][T28516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:37:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000000000003ff00120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 721.410383][T28535] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 721.449279][T28541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 11:37:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x4, 0x2, &(0x7f0000000000)="bde46abd5a028bb0647e349477aebe2bf28fc064548a9b61c4e00d8815a6c2b92ffb876d23d800", 0x8, 0x0, 0x0, {0x1}}, 0x101) 11:37:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00586500000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000200000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:16 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x1d, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) read(r3, 0x0, 0x0) 11:37:16 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r0, 0x0, 0x0) 11:37:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00026600000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00036700000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x4, 0x2, &(0x7f0000000000)="bde46abd5a028bb0647e349477aebe2bf28fc064548a9b61c4e00d8815a6c2b92ffb876d23d800", 0x8, 0x0, 0x0, {0x1}}, 0x101) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r0, 0x0, r0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r5, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x4, 0x2, &(0x7f0000000000)="bde46abd5a028bb0647e349477aebe2bf28fc064548a9b61c4e00d8815a6c2b92ffb876d23d800", 0x8, 0x0, 0x0, {0x1}}, 0x101) (async) 11:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:17 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x1d, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x1d, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) (async) read(r3, 0x0, 0x0) (async) 11:37:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000400000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 2: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r0, 0x0, 0x0) 11:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006c00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000500000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00036c00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000600000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1010, r0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r0, 0x10000000) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0xb, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x15bc, &(0x7f0000000040)={0x0, 0x92c2, 0x20, 0x0, 0x134}, &(0x7f0000635000/0x1000)=nil, &(0x7f0000633000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6c5f, &(0x7f0000000240)={0x0, 0x11fd, 0x20, 0x2, 0xbb, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000632000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x3, 0x7, 0x0, 0x6, 0x0, 0x0, {0x0, r8}}, 0x2) read(r5, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xc0, 0x1c2, 0x9}, 0x18) 11:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00037000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc002000001000700000f", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000700000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x1d, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) (async) read(r3, 0x0, 0x0) 11:37:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007400000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="02000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x7ff, 0x4, 0x0, 'queue0\x00', 0x7f}) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x30000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000180)='./file0\x00', 0x100, 0x2, 0x12345, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="03000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000900000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007a00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:18 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1010, r0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r0, 0x10000000) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0xb, 0x8010, r0, 0x8000000) (async) syz_io_uring_setup(0x15bc, &(0x7f0000000040)={0x0, 0x92c2, 0x20, 0x0, 0x134}, &(0x7f0000635000/0x1000)=nil, &(0x7f0000633000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6c5f, &(0x7f0000000240)={0x0, 0x11fd, 0x20, 0x2, 0xbb, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000632000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x3, 0x7, 0x0, 0x6, 0x0, 0x0, {0x0, r8}}, 0x2) read(r5, 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xc0, 0x1c2, 0x9}, 0x18) 11:37:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="04000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00008100000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:18 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000a00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="05000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00038800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="06000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x7ff, 0x4, 0x0, 'queue0\x00', 0x7f}) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) (async) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x30000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000180)='./file0\x00', 0x100, 0x2, 0x12345, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000b00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00478800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="07000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00488800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:18 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1010, r0, 0x0) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r0, 0x10000000) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0xb, 0x8010, r0, 0x8000000) (async) syz_io_uring_setup(0x15bc, &(0x7f0000000040)={0x0, 0x92c2, 0x20, 0x0, 0x134}, &(0x7f0000635000/0x1000)=nil, &(0x7f0000633000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6c5f, &(0x7f0000000240)={0x0, 0x11fd, 0x20, 0x2, 0xbb, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000632000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x3, 0x7, 0x0, 0x6, 0x0, 0x0, {0x0, r8}}, 0x2) (async) read(r5, 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xc0, 0x1c2, 0x9}, 0x18) 11:37:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="08000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000c00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00009100000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="09000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000d00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:19 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x7ff, 0x4, 0x0, 'queue0\x00', 0x7f}) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) (async) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x30000) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000180)='./file0\x00', 0x100, 0x2, 0x12345, {0x0, r8}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003a600000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:19 executing program 0: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r0, 0x0, 0x0) 11:37:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0a000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000e00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000f00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0001b200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0b000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:19 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (rerun: 32) read(r3, 0x0, 0x0) 11:37:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003ce00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001100000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0c000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003d200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001200000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:20 executing program 0: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (rerun: 32) read(r0, 0x0, 0x0) 11:37:20 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x10000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r7 = fcntl$dupfd(r6, 0x0, r6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000000), 0x0}, 0x20) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r7, 0x2, 0x0, 0x1}, 0x8) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003da00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0d000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:20 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x2, 0x8}, &(0x7f0000634000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0e000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002500000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003e400000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003ee00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002f00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003fa00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:21 executing program 0: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r0, 0x0, 0x0) (async) 11:37:21 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x10000000) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async, rerun: 32) r5 = fcntl$dupfd(r4, 0x0, r4) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async, rerun: 64) r7 = fcntl$dupfd(r6, 0x0, r6) (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000000), 0x0}, 0x20) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r7, 0x2, 0x0, 0x1}, 0x8) (async, rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0f000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00003400000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0003fc00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:21 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x2, 0x8}, &(0x7f0000634000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00003a00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="10000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fffe00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000fff00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="11000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:22 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r4, 0x5cfd, 0xec23, 0x2, &(0x7f0000000000)={[0xfffffffe]}, 0x8) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:22 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r0, 0x10000000) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r7 = fcntl$dupfd(r6, 0x0, r6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000000), 0x0}, 0x20) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r7, 0x2, 0x0, 0x1}, 0x8) (async, rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="007fff00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004c00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="12000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:22 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x2, 0x8}, &(0x7f0000634000/0x2000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00feff00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="25000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006800000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="2f000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004003000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_enter(r4, 0x5cfd, 0xec23, 0x2, &(0x7f0000000000)={[0xfffffffe]}, 0x8) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:23 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x880040, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e73840f0000000000006f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000mmap,smackfsdef=\x00,\x00'/45]) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0xc0d9d7f647911735, 0x0, @fd=r0, 0x0, 0x0, 0x4, 0x2, 0x1, {0x0, r4, r0}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x5, 0x10, 0x0, 0x5bd, 0x6, 0x1, {0x0, r4}}, 0x9) 11:37:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000004000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006c00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="3a000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:23 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x302}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = dup(r0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x80000000, 0x7}, 0xc) 11:37:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="42000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000340000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007400000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="48000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007a00000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000010000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_enter(r4, 0x5cfd, 0xec23, 0x2, &(0x7f0000000000)={[0xfffffffe]}, 0x8) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:24 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async, rerun: 32) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x880040, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e73840f0000000000006f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000mmap,smackfsdef=\x00,\x00'/45]) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 32) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0xc0d9d7f647911735, 0x0, @fd=r0, 0x0, 0x0, 0x4, 0x2, 0x1, {0x0, r4, r0}}, 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x5, 0x10, 0x0, 0x5bd, 0x6, 0x1, {0x0, r4}}, 0x9) 11:37:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000020000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00009100000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="4c000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000001020000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001201000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="60000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x302}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) r4 = dup(r0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x80000000, 0x7}, 0xc) 11:37:24 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x880040, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e73840f0000000000006f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000mmap,smackfsdef=\x00,\x00'/45]) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0xc0d9d7f647911735, 0x0, @fd=r0, 0x0, 0x0, 0x4, 0x2, 0x1, {0x0, r4, r0}}, 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x5, 0x10, 0x0, 0x5bd, 0x6, 0x1, {0x0, r4}}, 0x9) 11:37:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="68000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007e01000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000030000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="6c000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9a0e}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000c02000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000040000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001602000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="74000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000050000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001c02000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000060000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:25 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x302}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) r4 = dup(r0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x80000000, 0x7}, 0xc) 11:37:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="7a000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006602000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9a0e}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9a0e}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) 11:37:25 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000634000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x3, 0x7}, 0x40000) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r5 = socket(0x1, 0x3, 0xb3f) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd=r5, 0xc6, 0x41, 0x5, 0x15, 0x1, {0x1, r6}}, 0xb8b) syz_io_uring_complete(r3) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) 11:37:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="91000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000070000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000a602000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="7e010000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000080000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="88010000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002203000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000090000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="b4010000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x9a0e}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004a03000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000a0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="a8020000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:26 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000634000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x3, 0x7}, 0x40000) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r5 = socket(0x1, 0x3, 0xb3f) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd=r5, 0xc6, 0x41, 0x5, 0x15, 0x1, {0x1, r6}}, 0xb8b) (async) syz_io_uring_complete(r3) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) 11:37:26 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) io_uring_enter(0xffffffffffffffff, 0x1d1f, 0x92d5, 0x1, &(0x7f0000000580)={[0x1]}, 0x8) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r6, 0x0, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000180)="748dc4d5b59f3836c3b1dafc083946d0c9c2199ff419056e3b31000443de3ba2ece249bf257af993f3ace3fa782e083ad51d013f3ab4990f59cfeff1b62089149df802d6b6402eae40ee254c2b06", &(0x7f0000000000)=@udp}, 0x20) fcntl$dupfd(r7, 0x0, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x7, 0x0, 0x0, 0x9, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00030000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006703000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000b0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007003000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000c0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="58030000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:26 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x1000)=nil, 0x1000, 0x16, 0x1}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x82) getpeername(r3, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) fallocate(r6, 0x55, 0xffffffffffffff00, 0x401) read(r4, 0x0, 0x0) 11:37:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="6c030000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00008803000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000020c0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:27 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000634000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x3, 0x7}, 0x40000) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r5 = socket(0x1, 0x3, 0xb3f) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd=r5, 0xc6, 0x41, 0x5, 0x15, 0x1, {0x1, r6}}, 0xb8b) syz_io_uring_complete(r3) (async, rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) 11:37:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000ce03000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000d0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="88030000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:27 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) io_uring_enter(0xffffffffffffffff, 0x1d1f, 0x92d5, 0x1, &(0x7f0000000580)={[0x1]}, 0x8) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r6, 0x0, r6) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000180)="748dc4d5b59f3836c3b1dafc083946d0c9c2199ff419056e3b31000443de3ba2ece249bf257af993f3ace3fa782e083ad51d013f3ab4990f59cfeff1b62089149df802d6b6402eae40ee254c2b06", &(0x7f0000000000)=@udp}, 0x20) fcntl$dupfd(r7, 0x0, r7) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x7, 0x0, 0x0, 0x9, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000d203000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000e0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="c2030000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:27 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x1000)=nil, 0x1000, 0x16, 0x1}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x82) getpeername(r3, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) fallocate(r6, 0x55, 0xffffffffffffff00, 0x401) read(r4, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x1000)=nil, 0x1000, 0x16, 0x1}, 0x9) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x82) (async) getpeername(r3, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r5, 0x0, r5) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) (async) fallocate(r6, 0x55, 0xffffffffffffff00, 0x401) (async) read(r4, 0x0, 0x0) (async) 11:37:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000da03000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000f0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="da030000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000100000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000e403000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="ee030000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x1000)=nil, 0x1000, 0x16, 0x1}, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x82) getpeername(r3, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) fallocate(r6, 0x55, 0xffffffffffffff00, 0x401) read(r4, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x1000)=nil, 0x1000, 0x16, 0x1}, 0x9) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x82) (async) getpeername(r3, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r5, 0x0, r5) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) (async) fallocate(r6, 0x55, 0xffffffffffffff00, 0x401) (async) read(r4, 0x0, 0x0) (async) 11:37:28 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) io_uring_enter(0xffffffffffffffff, 0x1d1f, 0x92d5, 0x1, &(0x7f0000000580)={[0x1]}, 0x8) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r6, 0x0, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000180)="748dc4d5b59f3836c3b1dafc083946d0c9c2199ff419056e3b31000443de3ba2ece249bf257af993f3ace3fa782e083ad51d013f3ab4990f59cfeff1b62089149df802d6b6402eae40ee254c2b06", &(0x7f0000000000)=@udp}, 0x20) (async) fcntl$dupfd(r7, 0x0, r7) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x7, 0x0, 0x0, 0x9, &(0x7f0000000180), 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000ee03000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="fc030000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000110000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:28 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r0, 0x81, 0x7, 0x7, 0x1e, 0x1, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d2000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2041}, 0x0, {0x0, r8}}, 0x2000) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000fa03000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00050000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000120000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000fc03000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00060000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000001120000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00070000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000005000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:29 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x148}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_setup(0x6b06, &(0x7f0000000000)={0x0, 0xcc00, 0x1, 0x0, 0x1ae}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) read(r3, 0x0, 0x0) 11:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000002160000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:29 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r0, 0x81, 0x7, 0x7, 0x1e, 0x1, {0x3}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d2000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x1) (async) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2041}, 0x0, {0x0, r8}}, 0x2000) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00090000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000180000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000006000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="5e090000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000250000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000007000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:29 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) 11:37:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000a0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000002f0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:30 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x148}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_setup(0x6b06, &(0x7f0000000000)={0x0, 0xcc00, 0x1, 0x0, 0x1ae}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x148}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_setup(0x6b06, &(0x7f0000000000)={0x0, 0xcc00, 0x1, 0x0, 0x1ae}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) read(r3, 0x0, 0x0) (async) 11:37:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000009000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r0, 0x81, 0x7, 0x7, 0x1e, 0x1, {0x3}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d2000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x2041}, 0x0, {0x0, r8}}, 0x2000) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r9, 0x0, 0x0) 11:37:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000b0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000340000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:30 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000a000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000003a0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000b000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000c0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000400000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000d0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x148}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_setup(0x6b06, &(0x7f0000000000)={0x0, 0xcc00, 0x1, 0x0, 0x1ae}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) read(r3, 0x0, 0x0) 11:37:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x2, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x434000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) read(r3, 0x0, 0x0) 11:37:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000420000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000020c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000e0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x20, &(0x7f0000000180)) read(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) r4 = syz_io_uring_setup(0x5b4, &(0x7f0000000340)={0x0, 0xefffffff, 0x20}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x1000)=nil, 0x1000, 0x8, 0x38205f934ea8e457, r0, 0x10000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r8 = fcntl$dupfd(r7, 0x0, r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x3, r9}}, 0x330) 11:37:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000d000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000f0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000480000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:30 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x2, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x434000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) (async) read(r3, 0x0, 0x0) 11:37:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000e000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x800, 0x0, 0x0, 0x276}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_io_uring_complete(r1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000004c0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:31 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x2, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x434000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, r0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x2, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x434000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) dup2(r4, r0) (async) read(r3, 0x0, 0x0) (async) 11:37:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00110000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000005e0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00120000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000025e0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000f000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00250000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x20, &(0x7f0000000180)) (async) read(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) r4 = syz_io_uring_setup(0x5b4, &(0x7f0000000340)={0x0, 0xefffffff, 0x20}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x1000)=nil, 0x1000, 0x8, 0x38205f934ea8e457, r0, 0x10000000) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r8 = fcntl$dupfd(r7, 0x0, r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x3, r9}}, 0x330) 11:37:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3d8, 0x0, r1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="002f0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x800, 0x0, 0x0, 0x276}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_io_uring_complete(r1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000600000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000011000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="003a0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000058650000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000012000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00400000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000112000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000002660000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:32 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x20, &(0x7f0000000180)) read(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) r4 = syz_io_uring_setup(0x5b4, &(0x7f0000000340)={0x0, 0xefffffff, 0x20}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x1000)=nil, 0x1000, 0x8, 0x38205f934ea8e457, r0, 0x10000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r8 = fcntl$dupfd(r7, 0x0, r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x3, r9}}, 0x330) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x20, &(0x7f0000000180)) (async) read(r3, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x5b4, &(0x7f0000000340)={0x0, 0xefffffff, 0x20}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x1000)=nil, 0x1000, 0x8, 0x38205f934ea8e457, r0, 0x10000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r7, 0x0, r7) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x40012020, 0x0, {0x3, r9}}, 0x330) (async) 11:37:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00420000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003670000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:32 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x800, 0x0, 0x0, 0x276}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_io_uring_complete(r1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000216000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) (async, rerun: 64) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3d8, 0x0, r1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="88470000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000680000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:32 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fe1, &(0x7f0000000040)={0x0, 0xcd4d, 0x20, 0x3, 0x155, 0x0, r0}, &(0x7f0000634000/0x3000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x9) syz_io_uring_setup(0x3a5f, &(0x7f0000000240)={0x0, 0x8dd2, 0x1, 0x2, 0x3ce, 0x0, r0}, &(0x7f0000635000/0x4000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r3, 0x8, 0xfffffffffffffffb, 0x2, 0x0, 0x3d6201f30a869513, {0x3}}, 0x200000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x5610}}, 0x3) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) 11:37:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000006c0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00480000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000018000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000036c0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000021c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="88480000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:33 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x103}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x9, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd=r0, 0x0, 0xfffffffffffffffa, 0xffff, 0x6, 0x1}, 0x7f800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="004c0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000322000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003700000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3d8, 0x0, r1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:33 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = syz_io_uring_setup(0x1fe1, &(0x7f0000000040)={0x0, 0xcd4d, 0x20, 0x3, 0x155, 0x0, r0}, &(0x7f0000634000/0x3000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x9) syz_io_uring_setup(0x3a5f, &(0x7f0000000240)={0x0, 0x8dd2, 0x1, 0x2, 0x3ce, 0x0, r0}, &(0x7f0000635000/0x4000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r3, 0x8, 0xfffffffffffffffb, 0x2, 0x0, 0x3d6201f30a869513, {0x3}}, 0x200000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x5610}}, 0x3) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) 11:37:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="03580000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000740000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000025000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000002f000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="65580000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000007a0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:34 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x103}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x9, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd=r0, 0x0, 0xfffffffffffffffa, 0xffff, 0x6, 0x1}, 0x7f800) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000034000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000810000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="095e0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:34 executing program 2: r0 = syz_io_uring_setup(0x6ecf, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:34 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x1fe1, &(0x7f0000000040)={0x0, 0xcd4d, 0x20, 0x3, 0x155, 0x0, r0}, &(0x7f0000634000/0x3000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x9) syz_io_uring_setup(0x3a5f, &(0x7f0000000240)={0x0, 0x8dd2, 0x1, 0x2, 0x3ce, 0x0, r0}, &(0x7f0000635000/0x4000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r3, 0x8, 0xfffffffffffffffb, 0x2, 0x0, 0x3d6201f30a869513, {0x3}}, 0x200000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x5610}}, 0x3) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_setup(0x1fe1, &(0x7f0000000040)={0x0, 0xcd4d, 0x20, 0x3, 0x155, 0x0, r0}, &(0x7f0000634000/0x3000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x9) (async) syz_io_uring_setup(0x3a5f, &(0x7f0000000240)={0x0, 0x8dd2, 0x1, 0x2, 0x3ce, 0x0, r0}, &(0x7f0000635000/0x4000)=nil, &(0x7f00006d4000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r3, 0x8, 0xfffffffffffffffb, 0x2, 0x0, 0x3d6201f30a869513, {0x3}}, 0x200000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x5610}}, 0x3) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r7, 0x0, 0x0) (async) 11:37:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000003a000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00600000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003880000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="58650000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000040000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000047880000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00008847000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:35 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x103}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x2000)=nil, 0x2000, 0x9, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd=r0, 0x0, 0xfffffffffffffffa, 0xffff, 0x6, 0x1}, 0x7f800) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00680000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000048880000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:35 executing program 2: r0 = syz_io_uring_setup(0x6ecf, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:35 executing program 0: syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x27}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r2, 0x0, 0x0) 11:37:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ffffa8880000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000048000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="006c0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000910000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00008848000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="036c0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ffffff9e0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00740000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000034a000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003a60000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:36 executing program 2: r0 = syz_io_uring_setup(0x6ecf, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:36 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x40015b2, &(0x7f00000003c0)={0x0, 0x2, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x7321, &(0x7f0000000040)={0x0, 0x642c, 0x8, 0x0, 0x360, 0x0, r0}, &(0x7f0000635000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x1) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) 11:37:36 executing program 0: syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x27}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r2, 0x0, 0x0) 11:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000001b20000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="007a0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000004c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006558000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="017e0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003ce0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000060000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003d20000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00810000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003da0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00005865000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="01880000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xfffffffc}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x413a, 0x2e50, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000635000/0x2000)=nil, 0x2000, 0x1000008, 0x180010, r0, 0x10000000) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000100)) read(r3, 0x0, 0x0) 11:37:37 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x40015b2, &(0x7f00000003c0)={0x0, 0x2, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x7321, &(0x7f0000000040)={0x0, 0x642c, 0x8, 0x0, 0x360, 0x0, r0}, &(0x7f0000635000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x1) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x1f) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x40015b2, &(0x7f00000003c0)={0x0, 0x2, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_setup(0x7321, &(0x7f0000000040)={0x0, 0x642c, 0x8, 0x0, 0x360, 0x0, r0}, &(0x7f0000635000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x1) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r7, 0x0, 0x0) (async) 11:37:37 executing program 0: syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x27}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r2, 0x0, 0x0) 11:37:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000266000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003e40000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="03880000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000367000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ffffffea0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) [ 743.119015][ T24] audit: type=1400 audit(1639654657.151:302): avc: denied { ioctl } for pid=29804 comm="syz-executor.2" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 11:37:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000068000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000006c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003ee0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="47880000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:37 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x40015b2, &(0x7f00000003c0)={0x0, 0x2, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_setup(0x7321, &(0x7f0000000040)={0x0, 0x642c, 0x8, 0x0, 0x360, 0x0, r0}, &(0x7f0000635000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r6}}, 0x1) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r7, 0x0, 0x0) 11:37:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000370000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) read(r3, 0x0, 0x0) 11:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00ffffffef0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:38 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xfffffffc}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x413a, 0x2e50, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000635000/0x2000)=nil, 0x2000, 0x1000008, 0x180010, r0, 0x10000000) (async) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000100)) (async) read(r3, 0x0, 0x0) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="48880000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000074000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fffffff00000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00910000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xfffffffc}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x413a, 0x2e50, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000635000/0x2000)=nil, 0x2000, 0x1000008, 0x180010, r0, 0x10000000) (async) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000100)) read(r3, 0x0, 0x0) 11:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003fa0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="02a80000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000007a000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="01b40000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) (async) read(r3, 0x0, 0x0) (async) 11:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003fc0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000017e000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="03c20000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd, 0xf8, 0x7d7, 0x7, 0x10, 0x1}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4000, @fd_index=0x1, 0x7fff, 0x8, 0xfe, 0x1, 0x0, {0x1}}, 0x80000000) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000fffe0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000081000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x40010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000140)=0x7, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000002700)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r6, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000002840)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000002600)=""/238, 0xee}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000002780)=""/143, 0x8f}], 0xa, &(0x7f0000002900)=""/105, 0x69}, 0x0, 0x40, 0x1, {0x1}}, 0x9) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="03da0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="03ee0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00fffffffe0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="03fc0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) (async) read(r3, 0x0, 0x0) 11:37:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000388000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="fffe0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000fff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:39 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd, 0xf8, 0x7d7, 0x7, 0x10, 0x1}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4000, @fd_index=0x1, 0x7fff, 0x8, 0xfe, 0x1, 0x0, {0x1}}, 0x80000000) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd, 0xf8, 0x7d7, 0x7, 0x10, 0x1}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4000, @fd_index=0x1, 0x7fff, 0x8, 0xfe, 0x1, 0x0, {0x1}}, 0x80000000) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r5, 0x0, 0x0) (async) 11:37:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0fff0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004788000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:39 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x40010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000140)=0x7, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000002700)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r6, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000002840)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000002600)=""/238, 0xee}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000002780)=""/143, 0x8f}], 0xa, &(0x7f0000002900)=""/105, 0x69}, 0x0, 0x40, 0x1, {0x1}}, 0x9) (rerun: 32) 11:37:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000007fff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="7fff0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004888000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:39 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd, 0xf8, 0x7d7, 0x7, 0x10, 0x1}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4000, @fd_index=0x1, 0x7fff, 0x8, 0xfe, 0x1, 0x0, {0x1}}, 0x80000000) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x10000006, 0x1b4}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0xc000)=nil, 0xc000, 0x1000000, 0x100051, r0, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x80800) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r3, 0x8000000100000, 0x7fffffff, 0x68fe, 0x0, 0x0, {0x3}}, 0x6) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x260101, 0x1a5cd964f35b6f18, 0x9}, 0x18) write$qrtrtun(r5, &(0x7f00000001c0)="a786d255036db559cd7fac81830942e666bd3463c180b0e0146eee31c6ed1124e52b8f01e140ec340af3a8df4b303c4b537e518461db356fa13b12162f1d982b40640f88a95564e48c4a99a87b2a3724d035dcbc320df5d1d4d95ac3e6b573d85b96003e75471ce001b223a6dd650a778395dba5a483b7993a2fcfaffcc09dc291a4", 0x82) 11:37:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0088a8ffff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000091000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="feff0000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000002a6000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="007fffffff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00400300000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x40010, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000140)=0x7, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000002700)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r6, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000002840)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000002600)=""/238, 0xee}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000002780)=""/143, 0x8f}], 0xa, &(0x7f0000002900)=""/105, 0x69}, 0x0, 0x40, 0x1, {0x1}}, 0x9) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x40010, r0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000140)=0x7, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r5, 0x0, r5) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000000), 0x0}, 0x20) (async) syz_io_uring_submit(r1, r2, &(0x7f0000002700)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r6, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000002840)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000002600)=""/238, 0xee}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000002780)=""/143, 0x8f}], 0xa, &(0x7f0000002900)=""/105, 0x69}, 0x0, 0x40, 0x1, {0x1}}, 0x9) (async) 11:37:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="009effffff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000003ce000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000400000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000003d2000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00034000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x10000006, 0x1b4}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0xc000)=nil, 0xc000, 0x1000000, 0x100051, r0, 0x10000000) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x80800) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r3, 0x8000000100000, 0x7fffffff, 0x68fe, 0x0, 0x0, {0x3}}, 0x6) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x260101, 0x1a5cd964f35b6f18, 0x9}, 0x18) write$qrtrtun(r5, &(0x7f00000001c0)="a786d255036db559cd7fac81830942e666bd3463c180b0e0146eee31c6ed1124e52b8f01e140ec340af3a8df4b303c4b537e518461db356fa13b12162f1d982b40640f88a95564e48c4a99a87b2a3724d035dcbc320df5d1d4d95ac3e6b573d85b96003e75471ce001b223a6dd650a778395dba5a483b7993a2fcfaffcc09dc291a4", 0x82) 11:37:40 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000634000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0xfffffff8) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00eaffffff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000003da000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000001000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00efffffff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000002000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000003e4000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00f0ffffff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:40 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="31bcc1a5a950f4c7c5c042219d5772e0bb128c26381a00002e2f40440b40000be08325fe64a26ae0f4740690be7c20954d0008000074aae02a0436e0522928f98dcb58"]) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r5, &(0x7f0000000180)={0xa}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000025c0)={&(0x7f0000002340)={0x27c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x27c}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x8, &(0x7f0000000000)=[r6], 0x1}, 0xa7b) read(r6, 0x0, 0x0) 11:37:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000003ee000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00feffffff0000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:41 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x10000006, 0x1b4}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0xc000)=nil, 0xc000, 0x1000000, 0x100051, r0, 0x10000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x80800) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r3, 0x8000000100000, 0x7fffffff, 0x68fe, 0x0, 0x0, {0x3}}, 0x6) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) (async) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x260101, 0x1a5cd964f35b6f18, 0x9}, 0x18) write$qrtrtun(r5, &(0x7f00000001c0)="a786d255036db559cd7fac81830942e666bd3463c180b0e0146eee31c6ed1124e52b8f01e140ec340af3a8df4b303c4b537e518461db356fa13b12162f1d982b40640f88a95564e48c4a99a87b2a3724d035dcbc320df5d1d4d95ac3e6b573d85b96003e75471ce001b223a6dd650a778395dba5a483b7993a2fcfaffcc09dc291a4", 0x82) 11:37:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000003000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000003fa000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000001c00120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:41 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000634000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0xfffffff8) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000003fc000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000004000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000005000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:41 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 64) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd_index}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="31bcc1a5a950f4c7c5c042219d5772e0bb128c26381a00002e2f40440b40000be08325fe64a26ae0f4740690be7c20954d0008000074aae02a0436e0522928f98dcb58"]) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r5, &(0x7f0000000180)={0xa}}, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe0) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000025c0)={&(0x7f0000002340)={0x27c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x27c}}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x8, &(0x7f0000000000)=[r6], 0x1}, 0xa7b) read(r6, 0x0, 0x0) 11:37:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000002900120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000fffe000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000006000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 747.532815][T30062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 747.597547][T30079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 11:37:42 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000634000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000635000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0xfffffff8) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000000000003ff00120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000fff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000007000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:42 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd_index}, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="31bcc1a5a950f4c7c5c042219d5772e0bb128c26381a00002e2f40440b40000be08325fe64a26ae0f4740690be7c20954d0008000074aae02a0436e0522928f98dcb58"]) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r5, &(0x7f0000000180)={0xa}}, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe0) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000025c0)={&(0x7f0000002340)={0x27c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x27c}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (rerun: 64) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x8, &(0x7f0000000000)=[r6], 0x1}, 0xa7b) (async) read(r6, 0x0, 0x0) 11:37:42 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x2, 0xfffffff9, {{0xf, 0x4, 0x0, 0x4, 0x3c, 0x68, 0x0, 0x7c, 0x29, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xee, [@local, @empty]}, @end, @timestamp={0x44, 0x14, 0x94, 0x0, 0xa, [0x7f, 0x5, 0x7, 0x4]}]}}}}}) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@xdp={0x2c, 0x1, r6, 0x2b}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="78276b20ac7243e332c678417be72524e7002b", 0x13}, {&(0x7f0000000340)="20ff5370e216a77b826e15b5de874affad0dcab319c042a9cc42cc140daf670c56e1b7bbce2979e537ae1f209fa55a0ed82d933b7a94524fc90afb73ec3dd551446e71d3bcde30da2bbfbd1a307d87a4b393fa265967a4c4ef4a85d86185f85ccd009325e88a8e4d2c7f7a24f821221da091b5e4827e03f5d5f7a623d81bb566205a8e4f9fd73fdd30f674b6a38ec78deee04f0e88a4c6192c9da73bff9b0c3a4166df58cf9dace20e81bf987bad60edc102f56e9c055782f89e98870a", 0xbd}], 0x2, &(0x7f0000004980)=ANY=[@ANYBLOB="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"], 0x2160}, 0x0, 0x8094, 0x1}, 0x8000) read(r3, 0x0, 0x0) 11:37:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007fff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000008000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000feff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 748.406863][T30099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 11:37:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000040030000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:42 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x400, 0x89, 0x18}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0x101) read(r3, 0x0, 0x0) io_uring_enter(r0, 0x1454, 0xa41d, 0x1, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8) 11:37:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000009000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:43 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x25]}, 0x8, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000040000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000000a000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:43 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async, rerun: 32) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 32) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x2, 0xfffffff9, {{0xf, 0x4, 0x0, 0x4, 0x3c, 0x68, 0x0, 0x7c, 0x29, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xee, [@local, @empty]}, @end, @timestamp={0x44, 0x14, 0x94, 0x0, 0xa, [0x7f, 0x5, 0x7, 0x4]}]}}}}}) (rerun: 32) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@xdp={0x2c, 0x1, r6, 0x2b}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="78276b20ac7243e332c678417be72524e7002b", 0x13}, {&(0x7f0000000340)="20ff5370e216a77b826e15b5de874affad0dcab319c042a9cc42cc140daf670c56e1b7bbce2979e537ae1f209fa55a0ed82d933b7a94524fc90afb73ec3dd551446e71d3bcde30da2bbfbd1a307d87a4b393fa265967a4c4ef4a85d86185f85ccd009325e88a8e4d2c7f7a24f821221da091b5e4827e03f5d5f7a623d81bb566205a8e4f9fd73fdd30f674b6a38ec78deee04f0e88a4c6192c9da73bff9b0c3a4166df58cf9dace20e81bf987bad60edc102f56e9c055782f89e98870a", 0xbd}], 0x2, &(0x7f0000004980)=ANY=[@ANYBLOB="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"], 0x2160}, 0x0, 0x8094, 0x1}, 0x8000) (async) read(r3, 0x0, 0x0) 11:37:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000000b000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000300000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003400000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:43 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x400, 0x89, 0x18}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0x101) read(r3, 0x0, 0x0) (async) io_uring_enter(r0, 0x1454, 0xa41d, 0x1, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8) 11:37:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000000c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000100001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000400000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:44 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x25]}, 0x8, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000000d000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000500000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000200001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4000000}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x2, 0xfffffff9, {{0xf, 0x4, 0x0, 0x4, 0x3c, 0x68, 0x0, 0x7c, 0x29, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xee, [@local, @empty]}, @end, @timestamp={0x44, 0x14, 0x94, 0x0, 0xa, [0x7f, 0x5, 0x7, 0x4]}]}}}}}) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@xdp={0x2c, 0x1, r6, 0x2b}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="78276b20ac7243e332c678417be72524e7002b", 0x13}, {&(0x7f0000000340)="20ff5370e216a77b826e15b5de874affad0dcab319c042a9cc42cc140daf670c56e1b7bbce2979e537ae1f209fa55a0ed82d933b7a94524fc90afb73ec3dd551446e71d3bcde30da2bbfbd1a307d87a4b393fa265967a4c4ef4a85d86185f85ccd009325e88a8e4d2c7f7a24f821221da091b5e4827e03f5d5f7a623d81bb566205a8e4f9fd73fdd30f674b6a38ec78deee04f0e88a4c6192c9da73bff9b0c3a4166df58cf9dace20e81bf987bad60edc102f56e9c055782f89e98870a", 0xbd}], 0x2, &(0x7f0000004980)=ANY=[@ANYBLOB="1010000000000000170100000700000068d7253af14012e4ba8343206d7eb1988964a6ce040814b9d74d4ca51bc611da54583f9154758c4ff282236439cfe6d35173d15c997ff09c84d06f82097144c555c432801b7f0ef1d8e2609c12b21983031e77329594514cacc5a3a4c518f24deddad091f6d7d317cbb2d917871ba9de1d11d0f0ed426d548353b665e26b9a4ad18371a61b1ee9637478ffebafe531fe20a0ef7da5c0f43ebcb2b241066c1530b7b513d54a18388ae1fc31217c8528cc0502f8fc7996f279d0f57fb67c64a3f4230cc068b771de5dec7a424e19ef7f01d6188b753269a904b919e1c0b2a82a1840ec1fbd7f9dfcfd1168432734ffc7af323510f91d809a67b58fbe5a345625dbb28aeb32035104a45044a93d0c3a0310d455b3e8190185769613b7e1d0afee82d415f9950973912cc000a33357d78b483d31018abe4edb9d4b4db456d588e70c0effaf568a8c34f88a4ac77289cf7f2557f4f9bc0ec09981c1883755b45d5fcf3012b74304cf8e817ba9b869dcecae0fadc0aac551a644fb3e0664107d482f210688327d6330269f1afc94314d0790814bfceb39633b1d3dd4568ea767325447b3fe283a7c53cdbff2d573f4ebd2afe244c4657ae1a0faef45af25ab06b33448eda5a7530b51c486b44a89d105466f9e68104996bafcdf4f31a859732845af3c1c0696121ae6fca42b13808685a2f3b0f1a17218194c9d8f23faf2d274607e41d42b563316be12504c380ec14f094dcbff8ba5a09824ac93f3ef1be81a3c3177c777e47b7508e1d5851eb77efbfd4c95bdd3b106cf4ada71848f9e501566584ae0b9df62778050d00ce8530bd8cd267f9418cda58d92c7706fc1187c1655e8e8fd7d2eebfd21a4530405a9a4d365f5e934d7e0bc4b198965cec84ed330edc70368ed52ff3bddf5367e616b9edf641b8194d7e5cbfd54cdab6f8a7e9ea391cce6457d7d06b8722df51f34f2a15a80b558652a30bdcecea07a849579380dde209cbd15555b52b5b7c5a21ec7adc6b0925159bd96949678a647d96bb06b3d9f904122d9b664b4a46053c8319409595a43cfdd0c833bd20e25b956de5586f29ad2aa650476bc3052d77f8b551c6e589d2d8443cc28cfca0937e245ccee8a26f2fe71d8c0f45d127782980d363e35d8993e078f52ec17e41e0d9bee66df6a2626158c82dd9030a3cb48ecd9c8b7d24fdd168b80f1b2fce312e80560cb428762fea9d9097f4bd1f7913617b519ff25b61a66bd3eb16548ec82983b66bce67953c2e7c9fe2e6cea30dd464a6672fca6abbb3504346a78114d167b418432b74126c6712a81442e6f58314c57f536fd086e22b624da3f3a8bc751f3ee7e5689a6feba50e66a1d6d358c5c4f1c233cff5525bbeecd5d67daa70296b0f6cc072e45f6f5d198d98c3bf9c5bc17c1436e9dfd72cd21db3d0d121aa0d2e134a956d8fb3baea2f6ce0546008fa0cd178ec9d34058a27d176fcb7e585d2a421c2fb10022228de51a29ea2033218e8fec2ccf9ef4d0969166812157ae59f2c7b44167a9677a87d65b0d256406fde1c238ae6fec640c19d6072df4f5aa7d405b6be7cc9b2c33ce1eeab6d624c9bbf562343d6e8c9291b0caa965ae20e4f5a3252907d1011962e7912d34222cdb50ce581d591d3ae2769f58a59db0343b340a4ecada04c2110d030616be14ccef919ee7872ad73e900e4c4605434eeabb021fa2bc190eb2145d570bb4a1082a37ad6ba5f8f428fb5d0cf4a385bd4bd9b94e16c21ee472103043ecbe56bbb0661684f8cd2e5838a50eaa12766670bf57384d9267874bc10d408e3fb36759ba14cb8dcdc800699cf8337bf1060821fec214ce2f1a51ad0802e01f783e3a2cc426d10d15f0e53bf65fc6d2b4de3fd8bf7fb6acc8d66958dc3adb9461d7b44038850b52b9458fe5d57002c2bd57b36790613715239b191703f5dfffdec33c0ba4b126fd54bfe6c0033bf3c9615262b7dea6efd2f3d7a8012cf9b3859021a269590b325c783b335f4506dab3a0ee217f213911f95e694684398861088c2cda822ee0d8077df7289391d712ee238f86087011af017aa347536d5fa18eb8264f858f1fe14d383758d51834682ec3144965075017ba46a70bb5daa14e20f4bea1b329350a9694602990e019bceb79f1f3c033c1b32dff3952610f79cbd51b3cf7ab9e2eb06999ea5dbd49c97b6345648ea79346db1d80bc4757f343f6edccd871258f334f711d4b3e8eac5d279c0d469ca1076b2967be0cbdec6a3c55bca44cb8cb13b94473c48a19d7f5daada9b53c14c2525326de33eeefe6bdd1acb164b425b9ad90f0d7e23a29e2ea444e817cf532078afd0f504071ee98c1265d80af7c7c4cd812c87d62df04779f20ca4916f7a3c3c0076524242c7d0d9b7d7e21241afe47e42837f2bc9618b5719d947bdf9359cf78d95e1862e8def42ebe0be00d0d455d2d39cca564aee1b6dffff05158618bfea573158472623e29d7329650c0f1496b91e2a1e512630129f0bd18ee789a5b51e8656a14e55f3b2e53f226bff28faf088d2352511487642a9fa088181b218046955930d00b55036c705d27d36ff90696d2cbf447c279b06f525150eb905195bdff488166343b30b09fdca1145b64024c081df02135ec64f69279e767320bbc77234b06d7db4bd5dbe53668ed5d1d95cfd61ee0f3a634588cdef04d9eb86cd5247bc15e20f234e732e5cb63c7c0b721f72e5b0a254125ade5f787f9125fef543bcc8fbe9153cb38e1b27ab42b20cb37dc49cc5a1f6ab311520b0c6f3fb93d638ca81b3d5a8dd5ae1bab509c733f1b9ffe819ed6b3d849a9e13022886c336fc523031c0cbf7c0cb00eaf93848173facae509d8d08dc0a5c28430b2e6373fe1706ba5a2dcff4f59e83ab151c6a41a531c8a32c06de70c0df2cd0665e1494e789720193d24cdf55cdad189402f413f6aa60f6576a66907632b1ba0d88bebe8b85e0de7e9853aeecd2f8a10a17144a93205bff209df16c75dcc11c95bc81a054f25360dbb4bf05a874d746f5e4e03a42ab65ba6d4b5a0c138091ea5619aae51ebc42915b23b61afee8c4bcfd5de197629926557cb337c6c30c394900d67710e5c58296357c3c832ff1217224d449d5e18ba68f41002821b6da32dbb5f236a68358d8a2f6faa8d0d5a9acf23b7bdd4f3dff6101d99f22094b7b89860fad2196872232afb91ef1724c7e16b088ea337e8afbc9d35cc9a6e9f81844f2f79dc9b7817be8bec6ffdf4ba3d3fcb31b11470333b285594dc959896670f59d746cda5387422946391d9cfd0ea02218b1146ee5794d5c45ae6e2897bd712bad07a9288a2cb684c837bfb19cb458d034d36294bdc3224f0f089cf989eeff61f482990e9de0584ed255d1ec475028b1f03ef1bbaaab457b259600d6077beb2ed15f876692424704bb4d7a4c1f6c4a5797ccc3409a7578297f50afafddb5f5dde9c1fc06e6a0ce791add93267b79de062713121c3d511a961465478f9b596f5a59109b477a91b90deb4fbe7ddcef1498864234d8087fd0464a80f6351c265e679c070567541c90372d27cbae5547ce99e63c4c292d08a69518506b6303cd2add9f201a002263dea882cf45dee3ad76237c9e3a4fc66aff30757468e68a8cb904bd8a0f0ceae96c7d170d236236e4483bbaa74b90cc1d772a4323a44b2197acc3244137e795e1cb7d9e166a65f962be6c14d54fb05836db072245308bbbe8dc9bdb5336d682d4d9eca93cc891ef28629a8710ecdab3dfb90b6ae92452ad168d09184e4396a3342d571ef7e2d03bc52903b2e4439b6d4cb34d6c25b41ab2521df455207b81dc106656a817b44e8cb0aea6d800d646aa070cbda9b8deff9c483aeaabe394b2712fa47b71d9144d381020b6503df0c59a15f7636b2699ba816d710eeeafed19e6c4c271a16e371123f4eb1b64f9e8acc9fd32e5b3e05f82615171079abcb36d0ef29b4cda849cfe82f4fe9d026369fff1ae1a6df992e77795bdd051d96ed4e0c32f339227702d49cc2439bb4029575e4ada4a6e56a63f2cbdb27dde3b57c8d227ee4016e3521516979fae5d5c0e74b67291ab9eda67bd546e01a7b153b2af0731d41f89ce12148c3f9fe59fa6fc9a4a1a355a232a62865208502e001ee3eb4061f5f90f34887621515d4895ba3cbd391fe09062f57d207a9dbce0d60b5c0ccdc813d17b851bd750cf1b2242d7c7b53944fe6f656f35013e2d8c12a329711f74270245ef037b95165fc50a3b19ad9f4f6dc6aada1182af2bc9133ef205d7a49317d12ab2b0e572a916dbb508cbb1e0779f6eee41c2410e14c729c2d4dd6100cf5d88665dc35706db0c3f67a82abcd8e0be2998afa212142847f24f47bd9daae481baac05ada810c456aa4666a41e36ed60a3757e132da549702a9bc5b24590bb6adb117786124484748c4c540a8770f5eade8358774ec528e3b27d4d8d661e972a413a3e5e104690f1e435244f8e0275622104950e3708af08e8949319b609752376b271304dd4cd46408bd8a75a74b75de9204c32d8c3a7b8fe206ce6f214531adb6e3e895fe319ed5c1905bb5b1c64f4931af3b0c5a79339aba70da61e9e480e2edb089237d6f0669026a9b4164bc343e00db0c827ce423cdcce22896d3442838b1db9d20452eae0f226e1d6497301efcb2e96e874f024fb34d00a293733cc97f5b59659869f9ac565c0aae5b3a7aad65a4600069256a323471a038bbf6f5a1062950a78c66f4c3868a89f85be6334fa892e173c4752a231d7a9350691382da2332526ec5a3ed93e5b35f0bf9af26ab8adc0d567e5a4b5d5f593e710bde48fe8761b6ded143d582de25f7fa0f756004544bf33d14597dc5ed2461e83147ec594a5c32c152b80c4c33293d4cc7114445f6dd509176f7a927fb41ec730703c9c95ae00139e57ff5b37674b7c7b5ba896e4c67a489636b4412b850d6cc85a524e39042ce915d541d7232f4b5dfa3058a87d6842057b2899df508490358daf56bdc94cef32394e491f9f7562785f3696542313fe0336f28ef0a7d1c8224de3073b15b136a3b2bfc5cf302d87b7d1ee6078cb076b24db6ac4bd16e808fa1bf537dead1c39498b9bb8a6682d7233a12b0ecd10bb4cb68d27e2286f676abe772a417b16254bef0caef0797de6d064e6f718d78c9074f767fa6f05f301301361b06a4ff31efb843c6eb0b0e53d9dbe93e99e92a97115bd8ff13c754a7d2a0d0d5bdbe7caf14a5cebe219ee76a548ea2cca01df790a23d659ba64f0ef6f08562a5d3c7f2f70e56b2b6bf3ef1ebc18294eb166176b290677525370d30db4a4c8d299f2c2e82f04d868dcc7a62550a95cfacacfc47f3da92b101e845acfc7b26513f3b57c2f3fd982534fe5d02fec5d37900266b496f989121afce5f21dcfe2497a7389b13f914277631a1c6c5cb0e7838d5a580bde30a4f7696a530f7ae72b2dc660267ea7960ffd5ca25b2b4d3d81cd1067b87bbebadd017149ddf57326400ba0e56d82582e651ebae012d31a865940f7ea2c214644bc24540cd3fbae4df109ac1ac3a0cd4226ce7e0785246bc3bc15d7096b409a392ef2268301d4080f41297e0333af054e8b9e83ef3d74edf31cafbb7090c660e91876944e844bb61fda5f7b64f7a402ae2100308893a35c256fc7f12cc7e51ce0464d40d011c9d4b2a328e723315e9d7686e39b9fab9eb56d2445c038aa48079752d61df0a916886b6f3c716990546a3269be56a0d3479d63ac8ed6284814e9f438e0e1cde255944ea39db7dcaefc52970d276a0a582d59693c6da5130a6e87a9d9d1010000000000000230000003f000000ec635256e2f18a3d6f9ab8b25e671bbafdd731f7c771581c89dfd064fca697d6ae5aeaf32473990a64631ac1139d0baa4e2a897340f2541e28cf86ee429dc041935f5c2f80c938eb83866f23932b4ac0c74cdd80b0ed8185cd382aa9ddf3979f18a42e2447cd0546a420508b67607acec58a183ca0cebb6fbbcc8252594b802229674c156843c8434779598fa9f8e96b48c38c1886b6cbaf4187472bbf19107077261371275c5eadfb33406e4c814f61bef6a31919c10653951e43eb827ef1fbbc1559c067349096e8e18b378cba1c2b695c9d6ec12a76785df5f644cd5acf111bc67f24f1df40a25591e6f8aeaed65d20e321ef797e5f28d8c7242b575cd9098aab7286aada427ceb92639d95106014de12b492923ab47e3a07bfecb0bc691980d150311d33bbc7b51b0180335cc873d5d3f1922cbf86921e8bd94c63da63d7b8c6625f18c1b0372977451c9472956eb4453cc332e8b3b24c835c394945e01e99e41ee4fc38a96c339d4f3e47bc4ac904185e3d7a20f2872df60cfe8c949222335a9a97df63e31fba7e12c21f980665023a010dc1a3509c65b4603908fb3fa5a70921fdae3ac06e4231a9b05cdc59906489bef4a5624db395b41c7e6224d02e9289f25a22262815e51d8887d4c73a52f9620c0f10e274ba79f9e494c0c6efde8166dbaf3a3f7b447dc2ca0346eaf81b3b4d54f15806c8180ac4caa0f2689a2c30643f25791dffd89e05290335e9c45fbf7e73891fb020e6a28677cdabca89374ea6001716138854c1c915dbcbd615ad03b9accefb0df9e4388791a125b5325e079bad42c3d3a80130bc15bac21659797a92c4405aa0d2b0e8c52511d0abd581d2069b1eb5bc25224c0435baa16400ddf5cadce5555454334c03024ce5de93f823ef0c83b0142a56eb47b8209c983fe14dbdcdda8a33810bee416d5460dfda99c55f6a82d7fa8ed323d5d7f46552bc07f2848ad1eb30c08da66cda87a3f37c713593ad05c1aaa9f2d4e54083dfdcf295b9aac69229de95e4e1676fe1d355ea64ba45777552d825bc34d2898d8ca93238a20d7e616505efbdccc5ed891c565b6f414fbe7c4eb7b4c44c4b32162142c95822d47e58e7807195f7e2f1ac8126e58175183edbbdb04609c72ebe0387c7f5f393eb15c1418c8ce649b80ee3369be7307482dd9ead3caf4f751e7f3f50fb135242298b27c122fb80c854e76d169b20e325ec196e1a9d1dbd424b62bb2131bfb49387982e58693a602a0cf1e6760b7d81af46fcf918101b094e4d8335a8ad5269cc1481384337a648e2c4931bfaff6ff7a8b01ce59b3a6aaa83345e01c7f54e8edf01239c6a8bacdb567f0e213a457055eb10688609949df32bf6aa2244edbd818a94d02826b432d6e8e0e4cd1872fe25ef5342a5f50cfd5062f42a8e7adabaec9ebc533918a3758b70940c9189cc4fd941c30a2d9c257431ee75754a6676e7c0f9ff4364df9b6a497968ca953bf1705be1142fa17e0f9556b27f6ac673bb79dee382284fbd326bc003acc27eca77a677596e9a4f00bdd10aa814bc54cd2fb6237ec97436a57555ba133fbf72a7ea2843b6814e0444c1fa9a86f2571c56dbfbdf619975381f3b83bf44ba190d85ab680e5a939eae41e1bdfc2a3fe7bcbc8bb9813a5c14f80712f55491dfefa9ebda0c5a047957450beb38d605f87f56325379e98a6cf077866eea536fa8452fac9d7621947b20d85990aef9df8b3ab0853a236620c7f6beda5ec7e9f62d429000d8e6e0709617813c500b1d1ea000816557534ce3bc2eccd97618ec92cf498b6d54737f4c093e2a33a7769960488972e446d3415ecb95f65d5cb31a9dc9fd193de3e81c53a605050e888d3e2fb9eca9712d872906a7a7587f14f377be21613d1b5d2034245bf77b27e3ee9f938c3a4f28fdaf4984d8d0ff55f07a9dcf969ed9aa299ff8723d45c3ed593aa2064656e0b470424a1834da3685b656f27c779fd9433b5c70f8a07432e965454bed02bda1d57b9ffbf97054df3bcec707b538231e57a4bc2d0418fbc134b7616a73101f3fa4fe2c4e848fa01967076b012aec6596f252369fd6a3db0b14a32b2c9fd26367616c510aa82da9794294f1d805d071b0bb03bbd3ac1cc10fcff66715367a62eb3d5341b2f5f2ce5ab8e399ede2b2bcfb81d54ffbfc00a1ca0644219b20f1d01080bce252816fa5a9b6df82cc186f6ac3b7549cbf52c6519e8afa4fde1148eb4107fb6572b024cf2bba405f761f1487041b7053767d484d9c657c64566be9afdb17d54abff07794101e9d6e5f6c25c921691345e0044f92e998f8b6a1255e57a2b30bd0db91d225cc245f47d659451a0c0871e63e1395bd1a40f320ef3165542648f8b08188187cf2f96a94bf559c0dd8701c718df14e0dc73af6794ea0378a7274a93282c729cd42e3d0d394e5da62a1f1f48209bb71ed3197384bdcfa47976270e6b8e0e913c97bac9d46dceb5a00911b18ed8d2e3c7484f62fc014c821c44af8f525234ec549ae462c4d37da45f1ba9ee56208ee4efabfd968ed772738f097914366207daef7dd77cea148fe3a64d96258521feffddababc8748852cfd52e4460c54d8ec1aeedbd509c7a50c7cc55e7d171f95ec5c6fbc3733ab1426137d69f725b4741d2f8b5597c82ea1c8b89436cfa8bd11020aefb934bca28662c9d9e3bf32105f1ee837ae3c3efdbcafaeec96d26cf77a4dbf594fd2cb07a0556d3991cb29d3245970b5f13e9bea9b171453f4b9d432ffa985c7c577d13b94144617aba806ba4a381aed063a783c3c3cf9712c78bbff1237376c185a18aa09199b30541e69935b4df7ce5e2a38ac7ec6608ce35073a459b564b2c5741cf22617b9220846543b0be5d2f9a2890f2a824980822ebd091465c84cf29732d5cd669fe1b1f2e48b4af8fa408599957d43f88bcb641d3763a7cd82eaff0186a4771a8a932b3dde33ca03dbf2b9ad67d84957542264671ac06f3f16405ba1d1c8d7215ef016b24030d31b16c1ab6ab937d5751a6a351889e8f6c5f4da11ded6066dd858a83a614f3f1280c957a6af0bfb0e41105d18b8f5081e5266194daa5e610e2976f00d62b5e6f4fc96be13cfcc1a18a305d2d28ffdb4d9ae3b2fbb74e2b530fbbab483b22859f2f61a215cb8d207d6a8b9dd6880beeee6be99ca0385fef119619a949c2537499791e55c049077a2ee044e34a839c604a7a6f00b110f514a27dee31a87d4db00f42d723157ac3008dc48c225929224b7e12c5af29a3498025ecbbad3f2f7d8ef8cdb8f958fd567056ab2400183a3e76794066ae8711dd1e15a3e3f232dd404ef4391e14c65ac9ecd8062758b244755cbc0f83f4f77b0dd28ed1179196c5d5d40e3bd055feea1cd1e00b26750aab497a238c169118084d2a6aefcad0b02c65cef097373ecb888ac784f6c12bc819cb9a25e017ea412633654803a3e62415ec449e10a6c54f523b326071ba63b4e8b79d57be058057b4a02772e3eb7833bcab5b129f7dec685533c1157f8b34eea535ae56bf5010ada9175758d397193c128b3cf4d05a7d17840c4fcaec90f872a6e922fc3e5503eabd65c7f42437288c5736399280117a6fc50aa3ce63ef3370e40a80dff9eb33af7ce7d6b9cf08ed9d03b99de021a4647f9d5acd53e9ac52b006ab2d802c313fbadeaed120e834e7155a10c7ac2e2fd39469b557e5f209fcb077e47a949f9f69412dac891f3981c98936a9b91d7a5ca38f101c008aa3692fb48296772a6ac0af7f720779a859f9418438f3fe19b3301efaa1602169e3ac71229392a04bd8b5e73ed3e2d2393daff3ef95fcf83a539f43852793c80acd55da3ca5c1f3389f84ac8f5c6eb8b48660bbced8ebb4cf092a2046f3481d7ec49a9ec9cc4b2ab771dd1efa55b5aaae9afa0eeb039926d66344ca8b9e68c84b79e978a4bb730d122b41ef47bd7a1d32524b91de9e054862c59a3630e77f0742348154418c2283c486431d31adf05db37a0f376e937999b041abf0ff2cad6541456cef65a8f2a7f9d9ce449ccf7c6c536d92e615138b34a69e71f178b258cdc165db8f6aa1ca5b420b3ed0f4898e67c5c433b269fe27f3cd7bb2b4d4042e3a5d9b6bdae2bb8227dbd3198656c8a031ed3650a84f32019f34e354199cc5f26e14dc6a017bb2af6d4e7051b730c7cf75c55de5ef5e62e296e959fd7c3208c0cad86086523854f2a907be5896ce92fa2299125eec901289d03f18e57396ac2e5eb3dafb6b5718530f40d5aa3238942da2fd49a55abb3f9b4bb1feb0a897851d4a916fc6c218b69dbf16fe5d85f0bf03b0dbff500d8e80f0112dc8f0813172ffda9eecc6007a863b5d066845e1eae11ee1fb3dacb500fcd745133262bb62656f05dd3eaefddca441d049006259aa0683f648d85e9901e0d5f7784446d5d8a91f3748f466059d0e367772fba25cbeee7a4ce1f88e57d6a0eb5ceb63859ea5ff2d4cdbb4f7a496748f07fda8af5221cbeae809568908eeac49624970479913a195f42b998910befa5f91bb66130ef84ba7134659b37f6b8c8a4b9b6e53e620f61fa577cf5aa65742ed872678b33e99ee81dff45a2a1f98e21e00236461d7b6da9384c60242037f3689a43affb854f5ae15d6a8bd1c8fa45b167cc270f494e398b58796a9cac7fe5ddfd72477d5ef7c8a5746783163a66815aed812b641d2ad84770e7e31c99cb3508438a0a2657fdda03ba460ff9884e9664afa6620989cd522fe9db695cc76815c179eb6f0516d0128000d90c74d8a0175db28338ddaedf812dedf702240f35474fde812ca338e9352b64199948644a39256993d0d21e3342df5cc71635cdfd40924afd32e80b74c964ce0c6daec6648100e4f5999a9ae8ecf212c2d6645fea1d144333c07c4e458800de961ce8fae243a2f06302d579bc15109688921d92e2125e7dc56da4f586fbf5de569ab71b4a48f36baf2e92d9742c818df7b60350ccb1b09e9e34ceac8a0571c80cb26ba813580c5be878f19552ae80c3ab302be984243b854fd1438255ca31e7ae57c89293ad0e4b93111f417e83d453fa70e939c0b5aceb6966b5d0075a7a71020cd2e69af3d30b34186260c2c0c0eff8f5c6affad3c758bd00052d120f2d5fbe76bf087a61ca7d98d6798e8f21e62917d679956309f34e2169113cb9d0bc3baded03fdf8444861ba1034b7501933d452e5f9500dadeff5d0182ef1cc4431ff10a2e286dccbb5e47e245d9e31cbb9c1a1f65d8c90a99e0475fcbf353b512c569f48c0f57ef77c8cc8782edad8d67c756edd7d41cac5aa1a1f1d28a068a4b9dfb610789bfcf0c82d34fec68e5479cfc39aa5150182933972463924b5f532da02236047913b9047d536a2ad60e6a365b381a5437697b95127114aa9e0190d20b529476822a24dc9f43c3410a592b7c58864a3012e07c18680b31e4409e067a1d3989c11e2c8e196ae21b084303eb093c7d1262d09d9038e17ba309eb1baa31e2a7acabec0f4ab3a9380cd4a53669d68a6c95a223eed585f3cc51635715635954dad2d11df16bef7757a85873c150141a31ec986ce330088d36be168329253d379e44c6e48e6715d9657d9a1fc43fb2d0c686c694a9b9e44a054833a2db1b2cc93ce15cffda4ed5b223d53aa9eb6683f2359c457f53cced6feb86cb0180f043a950eb641c77bef2e3eeaf23b5ce3470081f5ebde76dc8f3bc65f1c093b57b948db30496b7a8283772f0ce0d30ca1e8449dd988bf31af4fd47b95b3f1f3e9e782fbd06a9f25b93aaab42ae7c465f52aa4a8f00000000000000009010000020000002997a188961c231cbf4c77fa2d35af46f7b93561f5998a9bedde93788034e2f05c0e35af789f793ccf4161e65e778fabc5f0603b67c95ba6b342e430318964c350a01e988516fd92edb5ecfba4f24de457b4f42a8890bd9667d195c2aa60db2f568e97907243b0f1b021c2060bbcebce412bf25243cc6faafc681badca1b975d06b30c705aec822775e4ac661bdd77cd12c94e97dbe36947ab3307983c7d8b4f8f646e72a4ec105cc2503a852f900fec23013142d88d7b08074f756ae5ff5719e308a014461124d872ba419174baeabcbb3b06117be9d28ed5fc232188ec2bcc50000000000000001901000003000000292cdb9df3c48dc9c9655cf0d94dac6aea6454c9d152882c0aaf095ab9c0e2d53bfd2eff8d286e7e11704b30c2381d42dfb16d736fd3fbedeb106319f9d100007c581192ed371c96fe212dcf782fb32b71cc105f5f943e2a58436addfb8a24511ec6ec8a7ffccf117dbd962d6af01456404ae8e1b16d5175172446a566633d0ca2e0f3ad3e69fee4e588117b27c2f2fe0db702128ba565af15c3b6972bf550c2589b72781eb55505bbbcd9e950edc0d3013cd8f8"], 0x2160}, 0x0, 0x8094, 0x1}, 0x8000) read(r3, 0x0, 0x0) 11:37:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000000e000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000300001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000600000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:44 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 32) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 64) r5 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) (rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) (async, rerun: 64) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x400, 0x89, 0x18}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0x101) (async) read(r3, 0x0, 0x0) (async) io_uring_enter(r0, 0x1454, 0xa41d, 0x1, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8) 11:37:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000000f000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000400001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000700000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:45 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x25]}, 0x8, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) signalfd4(r0, &(0x7f0000000000)={[0x25]}, 0x8, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) 11:37:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000500001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000010000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r0, 0x1cbc, 0x0, 0x3, 0x1, 0x1}, 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000011000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000600001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000900000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000700001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000012000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000a00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8000, 0x100000}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x2) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) 11:37:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r0, 0x1cbc, 0x0, 0x3, 0x1, 0x1}, 0x2) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000b00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:49 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) recvmsg$can_j1939(r5, &(0x7f0000000280)={&(0x7f0000000200)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/66, 0x42}], 0x2}, 0x40000042) read(r3, 0x0, 0x0) syz_io_uring_setup(0x632b, &(0x7f0000000000)={0x0, 0x9864, 0x10, 0x203, 0x2c0, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000635000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) 11:37:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000800001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8000, 0x100000}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x2) (async) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) 11:37:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000025000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000900001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000002f000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8000, 0x100000}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x2) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8000, 0x100000}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x2) (async) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) (async) 11:37:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000c00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000003a000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000a00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r0, 0x1cbc, 0x0, 0x3, 0x1, 0x1}, 0x2) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) 11:37:49 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) recvmsg$can_j1939(r5, &(0x7f0000000280)={&(0x7f0000000200)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/66, 0x42}], 0x2}, 0x40000042) (async, rerun: 32) read(r3, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x632b, &(0x7f0000000000)={0x0, 0x9864, 0x10, 0x203, 0x2c0, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000635000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) 11:37:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000d00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000040000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000b00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x12c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11:37:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000042000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000e00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000c00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000048000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000020c00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000f00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:50 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x80000, 0x8) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x7a) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:50 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r5 = fcntl$dupfd(r4, 0x0, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) recvmsg$can_j1939(r5, &(0x7f0000000280)={&(0x7f0000000200)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/66, 0x42}], 0x2}, 0x40000042) read(r3, 0x0, 0x0) syz_io_uring_setup(0x632b, &(0x7f0000000000)={0x0, 0x9864, 0x10, 0x203, 0x2c0, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000635000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r4, 0x0, r4) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), 0x0}, 0x20) (async) recvmsg$can_j1939(r5, &(0x7f0000000280)={&(0x7f0000000200)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/66, 0x42}], 0x2}, 0x40000042) (async) read(r3, 0x0, 0x0) (async) syz_io_uring_setup(0x632b, &(0x7f0000000000)={0x0, 0x9864, 0x10, 0x203, 0x2c0, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000635000/0xd000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) (async) 11:37:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000004c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000d00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:50 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x12c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r3, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8], 0x38}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x12c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 11:37:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000358000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000e00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001100000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000f00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000095e000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000060000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000001000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:51 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8], 0x38}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x2, r7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x40}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x12c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11:37:51 executing program 2: r0 = syz_io_uring_setup(0x1c7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x51}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)="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", 0x1000, 0x1, 0x1}, 0x3) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7ff, 0x4, 0x0, {0x0, r5}}, 0x3) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:37:51 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x80000, 0x8) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x7a) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) socket(0x11, 0x80000, 0x8) (async) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x7a) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r4, 0x0, 0x0) (async) 11:37:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000001100001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00005865000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002500000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000001200001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00002f00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000068000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000011200001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00003400000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:51 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x80000, 0x8) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x7a) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) socket(0x11, 0x80000, 0x8) (async) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x7a) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r4, 0x0, 0x0) (async) 11:37:52 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index, 0xfffffffffffffffc, 0x0, 0x1, 0x4, 0x1}, 0x6) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000006c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:52 executing program 2: r0 = syz_io_uring_setup(0x1c7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x51}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)="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", 0x1000, 0x1, 0x1}, 0x3) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7ff, 0x4, 0x0, {0x0, r5}}, 0x3) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:37:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00003a00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000021600001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:52 executing program 0: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_SSID={0xd, 0x34, @random="f95552dccd3b3ba8d9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x240400d4) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0900000000000600001066696ce530007677115e734f68ef0821e45cd98f8630f2bf4cc27e25d7d854f1fcd4b9b9e2f0424663d82af77ca429d94a3a35410f6086c2d943582414f725098a2d941647d43d61ad4a0830984bd472a5dde2040fcabac8ae959577612f090758243b587ebfd529ec209d4e3d8f99b36b981d89f038f424d1169c778d71b69aa534b4508fd1ea5836517d1f975c6e96a4981251452c150f41bf8b"]) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f0000000080)=0xc) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000036c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004200000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000001800001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000074000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000021c00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index, 0xfffffffffffffffc, 0x0, 0x1, 0x4, 0x1}, 0x6) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0x10000000) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index, 0xfffffffffffffffc, 0x0, 0x1, 0x4, 0x1}, 0x6) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r4, 0x0, 0x0) (async) 11:37:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000007a000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:53 executing program 2: r0 = syz_io_uring_setup(0x1c7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x51}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)="28710a69cbfee49667b3372988001b4c5968ed3bd2ebaf0d898af1d89b854979d2426b4fb64539e7829c6d6cc3ad8aa0d325d228f6bc6d04bfb8c4d12b6724e13aba44314549d69d1f577e9ee4b12a710a7b0bf9495f78b7139aa084a442c9125ad1b2cea789c9c587ec143af54716e23335a1ddd7ee5152e566dff9bf411e3cdca375cdc4532323ee1cb6a0ee8d68f2271f9e3368177340f0574e0a6dcbb18a1632d1d15898b173ce624f33b5954f0e1829b91de3950e143a4816a7d15121d5dab8c4e385ce83fccf8b60f1afbc37d7105bac5e48a03ce7369e2a7a968a445024017089da6c5bb3923aaa7ec34b9d8a8d32db7b0815ff10fdeb4812fd144e97e1fc81ad294b0dfff2e2c05db9ab650e9cdcc29867b514886915dd4a3eca8ec75b0163eb4a856e7529ab0ce734e5482256991c6350f5cb1f1c29bcfc00489dbd1d865c0499f2777c90d738de9b87cbd7131262fc559d119634c2ab94a8718f1d534e987855bd4fd4664e3a3d785da4d06e62d6351112942a8cc26432d04c43004bc76b647eb6e45804164d16f565b6b08d8eb5c6d0701f0731424b131acbdbfae71bebb686d08d793dd7bbdb2112305e515ff8619f80d83e6b9870733a58375f409b11de8919cb6274dceb58f670c80725f4d9403f67987096d236889d9bf2c448db67edac7ffe3e9f880de3c4979a33d0a7c6151f0412639ab5018cd136f061d44765e503ff912230f64c0ec04f5ac66ab829edf3d3b805cd5157407645e9d86fb17e2a273fdec49c7b9232919cecdbb7c841336648806544d9f40dbb10eed78f00e2b1a6cd459081dcf59276ee773b151ffcab290efcc630e9847718184cf4481e7c2dfb3a3379496bec3394c4bee98541896b6304cbd95f5726d6c3c1d77613dab18d7b4af917c7f92f27e05aed16251def6120ecbaa311c9e8787d1a46f06bd1bffb10a70d3f5eb0e02fc4443ce576f2143416fe88a113dd5b5f1dea248b30042ea0ea68455f2a7fd365ba513b6b94e279e8ccdb6bb0c954d5aa9914ada5ab9bc29e93638b868c4d732516058d19e3e60fd00520c0ee95ee927baf7522b065a2791eaed177e0c5eae8b6212045098a8d65487a1214cb6b469d1e60e224357e2e9cafbb76cf87912e4306fcae1cfa341b10c6ca64271563c7f528bdd5ed11dd27511b9fc1fb12a0ee57b859589a7b096b7ceac6a6dd427bc9eff3a7c486593796cd26f6360eefa8f1463d237e26e9d00bb6e3e20fc29d8e27b62afd238b19ebe92cd3f1d179f4846b3f5abc0be32d0f2f3d02824669164083f62f6f7d180b9d8222895498694a7b49a8830049f15a03cdce1598213d41020a4489a1546290340f6a6af265d3eeef4e1bd3bdc1bb93ed073a40b27e93d2228eb2a4b2fd5286320046f89eb03370c6166acb0f4fc43a336162920eb36bbcc9d7608df0f1007434ce9d96a19399fec550c9b38de0d473105d03189f860fe379355d230f598086a59b6bef62467488a8569f948f28ea4a29586edc1754e7665ac8b6e0a1ee7264d69b09bc46c8a2c79e71abb9bf5708bdb8a33d7120b22596c8a17a29ee49b96ec36f507fe957c90e38c8d7af42018af1116183c0f9ae3cdb410031bd820c57969a4e35dd23c1d45f18215947c7e9fe43e12c1c931c7136bece7979fb6baae3722df2e1e4d0c7d6ebf335166c1ee7b92d2a9a2d4b98515e9933ffc1c19b4d3d3a787ffbc94fcc9a87adee3dd94d5f3ee7d1bd7ace6ebe3f33461625de959438cf6d9f94b58aac965acc51b592ff9f1477a3226167e559544539af8fe7e65640300bf35c72391cf2ca6daa0725d22dd677674903b4942934addb21b0e69eb16b04783ffeee81e4e63a624c9b17754ac414691e8438cacdf63ddd7e0038a83ccd95e5ebf7023fa2db74b3cdedcce62f08554be56c0edd07b738b531ec5a2fe1086d6031c2eb429893ea80b1579c4a345244fb28b7ca91fd233555d6e738916736091fad103f37c935cd0a84072e6b9e078bb1ab15ff424ad737260e49161cb4fadc6b3348bc551884d7ad2631d3530526eddeaadca78bae0a52b4e228bd30a541f1c4f7c02382a640078a7a3de43fc2360e452f63ddd9126928ae64193afcd97929d1fe916ca0e8b2c39e8671e1ea79c148feaaa117fcf4c3d6dec280251017aab1f9c5abb5ff4ea4d08ee1329031d8b043fdda08f593775ef4d4b133a87935bd0a86d2b3f61a681824fcf7f56da85a44590bb37fb06d14b608c815f14e15c7d0f714b01723e9fd3dbd54474a10886d7601f6477d05b5aa5ea44c145bddbde6a33d24e97b0da177057d897ee57a3a035518cb64496272527b0c20ded466f6cabbf7e0671819110686cc8bf46a76607cb160618e8927931e2f9095c064a91dde03dd27ba685cc8e41175a9d1c8096e2572b380a8a5686e7aae4c78284f201d0d74e95c2e29c6ff55bd421b8c926bbfbb96525248b8b9d1be828108bc38bff19658d15d7b0d869fad71814a07abe124fb1c5a55ed92added7a7813d1881dc8ccdecef3adf8f72dfd3e0b60cf52e9e0dc945d54c271144075de8d8d04fa3cedd6f1229c2f8a358c12dfe0be3118b8108b71c8ec801a022b5599b5f3b21d58a02e029b2f89f680a5d036f835a7ea8f0ee2a3e74197617fc7c3e42776ce32f3066c89e82f553bab722a874cb4f53392e0a945e0b86289d1037d624e19e3964842ba507ce58c952cb47588cde59bcf64ab1bbde241665a0e2e70743644a8c2d13b22e11974b5891c9c96e93e35e828d4ad825334fc393c94563801dc6a7952cf7ea7692d3e44394e80001652ffed0c499556f51701214f9bbc4238a121802c424d3f6c4b6006387f083078b8d060feaa35ef8220a7d737a4fd076e59890931ec8951fd8888e9da9e7c563ae54a76eebd5e2b3bbca9917871a20e926949834b35f434eba0acd0c4a93ea486573520d33e290147d585925d67c6a2a56ac70fc4c885a81e1ed8d596e410b681d39e5ac03bf03c429285c9ab765ff20d94d45daa4b90899db383ac52c174b200ed1599f736008170b9b5cfe484d2e809d497d83fcb263c89fe5de3a1fb7784ffa20d894a70dde70ff1381d87ac0dffd6055f44a0b0b1181b2f3d52d8889e025c597ab959db581293008dfc85e47732813dff7b9604b317c6358383fa16abc68fda6458c0f66fb408f5e372ea5063a7c0e860dd237bb63106732d82a2d0ac14bef1607837825a0845626458a8b1a0fb298214d6ab9078161d54ac4e5cf4334e2ec8e6a589d8ced08d258303306186274af267cf68f09e2579d17f8c3dd876fde2b41212aa0731adaa10d5285c61c516dca6d2f8acc2479e9e6dbd366ab762adcaca0b41bdd708376dc36db1f074c18b2e95a526789908df0b36308ec0c9638dfd7e5437379b1824d6e275f4b09337533f8de21fc6d51d01b41cd94ff56097b2c8c805a0904046a7f5768e77e5dd41013ae3642ae1fa9ed0823f7b3eae2d7c34e80bad39c3bf93550f6cc6aec2a05c7239c327bdac5037e1fab255b997f80efe8f4623230e76ae08f88ea81d64fd840e0499ce0a9103b0c030ee7278af9ec5ec65a6743041de87642347e97780d151205af3aa235962b54b11ca27ed6535588a295f6a3dbb4922db5b199dd8d2a32c351a99324964f870280dbb79cc51b0719c8a4aef6418fe47934c7af2bf17fa1aaf9f14444e54f736ade90a171d9764924ddfad07c192e2b1d9bf3634e4eb67ced0f743c34d2e473905cfe6ad48507cdafc60690c83e3c6c4348ba4d7a90062d7f5e746f1af6d3bd003d583c34aadff47bdaa64beb55defe664d739af36b7cc134d1d8fc7da6915e854c6de4c155c0683d2e4d94e2456e236d163180916a4fe2f89d9cc695775543921188309196047525d5f4f5d1ef3bce1b89ba0723a3e6ad018d3172e62ee34a337f756624a18ec8283b01223087b6efac0b1690bfa24ad9eabf1b4eb24e102e6a293609ab1f01ed3ad89c5acf3feb175484b9fb6add1dc77d9b818daf0426e60f900ee9d87ff8e69bc0f8ee2034fd4bc891de12e641cb5683274fb2802dfcf3f4e066a0da59fb40ec990ff8c7bc0beff8c104d52cfcf485fcbcfe483a3621b08df3e6b7481d91ea5fd99edf94d15ed27b63b42f9dda9e69425fed828657471fc3e160b2115817760baba0959abb6aed97a14baac2fac630624547d5d6b87a58e74d2947009fe2a69de0728d185b1715d562824903c9a2d81a26889ffc6cd6fb13217a3a6c9e0088c2cf83e03a0f29d8910139e87c9bca79a81eb416f23f400be95c574f077aad61da8e0e8c7bea334eca8ae75ce581759edcd67143d05031a4f8d003c97aa27a0e286b79efebed48457e60f5a0f6d625c910d70a173595436936ffaa1594ea5e0db072feb3bd976f0676977a8fc0285739c7e45cd89731700a4ed679069ddf2e2a1dde8f92b69d157235285ffe18e76f0d459bd4b22e5de75fa1146383ab7f517c2791b2a224efc84e663e8cc3457350543c086dc376e4596152571a50f5b9e1b732e70de3c3163bc0548b918ba390f9c16ffcefe47be92ed4cc2843bc833844eb0e5c16c4ef05e397f4dab07795b61bcfb6121da65ffdcfa871d4cc56cf0a97519f20b650de38d81a44cd6ff5ca72cb7fe6373f9ed60dcd2916e93d6d935b8f46534f6aa06bd13da7595df64bbb843be133b38a8c330d49b89a386ea9b2a5e9b2cd296b54893e739fbb2a509433c98572acc4310f664031da5707908737fa4b4a9f05ccdc0670635ef3f107cdb97b985f9ae2e5e4e2a1e2a286ebfe9e314ef08075c9078d604e201d16646739a8e8b918e9392d42e1c6cc809b6b320b1e1ad5a9e5e2f6a3f219743ce45a10ce61c947cf18a81f62a64ad6d7de742864433e59eb1535f68df8733021f3316a0092c00f65df81998e11c0092fa1ba2b6be59fd1e65b7ff5b6a086d92795d0fd6fb978bd40a70da551fa10b5718ada92f99526a17ba855f1b178becf4b0b26036a316d74d9b18ca33da825589cfba480814de2e8d72b86ccda5940fa65cb6193ff68598cf18c9b254059e52925f482a4f6ea9d2bd9c2a640a3e74b231e1a1d827273547e04d955c967c1603a87c13564bc333452484230a46b1e9019c2db91f00d220274f469531bbf1c477c4dba4a400f4866dd72eea96e61cf15efac2c6d47e320a7edcc57e70dd7de92f319ed192ee1dc22f6e1846328182f290c4be0910c29e143e3e680f0fa2b383583ab3b8e70a4b8bfd6f841175cdcf915514c6f5804e88c9b7721d0720e8ebe687d7ef86c3707e0c0eb2c436f14502c27323e5800b9435354ad17822f32241488e57a3bf854a9ef0af4e4d25aafc940c35e1baf179ed86ce57bde8316186796d11f22a22677f8231325a6c0be706754e4e5ac278c30241247a458d41a6a47c48815c68d0e1e1737ac449a4ea25f15453d7c1dffa4fa39ad066ce1ebdf4da0a0b7f395f2e774517d0aa51d2590a5a7a0997a7e55302a2f2fffb3387f81ce7b79ebb92fac19ff8368b148c843d3f487905aefd5aab095fb93834810267835a26e18ce8ae59b17f9890a59baf6c23c97165131ae433dae61ab6195a3a6b6728f5961046452711843242c8e82ec4dcd019b9c93769c435c2920511f71da26fc3e7edbb7d7376df735377d1becead7006fdddf8694e35fa6e0ef99d9d56570b1f617f8a7ceaa8b0bd75d29fe93fa78d3243e89c4c9d54bc7b57237da0d8df1bc5614179a3d90d77be116c5d1911379a411dbc6f313530c270ab9337804275a4d81275d14866752f816", 0x1000, 0x1, 0x1}, 0x3) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7ff, 0x4, 0x0, {0x0, r5}}, 0x3) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:37:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000032200001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00004c00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:53 executing program 0: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_SSID={0xd, 0x34, @random="f95552dccd3b3ba8d9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x240400d4) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0900000000000600001066696ce530007677115e734f68ef0821e45cd98f8630f2bf4cc27e25d7d854f1fcd4b9b9e2f0424663d82af77ca429d94a3a35410f6086c2d943582414f725098a2d941647d43d61ad4a0830984bd472a5dde2040fcabac8ae959577612f090758243b587ebfd529ec209d4e3d8f99b36b981d89f038f424d1169c778d71b69aa534b4508fd1ea5836517d1f975c6e96a4981251452c150f41bf8b"]) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f0000000080)=0xc) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_SSID={0xd, 0x34, @random="f95552dccd3b3ba8d9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x240400d4) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0900000000000600001066696ce530007677115e734f68ef0821e45cd98f8630f2bf4cc27e25d7d854f1fcd4b9b9e2f0424663d82af77ca429d94a3a35410f6086c2d943582414f725098a2d941647d43d61ad4a0830984bd472a5dde2040fcabac8ae959577612f090758243b587ebfd529ec209d4e3d8f99b36b981d89f038f424d1169c778d71b69aa534b4508fd1ea5836517d1f975c6e96a4981251452c150f41bf8b"]) (async) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f0000000080)=0xc) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r5, 0x0, 0x0) (async) 11:37:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000017e000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000081000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00005e00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000002500001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006000000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000002f00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:53 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index, 0xfffffffffffffffc, 0x0, 0x1, 0x4, 0x1}, 0x6) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0x10000000) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index, 0xfffffffffffffffc, 0x0, 0x1, 0x4, 0x1}, 0x6) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r4, 0x0, 0x0) (async) 11:37:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000188000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000388000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000003400001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006800000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:54 executing program 1: r0 = syz_io_uring_setup(0x1714, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4, 0x0, {0x0, r7}}, 0x200) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:54 executing program 0: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_SSID={0xd, 0x34, @random="f95552dccd3b3ba8d9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x240400d4) (async) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0900000000000600001066696ce530007677115e734f68ef0821e45cd98f8630f2bf4cc27e25d7d854f1fcd4b9b9e2f0424663d82af77ca429d94a3a35410f6086c2d943582414f725098a2d941647d43d61ad4a0830984bd472a5dde2040fcabac8ae959577612f090758243b587ebfd529ec209d4e3d8f99b36b981d89f038f424d1169c778d71b69aa534b4508fd1ea5836517d1f975c6e96a4981251452c150f41bf8b"]) (async, rerun: 64) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f0000000080)=0xc) (async, rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:37:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006c00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000003a00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00004788000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:54 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITEV={0x2, 0x5, 0x4007, @fd_index=0x9, 0x7fff, &(0x7f0000000280)=[{&(0x7f0000000440)="fdc41657a5424b250af51325a46f7bda0f6566ea3381bdbf6bad9366df151e8e57554c26df4353e6b8a3b08954e54d5d3ebedac3c6ccb34be763faf1ba8b1aa0aa8db7fd4f07b4404567bb42be3d20ebe7fee93e522978cf6fcac933321a75ba0dcfcbe9d2af5bef1d4df145569725a6f44141e5e7bd3888c2f9a7c6b930adbe540238d9e447e878e1bc267e7562ea1275cd04bb73bc35", 0x97}], 0x1, 0x0, 0x0, {0x1}}, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x0, @fd=r0, 0x2, 0x0, 0x0, 0x1, 0x0, {0x1, r7}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00004888000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007400000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="ffffa888000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000004000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007a00000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000004800001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 1: r0 = syz_io_uring_setup(0x1714, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4, 0x0, {0x0, r7}}, 0x200) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000091000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00009100000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000034a00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000201000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:55 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITEV={0x2, 0x5, 0x4007, @fd_index=0x9, 0x7fff, &(0x7f0000000280)=[{&(0x7f0000000440)="fdc41657a5424b250af51325a46f7bda0f6566ea3381bdbf6bad9366df151e8e57554c26df4353e6b8a3b08954e54d5d3ebedac3c6ccb34be763faf1ba8b1aa0aa8db7fd4f07b4404567bb42be3d20ebe7fee93e522978cf6fcac933321a75ba0dcfcbe9d2af5bef1d4df145569725a6f44141e5e7bd3888c2f9a7c6b930adbe540238d9e447e878e1bc267e7562ea1275cd04bb73bc35", 0x97}], 0x1, 0x0, 0x0, {0x1}}, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x0, @fd=r0, 0x2, 0x0, 0x0, 0x1, 0x0, {0x1, r7}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001940)={&(0x7f00000003c0)=@xdp={0x2c, 0x4, 0x0, 0xd}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)="cfa5decf6992d23de4bdd68456ec96df702c305a402f82aab7db6ab56082b53d78d1c473ab7fbdefb17b2e8d29335412037aafac0be1f8f8cec6c8ed997e0fa10cd298d62c2a51d1332f48ae3ce240e46ba5d46739906ad1eb66b9357502850ed2526a07ef9c9bcacb149476f00047a4ab6cd87086a0c0e8d415822ca19e5d3120c6654c0eaeb39b8ae6b7088265f12ec85d98e25b5bca34632be6cf523ea21aa5ee69ddfd3a85640afc6407c5530ba61686048e6137d1619d59630b89d5aaaca3193ed40a0490cd101f74458ef28cab43", 0xd1}, {&(0x7f0000000700)="6e6d8a6552134a90d02b3375a29818fdaeafa7942da24c9338f13c3d038d5c18cb55035e6de34d268d1e0a214ea93c466ef80048c65dcea7a41ae012fe1398c9d5ec6a8cd6767e65da1d6404d0e85023a0d7f56aed1658270852cf7c316d5f5211888f3e8155f3627211e4d8ce3ad80ad11438ae14c709d3f36f2d3d12e7020b02b4a7bc8b0318ff7c080b08951beab4c25495af4bf720efdc177d4ca01f3e17805106bcdaa72373842cf665767bcae93f6fc57f3900c9af4622b87500f608f9b06820ee1b52fc7c70b56239a292e00eabf7eab7c723ef60245c1ee749058e36652905c07492de5df4d4d5cfd5da8d291812", 0xf2}], 0x2, &(0x7f0000000800)=[{0xc8, 0x10f, 0x7f, "7bf862f158bbec592374540befb6318bcf185f4769b4ca5e1fb8daa22dfb41116622521487f4ee87cf6162d5376ee0b37d4d8b488339db39e4929e8c80c172eff62517274fa3ea6ce9833b8e8b82013062540d8945b37ea2df3859adf85a69f21fcf49dca83c52e340e4694b6a7a6bbad9e0b6b3715075ed936df22fc53572ffa94d7669308f41fce3f0b76b9dd4f28b7a61886feb13e87c34c5762ae344ff4d8ab5ac81719154f51d6592ea973d40b73709354c"}, {0x58, 0x115, 0xaab, "02ee632d56c4c44799cc35240139541d6400395fb199cedf77f9199e16c8d51e81586463a96af139b40d7ed200f3d0d40809ce5e3c78803cae4b14cad8fbd507e1eabe0040d3"}, {0x1010, 0x1, 0x5, "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"}], 0x1130}, 0x0, 0x800, 0x1}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index, 0x2, 0x0, 0x1ff, 0x3, 0x1, {0x0, r5}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:37:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="ffffff9e000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000004c00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001201000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000002a8000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000006000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 1: r0 = syz_io_uring_setup(0x1714, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d4000/0x2000)=nil, 0x2000, 0x4, 0x0, {0x0, r7}}, 0x200) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000b201000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000001b4000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000586500001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000026600001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITEV={0x2, 0x5, 0x4007, @fd_index=0x9, 0x7fff, &(0x7f0000000280)=[{&(0x7f0000000440)="fdc41657a5424b250af51325a46f7bda0f6566ea3381bdbf6bad9366df151e8e57554c26df4353e6b8a3b08954e54d5d3ebedac3c6ccb34be763faf1ba8b1aa0aa8db7fd4f07b4404567bb42be3d20ebe7fee93e522978cf6fcac933321a75ba0dcfcbe9d2af5bef1d4df145569725a6f44141e5e7bd3888c2f9a7c6b930adbe540238d9e447e878e1bc267e7562ea1275cd04bb73bc35", 0x97}], 0x1, 0x0, 0x0, {0x1}}, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 32) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) (rerun: 32) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x0, @fd=r0, 0x2, 0x0, 0x0, 0x1, 0x0, {0x1, r7}}, 0x6) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:37:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000102000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000003c2000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000036700001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001940)={&(0x7f00000003c0)=@xdp={0x2c, 0x4, 0x0, 0xd}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)="cfa5decf6992d23de4bdd68456ec96df702c305a402f82aab7db6ab56082b53d78d1c473ab7fbdefb17b2e8d29335412037aafac0be1f8f8cec6c8ed997e0fa10cd298d62c2a51d1332f48ae3ce240e46ba5d46739906ad1eb66b9357502850ed2526a07ef9c9bcacb149476f00047a4ab6cd87086a0c0e8d415822ca19e5d3120c6654c0eaeb39b8ae6b7088265f12ec85d98e25b5bca34632be6cf523ea21aa5ee69ddfd3a85640afc6407c5530ba61686048e6137d1619d59630b89d5aaaca3193ed40a0490cd101f74458ef28cab43", 0xd1}, {&(0x7f0000000700)="6e6d8a6552134a90d02b3375a29818fdaeafa7942da24c9338f13c3d038d5c18cb55035e6de34d268d1e0a214ea93c466ef80048c65dcea7a41ae012fe1398c9d5ec6a8cd6767e65da1d6404d0e85023a0d7f56aed1658270852cf7c316d5f5211888f3e8155f3627211e4d8ce3ad80ad11438ae14c709d3f36f2d3d12e7020b02b4a7bc8b0318ff7c080b08951beab4c25495af4bf720efdc177d4ca01f3e17805106bcdaa72373842cf665767bcae93f6fc57f3900c9af4622b87500f608f9b06820ee1b52fc7c70b56239a292e00eabf7eab7c723ef60245c1ee749058e36652905c07492de5df4d4d5cfd5da8d291812", 0xf2}], 0x2, &(0x7f0000000800)=[{0xc8, 0x10f, 0x7f, "7bf862f158bbec592374540befb6318bcf185f4769b4ca5e1fb8daa22dfb41116622521487f4ee87cf6162d5376ee0b37d4d8b488339db39e4929e8c80c172eff62517274fa3ea6ce9833b8e8b82013062540d8945b37ea2df3859adf85a69f21fcf49dca83c52e340e4694b6a7a6bbad9e0b6b3715075ed936df22fc53572ffa94d7669308f41fce3f0b76b9dd4f28b7a61886feb13e87c34c5762ae344ff4d8ab5ac81719154f51d6592ea973d40b73709354c"}, {0x58, 0x115, 0xaab, "02ee632d56c4c44799cc35240139541d6400395fb199cedf77f9199e16c8d51e81586463a96af139b40d7ed200f3d0d40809ce5e3c78803cae4b14cad8fbd507e1eabe0040d3"}, {0x1010, 0x1, 0x5, "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"}], 0x1130}, 0x0, 0x800, 0x1}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index, 0x2, 0x0, 0x1ff, 0x3, 0x1, {0x0, r5}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:37:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000006800001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000003da000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, &(0x7f0000000000)="fbf1256c64206e4be94cfdc3913acf600fe656dc51ed5b999a7cd0a7fb50515424f84ecf4e03a09756c91b05946b675223a83f98390a1be62514c82b1a631f1f51c74ba77025efd8faa9c4ca06b153015db8e8bd2c8bbc43b666488a24e7c0b9753bca30082ee6dadd954d6486d6ef8b6ab2ea211246a622d45fe7453645109b4f1bbd6668c10a1a96ad3c5acdd1eb34a97d76fa41045b75685355cbee0d8c803647828bbaf2390e97", 0x2, 0x0, 0x0, {0x2}}, 0x8) read(r3, 0x0, 0x0) 11:37:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000c02000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="ffffffea000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000006c00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000037000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000003ee000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00001602000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000007400001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001940)={&(0x7f00000003c0)=@xdp={0x2c, 0x4, 0x0, 0xd}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)="cfa5decf6992d23de4bdd68456ec96df702c305a402f82aab7db6ab56082b53d78d1c473ab7fbdefb17b2e8d29335412037aafac0be1f8f8cec6c8ed997e0fa10cd298d62c2a51d1332f48ae3ce240e46ba5d46739906ad1eb66b9357502850ed2526a07ef9c9bcacb149476f00047a4ab6cd87086a0c0e8d415822ca19e5d3120c6654c0eaeb39b8ae6b7088265f12ec85d98e25b5bca34632be6cf523ea21aa5ee69ddfd3a85640afc6407c5530ba61686048e6137d1619d59630b89d5aaaca3193ed40a0490cd101f74458ef28cab43", 0xd1}, {&(0x7f0000000700)="6e6d8a6552134a90d02b3375a29818fdaeafa7942da24c9338f13c3d038d5c18cb55035e6de34d268d1e0a214ea93c466ef80048c65dcea7a41ae012fe1398c9d5ec6a8cd6767e65da1d6404d0e85023a0d7f56aed1658270852cf7c316d5f5211888f3e8155f3627211e4d8ce3ad80ad11438ae14c709d3f36f2d3d12e7020b02b4a7bc8b0318ff7c080b08951beab4c25495af4bf720efdc177d4ca01f3e17805106bcdaa72373842cf665767bcae93f6fc57f3900c9af4622b87500f608f9b06820ee1b52fc7c70b56239a292e00eabf7eab7c723ef60245c1ee749058e36652905c07492de5df4d4d5cfd5da8d291812", 0xf2}], 0x2, &(0x7f0000000800)=[{0xc8, 0x10f, 0x7f, "7bf862f158bbec592374540befb6318bcf185f4769b4ca5e1fb8daa22dfb41116622521487f4ee87cf6162d5376ee0b37d4d8b488339db39e4929e8c80c172eff62517274fa3ea6ce9833b8e8b82013062540d8945b37ea2df3859adf85a69f21fcf49dca83c52e340e4694b6a7a6bbad9e0b6b3715075ed936df22fc53572ffa94d7669308f41fce3f0b76b9dd4f28b7a61886feb13e87c34c5762ae344ff4d8ab5ac81719154f51d6592ea973d40b73709354c"}, {0x58, 0x115, 0xaab, "02ee632d56c4c44799cc35240139541d6400395fb199cedf77f9199e16c8d51e81586463a96af139b40d7ed200f3d0d40809ce5e3c78803cae4b14cad8fbd507e1eabe0040d3"}, {0x1010, 0x1, 0x5, "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"}], 0x1130}, 0x0, 0x800, 0x1}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index, 0x2, 0x0, 0x1ff, 0x3, 0x1, {0x0, r5}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r6, 0x0, 0x0) 11:37:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00005e02000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="ffffffef000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000007a00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:57 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, &(0x7f0000000000)="fbf1256c64206e4be94cfdc3913acf600fe656dc51ed5b999a7cd0a7fb50515424f84ecf4e03a09756c91b05946b675223a83f98390a1be62514c82b1a631f1f51c74ba77025efd8faa9c4ca06b153015db8e8bd2c8bbc43b666488a24e7c0b9753bca30082ee6dadd954d6486d6ef8b6ab2ea211246a622d45fe7453645109b4f1bbd6668c10a1a96ad3c5acdd1eb34a97d76fa41045b75685355cbee0d8c803647828bbaf2390e97", 0x2, 0x0, 0x0, {0x2}}, 0x8) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, &(0x7f0000000000)="fbf1256c64206e4be94cfdc3913acf600fe656dc51ed5b999a7cd0a7fb50515424f84ecf4e03a09756c91b05946b675223a83f98390a1be62514c82b1a631f1f51c74ba77025efd8faa9c4ca06b153015db8e8bd2c8bbc43b666488a24e7c0b9753bca30082ee6dadd954d6486d6ef8b6ab2ea211246a622d45fe7453645109b4f1bbd6668c10a1a96ad3c5acdd1eb34a97d76fa41045b75685355cbee0d8c803647828bbaf2390e97", 0x2, 0x0, 0x0, {0x2}}, 0x8) (async) read(r3, 0x0, 0x0) (async) 11:37:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="fffffff0000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000017e00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:57 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x401, 0x0, 0x4) syz_io_uring_setup(0x1b89, &(0x7f00000003c0)={0x0, 0x3705, 0x0, 0x0, 0x3db}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x1, 0x1}, 0xfffffffd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) fcntl$dupfd(r4, 0x0, r4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x100000000, &(0x7f0000000180)=[r4, r5], 0x2}, 0xac7) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3a, 0x9, 0xff, 0x1, 0x0, 0xcb55, 0x801, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x291, 0x2, @perf_bp={&(0x7f0000000000), 0xf}, 0x40120, 0xc, 0x4, 0x0, 0x200, 0x6, 0x81, 0x0, 0xa9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r8 = fcntl$dupfd(r7, 0x0, r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) read(r6, 0x0, 0x0) 11:37:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006602000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000008100001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000003fc000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0xa235, 0x8}) io_uring_enter(r3, 0x4463, 0xaeb5, 0x0, &(0x7f0000000040)={[0x1f]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000038800001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 763.706919][ T24] audit: type=1400 audit(1639654677.741:303): avc: denied { create } for pid=6519 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 11:37:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006703000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="0000fffe000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:57 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 64) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (rerun: 64) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 32) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, &(0x7f0000000000)="fbf1256c64206e4be94cfdc3913acf600fe656dc51ed5b999a7cd0a7fb50515424f84ecf4e03a09756c91b05946b675223a83f98390a1be62514c82b1a631f1f51c74ba77025efd8faa9c4ca06b153015db8e8bd2c8bbc43b666488a24e7c0b9753bca30082ee6dadd954d6486d6ef8b6ab2ea211246a622d45fe7453645109b4f1bbd6668c10a1a96ad3c5acdd1eb34a97d76fa41045b75685355cbee0d8c803647828bbaf2390e97", 0x2, 0x0, 0x0, {0x2}}, 0x8) (async) read(r3, 0x0, 0x0) 11:37:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="fffffffe000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000478800001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x401, 0x0, 0x4) (async) syz_io_uring_setup(0x1b89, &(0x7f00000003c0)={0x0, 0x3705, 0x0, 0x0, 0x3db}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x1, 0x1}, 0xfffffffd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r4, 0x0, r4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x100000000, &(0x7f0000000180)=[r4, r5], 0x2}, 0xac7) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3a, 0x9, 0xff, 0x1, 0x0, 0xcb55, 0x801, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x291, 0x2, @perf_bp={&(0x7f0000000000), 0xf}, 0x40120, 0xc, 0x4, 0x0, 0x200, 0x6, 0x81, 0x0, 0xa9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r8 = fcntl$dupfd(r7, 0x0, r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) read(r6, 0x0, 0x0) 11:37:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006c03000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000488800001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000fff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:58 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x8000000) r4 = syz_io_uring_setup(0x77e8, &(0x7f00000001c0)={0x0, 0x2b44, 0x1, 0x3, 0x283}, &(0x7f0000634000/0x3000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7, 0x15614a6c, &(0x7f0000000340)="ff", 0x1, 0x4, 0x0, {0x0, r6}}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x8000, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x100000a, 0x110, r4, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r7, 0x4, 0x0, 0x100, 0x1, 0x1, {0x0, r6}}, 0x2) getsockopt(0xffffffffffffffff, 0xffffffff, 0x31, &(0x7f0000000000)=""/186, &(0x7f0000000180)=0xba) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) read(r7, 0x0, 0x0) 11:37:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000ffffa88800001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007003000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0xa235, 0x8}) io_uring_enter(r3, 0x4463, 0xaeb5, 0x0, &(0x7f0000000040)={[0x1f]}, 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00007fff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:58 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x401, 0x0, 0x4) (async) syz_io_uring_setup(0x1b89, &(0x7f00000003c0)={0x0, 0x3705, 0x0, 0x0, 0x3db}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x1, 0x1}, 0xfffffffd) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r4, 0x0, r4) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x100000000, &(0x7f0000000180)=[r4, r5], 0x2}, 0xac7) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3a, 0x9, 0xff, 0x1, 0x0, 0xcb55, 0x801, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x291, 0x2, @perf_bp={&(0x7f0000000000), 0xf}, 0x40120, 0xc, 0x4, 0x0, 0x200, 0x6, 0x81, 0x0, 0xa9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r8 = fcntl$dupfd(r7, 0x0, r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) (async, rerun: 64) read(r6, 0x0, 0x0) (rerun: 64) 11:37:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="88a8ffff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00008803000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000009100001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000a603000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="7fffffff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000ffffff9e00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 764.715045][ T6653] ================================================================== [ 764.723165][ T6653] BUG: KCSAN: data-race in __io_cqring_fill_event / io_drain_req [ 764.730894][ T6653] [ 764.733218][ T6653] write to 0xffff88810704ba00 of 4 bytes by task 6656 on cpu 1: [ 764.740841][ T6653] __io_cqring_fill_event+0xf9/0x380 [ 764.746125][ T6653] io_req_complete_post+0x4b/0x5d0 [ 764.751235][ T6653] io_issue_sqe+0x3f53/0x55e0 [ 764.755912][ T6653] io_wq_submit_work+0x1c5/0x370 [ 764.760852][ T6653] io_worker_handle_work+0x4ca/0xbd0 [ 764.766137][ T6653] io_wqe_worker+0x1bc/0x4f0 [ 764.770724][ T6653] ret_from_fork+0x1f/0x30 [ 764.775138][ T6653] [ 764.777449][ T6653] read to 0xffff88810704ba00 of 4 bytes by task 6653 on cpu 0: [ 764.784979][ T6653] io_drain_req+0x3a9/0x4e6 [ 764.789476][ T6653] io_submit_sqe+0x44ca/0x47d3 [ 764.794224][ T6653] io_submit_sqes+0x25d/0x670 [ 764.798882][ T6653] __se_sys_io_uring_enter+0x212/0xb00 [ 764.804324][ T6653] __x64_sys_io_uring_enter+0x74/0x80 [ 764.809678][ T6653] do_syscall_64+0x44/0xd0 [ 764.814073][ T6653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.819948][ T6653] [ 764.822259][ T6653] value changed: 0x00000003 -> 0x00000004 [ 764.827950][ T6653] [ 764.830251][ T6653] Reported by Kernel Concurrency Sanitizer on: [ 764.836372][ T6653] CPU: 0 PID: 6653 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 764.845022][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.855261][ T6653] ================================================================== 11:37:59 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x8000000) r4 = syz_io_uring_setup(0x77e8, &(0x7f00000001c0)={0x0, 0x2b44, 0x1, 0x3, 0x283}, &(0x7f0000634000/0x3000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7, 0x15614a6c, &(0x7f0000000340)="ff", 0x1, 0x4, 0x0, {0x0, r6}}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x8000, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x100000a, 0x110, r4, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r7, 0x4, 0x0, 0x100, 0x1, 0x1, {0x0, r6}}, 0x2) getsockopt(0xffffffffffffffff, 0xffffffff, 0x31, &(0x7f0000000000)=""/186, &(0x7f0000000180)=0xba) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) read(r7, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x8000000) (async) syz_io_uring_setup(0x77e8, &(0x7f00000001c0)={0x0, 0x2b44, 0x1, 0x3, 0x283}, &(0x7f0000634000/0x3000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7, 0x15614a6c, &(0x7f0000000340)="ff", 0x1, 0x4, 0x0, {0x0, r6}}, 0x5) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x8000, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x100000a, 0x110, r4, 0x10000000) (async) syz_io_uring_submit(0x0, r9, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r7, 0x4, 0x0, 0x100, 0x1, 0x1, {0x0, r6}}, 0x2) (async) getsockopt(0xffffffffffffffff, 0xffffffff, 0x31, &(0x7f0000000000)=""/186, &(0x7f0000000180)=0xba) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) read(r7, 0x0, 0x0) (async) 11:37:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000002a600001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="9effffff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:59 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0xa235, 0x8}) io_uring_enter(r3, 0x4463, 0xaeb5, 0x0, &(0x7f0000000040)={[0x1f]}, 0x8) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:37:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000ce03000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000003ce00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="eaffffff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:59 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x2, 0x2, 'client0\x00', 0x0, "488a6f8a2e42a70f", "b2df3f74709a7ef841af69e10027bdc9d20583f6cf263688a21e60e244d51a7c", 0x6, 0x3ff}) 11:37:59 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x8, 0x20010, r0, 0x8000000) (async, rerun: 32) r4 = syz_io_uring_setup(0x77e8, &(0x7f00000001c0)={0x0, 0x2b44, 0x1, 0x3, 0x283}, &(0x7f0000634000/0x3000)=nil, &(0x7f0000635000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7, 0x15614a6c, &(0x7f0000000340)="ff", 0x1, 0x4, 0x0, {0x0, r6}}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x8000, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (rerun: 32) r9 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x100000a, 0x110, r4, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r7, 0x4, 0x0, 0x100, 0x1, 0x1, {0x0, r6}}, 0x2) (async) getsockopt(0xffffffffffffffff, 0xffffffff, 0x31, &(0x7f0000000000)=""/186, &(0x7f0000000180)=0xba) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async, rerun: 32) read(r7, 0x0, 0x0) (rerun: 32) 11:37:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000d203000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000003d200001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="efffffff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="f0ffffff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:37:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000da03000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:37:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000003da00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/219, 0xdb}], 0x1, 0x10001, 0x9) 11:38:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000003e400001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000e403000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="feffffff000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:00 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x2, 0x2, 'client0\x00', 0x0, "488a6f8a2e42a70f", "b2df3f74709a7ef841af69e10027bdc9d20583f6cf263688a21e60e244d51a7c", 0x6, 0x3ff}) (rerun: 32) 11:38:00 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000635000/0xd000)=nil, 0xd000, 0x2000000, 0x10, r0, 0x8000000) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x5) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="77d4eb05dd9f8ce5bbd464be4c3f68b1", 0x10, 0x10001, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000ee03000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000ffffffea00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000004001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000003ee00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000fa03000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000340001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000fc03000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000ffffffef00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000011800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) (async) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/219, 0xdb}], 0x1, 0x10001, 0x9) 11:38:01 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x2, 0x2, 'client0\x00', 0x0, "488a6f8a2e42a70f", "b2df3f74709a7ef841af69e10027bdc9d20583f6cf263688a21e60e244d51a7c", 0x6, 0x3ff}) 11:38:01 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000635000/0xd000)=nil, 0xd000, 0x2000000, 0x10, r0, 0x8000000) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x5) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="77d4eb05dd9f8ce5bbd464be4c3f68b1", 0x10, 0x10001, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000635000/0xd000)=nil, 0xd000, 0x2000000, 0x10, r0, 0x8000000) (async) syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="77d4eb05dd9f8ce5bbd464be4c3f68b1", 0x10, 0x10001, 0x1, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r8, 0x0, 0x0) (async) 11:38:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000021800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000fffffff000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000005000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000031800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000003fa00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000041800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000006000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000051800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000003fc00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/219, 0xdb}], 0x1, 0x10001, 0x9) 11:38:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000007000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000061800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000fffe00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:02 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000635000/0xd000)=nil, 0xd000, 0x2000000, 0x10, r0, 0x8000000) r4 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x5) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r4, 0x10000000) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="77d4eb05dd9f8ce5bbd464be4c3f68b1", 0x10, 0x10001, 0x1, {0x0, r7}}, 0x1) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r8, 0x0, 0x0) 11:38:02 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r4, 0x2187, 0x5ef6, 0x1, &(0x7f0000000000)={[0x2]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfffffffe) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:38:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000071800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000fffffffe00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000009000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000081800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000000fff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000a000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000000007fff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000091800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000b000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x5) accept$phonet_pipe(r4, 0x0, &(0x7f0000000080)) read(r5, 0x0, 0x0) 11:38:03 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x17) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:38:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) io_uring_enter(r4, 0x2187, 0x5ef6, 0x1, &(0x7f0000000000)={[0x2]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfffffffe) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) fcntl$dupfd(r3, 0x0, r3) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_enter(r4, 0x2187, 0x5ef6, 0x1, &(0x7f0000000000)={[0x2]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfffffffe) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r5, 0x0, 0x0) (async) 11:38:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="000088a8ffff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000000a1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000c000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x1) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) (async, rerun: 32) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) (rerun: 32) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x5) (async) accept$phonet_pipe(r4, 0x0, &(0x7f0000000080)) read(r5, 0x0, 0x0) 11:38:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00007fffffff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000020c000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000000b1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) (async) io_uring_enter(r4, 0x2187, 0x5ef6, 0x1, &(0x7f0000000000)={[0x2]}, 0x8) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0xfffffffe) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r5, 0x0, 0x0) 11:38:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00009effffff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000d000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:03 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x17) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x17) (async) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) read(r4, 0x0, 0x0) (async) 11:38:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x1) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x5) accept$phonet_pipe(r4, 0x0, &(0x7f0000000080)) (async, rerun: 64) read(r5, 0x0, 0x0) (rerun: 64) 11:38:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000000c1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000eaffffff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000e000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000f000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000efffffff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000000d1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000011000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x5, 0x1, &(0x7f0000000040)="e613e3eb6ee892329b04915536f4bdec156f5d6cf966a73cb4bc1dcfe12304d52173c50cf2bb405dc53eb17a37a14bf2c96494cf74ed00b22a2dcc2964a054787dda2f16456e0ff487a7525ec921961b4e2fb5fe730c1c049e130a0511f7ab40354fe629c3df", 0x3, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}}, 0x5) read(r3, 0x0, 0x0) 11:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000000e1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) 11:38:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000f0ffffff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000012000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:04 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x17) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r4, 0x0, 0x0) 11:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000000f1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) 11:38:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000feffffff00001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="ffffffffffffff0f1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000112000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000101800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000216000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x5, 0x1, &(0x7f0000000040)="e613e3eb6ee892329b04915536f4bdec156f5d6cf966a73cb4bc1dcfe12304d52173c50cf2bb405dc53eb17a37a14bf2c96494cf74ed00b22a2dcc2964a054787dda2f16456e0ff487a7525ec921961b4e2fb5fe730c1c049e130a0511f7ab40354fe629c3df", 0x3, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 32) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (rerun: 32) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async, rerun: 32) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}}, 0x5) (async, rerun: 64) read(r3, 0x0, 0x0) (rerun: 64) 11:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000111800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) 11:38:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000002000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000600)="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", 0x1000, 0x34084, 0x1}, 0xffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_uring_enter(r0, 0x6e81, 0x860c, 0x2, &(0x7f0000000200)={[0x2]}, 0x8) syz_io_uring_setup(0x379f, &(0x7f0000000000)={0x0, 0x3200, 0x1, 0x0, 0x7c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x6) read(r4, 0x0, 0x0) 11:38:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000003000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000121800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000018000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000025000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000004000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000251800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:04 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x5, 0x1, &(0x7f0000000040)="e613e3eb6ee892329b04915536f4bdec156f5d6cf966a73cb4bc1dcfe12304d52173c50cf2bb405dc53eb17a37a14bf2c96494cf74ed00b22a2dcc2964a054787dda2f16456e0ff487a7525ec921961b4e2fb5fe730c1c049e130a0511f7ab40354fe629c3df", 0x3, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}}, 0x5) read(r3, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x5, 0x1, &(0x7f0000000040)="e613e3eb6ee892329b04915536f4bdec156f5d6cf966a73cb4bc1dcfe12304d52173c50cf2bb405dc53eb17a37a14bf2c96494cf74ed00b22a2dcc2964a054787dda2f16456e0ff487a7525ec921961b4e2fb5fe730c1c049e130a0511f7ab40354fe629c3df", 0x3, 0x0, 0x0, {0x1}}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc}, 0x9) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}}, 0x5) (async) read(r3, 0x0, 0x0) (async) 11:38:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000002f000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000005000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x4, &(0x7f0000002640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000180100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/96, 0x60}], 0x2, &(0x7f0000003880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x3, 0x10, &(0x7f0000003980)) r5 = clone3(&(0x7f0000003bc0)={0x8100000, &(0x7f00000039c0), &(0x7f0000003a00)=0x0, &(0x7f0000003a40), {0xf}, &(0x7f0000003a80)=""/87, 0x57, &(0x7f0000003b00)=""/79, &(0x7f0000003b80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r9 = fcntl$dupfd(r8, 0x0, r8) clone3(&(0x7f0000004a40)={0xc0102000, &(0x7f0000004700), &(0x7f0000004740), &(0x7f0000004780), {0x37}, &(0x7f00000047c0)=""/236, 0xec, &(0x7f00000048c0)=""/203, &(0x7f00000049c0)=[r5], 0x1}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r9, &(0x7f0000000000), 0x0}, 0x20) kcmp(r4, r6, 0x1, r7, r9) read(r3, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) r11 = fcntl$dupfd(r10, 0x0, r10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r11, &(0x7f0000000000), 0x0}, 0x20) write$binfmt_elf32(r11, &(0x7f0000003c40)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1, 0x16, 0x1, 0x3, 0x2, 0x6, 0x3, 0x294, 0x38, 0x3da, 0x400, 0x7ff, 0x20, 0x1, 0x4, 0x7f, 0x3}, [{0x60000000, 0x80, 0x5, 0x9, 0x68bb, 0x9, 0x9, 0xfff}], "dfaeb50589d13f23358f1bd2e720a922e388948225b57e0103da52d9ae4656f69e93ec450d08efa9fafad3e2b42754c674fa338933a929d341efda83c274a6050277a720916dd2", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa9f) 11:38:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000002f1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:05 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000600)="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", 0x1000, 0x34084, 0x1}, 0xffffffff) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_uring_enter(r0, 0x6e81, 0x860c, 0x2, &(0x7f0000000200)={[0x2]}, 0x8) syz_io_uring_setup(0x379f, &(0x7f0000000000)={0x0, 0x3200, 0x1, 0x0, 0x7c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x6) read(r4, 0x0, 0x0) 11:38:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000034000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000006000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:05 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a80)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x68) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r5, &(0x7f0000000a00)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000540)=""/121, 0x79}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000080)=""/8, 0x8}], 0xa, &(0x7f0000000880)=""/138, 0x8a}, 0x1) read(r4, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000a40)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r7}}, 0x5b9) 11:38:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000003a1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000003a000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000007000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) [ 771.746231][ T24] audit: type=1400 audit(1639654685.781:304): avc: denied { read } for pid=7120 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 11:38:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000401800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000040000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000042000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async, rerun: 64) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x4, &(0x7f0000002640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000180100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/96, 0x60}], 0x2, &(0x7f0000003880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x3, 0x10, &(0x7f0000003980)) (async, rerun: 64) r5 = clone3(&(0x7f0000003bc0)={0x8100000, &(0x7f00000039c0), &(0x7f0000003a00)=0x0, &(0x7f0000003a40), {0xf}, &(0x7f0000003a80)=""/87, 0x57, &(0x7f0000003b00)=""/79, &(0x7f0000003b80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async, rerun: 32) r9 = fcntl$dupfd(r8, 0x0, r8) (async, rerun: 32) clone3(&(0x7f0000004a40)={0xc0102000, &(0x7f0000004700), &(0x7f0000004740), &(0x7f0000004780), {0x37}, &(0x7f00000047c0)=""/236, 0xec, &(0x7f00000048c0)=""/203, &(0x7f00000049c0)=[r5], 0x1}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r9, &(0x7f0000000000), 0x0}, 0x20) kcmp(r4, r6, 0x1, r7, r9) read(r3, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r11 = fcntl$dupfd(r10, 0x0, r10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r11, &(0x7f0000000000), 0x0}, 0x20) (async) write$binfmt_elf32(r11, &(0x7f0000003c40)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1, 0x16, 0x1, 0x3, 0x2, 0x6, 0x3, 0x294, 0x38, 0x3da, 0x400, 0x7ff, 0x20, 0x1, 0x4, 0x7f, 0x3}, [{0x60000000, 0x80, 0x5, 0x9, 0x68bb, 0x9, 0x9, 0xfff}], "dfaeb50589d13f23358f1bd2e720a922e388948225b57e0103da52d9ae4656f69e93ec450d08efa9fafad3e2b42754c674fa338933a929d341efda83c274a6050277a720916dd2", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa9f) 11:38:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000421800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000600)="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", 0x1000, 0x34084, 0x1}, 0xffffffff) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_uring_enter(r0, 0x6e81, 0x860c, 0x2, &(0x7f0000000200)={[0x2]}, 0x8) syz_io_uring_setup(0x379f, &(0x7f0000000000)={0x0, 0x3200, 0x1, 0x0, 0x7c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x6) read(r4, 0x0, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000600)="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", 0x1000, 0x34084, 0x1}, 0xffffffff) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) io_uring_enter(r0, 0x6e81, 0x860c, 0x2, &(0x7f0000000200)={[0x2]}, 0x8) (async) syz_io_uring_setup(0x379f, &(0x7f0000000000)={0x0, 0x3200, 0x1, 0x0, 0x7c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x6) (async) read(r4, 0x0, 0x0) (async) 11:38:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000008000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00008847000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000481800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x4, &(0x7f0000002640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000180100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/96, 0x60}], 0x2, &(0x7f0000003880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x3, 0x10, &(0x7f0000003980)) (async) r5 = clone3(&(0x7f0000003bc0)={0x8100000, &(0x7f00000039c0), &(0x7f0000003a00)=0x0, &(0x7f0000003a40), {0xf}, &(0x7f0000003a80)=""/87, 0x57, &(0x7f0000003b00)=""/79, &(0x7f0000003b80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) (async) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r9 = fcntl$dupfd(r8, 0x0, r8) clone3(&(0x7f0000004a40)={0xc0102000, &(0x7f0000004700), &(0x7f0000004740), &(0x7f0000004780), {0x37}, &(0x7f00000047c0)=""/236, 0xec, &(0x7f00000048c0)=""/203, &(0x7f00000049c0)=[r5], 0x1}, 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r9, &(0x7f0000000000), 0x0}, 0x20) (async) kcmp(r4, r6, 0x1, r7, r9) read(r3, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x74, 0x3f, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000340), &(0x7f00000000c0)=@udp}, 0x20) (async) r11 = fcntl$dupfd(r10, 0x0, r10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r11, &(0x7f0000000000), 0x0}, 0x20) (async) write$binfmt_elf32(r11, &(0x7f0000003c40)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1, 0x16, 0x1, 0x3, 0x2, 0x6, 0x3, 0x294, 0x38, 0x3da, 0x400, 0x7ff, 0x20, 0x1, 0x4, 0x7f, 0x3}, [{0x60000000, 0x80, 0x5, 0x9, 0x68bb, 0x9, 0x9, 0xfff}], "dfaeb50589d13f23358f1bd2e720a922e388948225b57e0103da52d9ae4656f69e93ec450d08efa9fafad3e2b42754c674fa338933a929d341efda83c274a6050277a720916dd2", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa9f) 11:38:06 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a80)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x68) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r5, &(0x7f0000000a00)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000540)=""/121, 0x79}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000080)=""/8, 0x8}], 0xa, &(0x7f0000000880)=""/138, 0x8a}, 0x1) read(r4, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000a40)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r7}}, 0x5b9) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000100)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000a80)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x68) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) recvmsg(r5, &(0x7f0000000a00)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000540)=""/121, 0x79}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000080)=""/8, 0x8}], 0xa, &(0x7f0000000880)=""/138, 0x8a}, 0x1) (async) read(r4, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r6, &(0x7f0000000a40)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r7}}, 0x5b9) (async) 11:38:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000048000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000004c1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000009000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000003581800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000a000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00008848000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000b000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) r3 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE, 0x6) syz_io_uring_submit(r4, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x400, 0xc, 0x0, {0x0, 0x0, r3}}, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x1) syz_io_uring_submit(r4, r6, &(0x7f0000000580)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x2cb5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_uring_enter(r0, 0xf25, 0xf2d7, 0x3, &(0x7f0000000000)={[0x1472]}, 0x8) read(r7, 0x0, 0x0) 11:38:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="000000000000095e1800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000004c000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) read(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) io_uring_enter(r4, 0x5433, 0xd790, 0x0, &(0x7f0000000040)={[0x1]}, 0x8) 11:38:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="0000000c000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="00000000000000601800120008000100736974000c0002000800020006"], 0x38}}, 0x0) 11:38:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00006558000000001800120008000100736974000c00020008000200068c"], 0x38}}, 0x0) 11:38:07 executing program 2: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del, 0x0) (async) syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000a80)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x68) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) (async) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r5, &(0x7f0000000a00)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000540)=""/121, 0x79}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000080)=""/8, 0x8}], 0xa, &(0x7f0000000880)=""/138, 0x8a}, 0x1) read(r4, 0x0, 0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000a40)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r7}}, 0x5b9) 11:38:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000050700bbc0020000010007000000", @ANYRES32, @ANYBLOB="