ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="10000600000000002000010000000000"], 0x64, 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="040027bd7000fcdbdf25000000000c00030002000000000000000600060003000000080008000000000008000800040000000c00030003000000000000000800090000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0xc1) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x103) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001180)={r1, 0x12000000, 0x6, 0x4}) connect$inet6(r5, &(0x7f0000004c00)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0xff}, 0x1c) 19:38:47 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) r0 = syz_io_uring_setup(0x4187, &(0x7f0000000400)={0x0, 0x0, 0x6, 0x3, 0x172}, &(0x7f0000682000/0x1000)=nil, &(0x7f000010d000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00006a4000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x4, 0xa, 0x30, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe8) r6 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f00000002c0)="d17760da8442e008c325e759900d452c077a87ee02e4c0cab0f913e156eb367edacca33a8f6c6db951c3fb4b215106a81833aa9ffdbc2c6b6734d1eea84b98d4f92c7d5a47397724039a0ab8f85beee155850869a102255ab88228a4c5ae5a448c0840dc098f2771ba69b6fbda90b0af7661aa890c9c64139c920ec6225afef9d42fc081bc36c5c738f4cf5e4c08b1049ade0869f06347c69746c68a55b8f1a918527f18fb09fb26724243bd85e4ec4a3028256f59a9db3d5b0944", 0xbb, 0x1a040}, 0x3) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x810a382552fb0f65, 0x1d0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000003c0)={'syzkaller0\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) close(r0) 19:38:47 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x173) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:38:50 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffdfc, 0x0, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:38:50 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xc00000000000000, 0x0, 0x0) 19:38:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:38:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:38:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) close(r0) 19:38:50 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x7) 19:38:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) preadv(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000680)=""/153, 0x99}], 0x5, 0x74311ce6, 0xe276) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f00000000c0)) 19:38:50 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r0, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x1, @auto="26c6a408de1de961"}) 19:38:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:38:50 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 19:38:50 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_setup(0x2bea, &(0x7f0000000180)={0x0, 0x5d3a, 0x0, 0x0, 0xd9}, &(0x7f0000036000/0x4000)=nil, &(0x7f000050a000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000680)="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", 0x100, 0x0, 0x1, {0x1}}, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r9, 0x0) close(r0) 19:38:50 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xd00000000000000, 0x0, 0x0) 19:38:51 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffdfe, 0x0, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:38:51 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x8) 19:38:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:38:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:38:51 executing program 3: sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="dc200000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf2511000000680001801400020076657468305f6d6163767461700000001400020076657468315f746f5f627269646765001400020067656e65766531000000000000000000140002006970365f7674693000000000000000001400020073697430000000000000000000000000040001804800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020068737230000000000000000000000000080003000600000008000300010000000800030001000000080003000000000014000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB='v'], 0xdc}, 0x1, 0x0, 0x0, 0x54}, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r8}}, 0xec1) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r10, 0x0) close(r0) 19:38:51 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xe00000000000000, 0x0, 0x0) 19:38:51 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open(&(0x7f0000000180)='./file0\x00', 0xa801, 0x1a6) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x204a00, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 19:38:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:38:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x50, r0, 0x894a6000) mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 19:38:51 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x7479, 0x2}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x170, &(0x7f0000000180)={0x0, 0xf1da, 0x0, 0x1, 0x1d1}, &(0x7f00007ca000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) syz_io_uring_submit(0x0, r6, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4, &(0x7f0000000340)={r8, r9+60000000}, 0x1, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r10 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r10, 0x0) preadv(r10, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r11, 0x0) close(r0) 19:38:51 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffdff, 0x0, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:38:51 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x12) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x702, 0x141) 19:38:51 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf00000000000000, 0x0, 0x0) 19:38:51 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="3dc5e49d02656cec49b57b51f956b33d5fed5d8ee884593ba626ced3ed8eeb389f19859b7e44e1a0ca71193faf522b5f8c96014b47ca69b77d22a7c365bdcc2678b3e45eff611c9626bef72ee74c991da62c5a8bc01ae9432d021a01fae01fae37de1444efea21658fd06021a58d597d26980503b9ad630600e006ffdacda3ca3a37a16d09cafe3095c64592ec4739f9a63b6b8b2aad0ea96cdfd3201b523c896673536e5b08a29427acb0347dbebd85447d66ad1faac27ff22e96c080b70b35d7373351357fef169f208a7889b19570a6cc50ca0a87679d879b3845caf33c803fdf47c073690e14b9afd0f2fa63e535c065cfc3db7db739", 0xf8}, {&(0x7f0000000240)="9fc75c2155434f72d7ea2a8d31ab263ec9f58d631cc5a94562747714f12ece71bf65e0cc8e041e9384548c8c38589088e99752347c22bf53f7a52452ed4339f5c4e4f35b2efc019550cbf4d0cf46fdd5c17a1b929f48dcbfae11e88bf2aec9b8bc65", 0x62}], 0x2, &(0x7f0000000340)=[{0x58, 0x101, 0x800, "6d71c7a8cf4baa2df798a40da6160f45d4e956281cfa64ff5a7d63ef49b2e80ee234a3f783127d280433ec394a7127add1146c7c763d688896e02ffd15fd513f4cf19e"}, {0x1010, 0x103, 0xfffff3c3, "c47be33ee7a969060ff140b2dc0c1ec72b2fddae3c6d9784d4113717e2cda868c632fcf0b5a7c05dba00fb9ce21b6a53f4cef9f0a46a4a42ef0a689fb5ac8c911ab276409750559c1ee8a19f18d4df0a8fa51c087c7e65742b2b133e73ade4c1229c2198b874bab85f3663420d455e00c4235712bbd6aea88c39703daaba8368af2071013382a2d3005a8ebc768e21753600d9a75c42064035cd4220d9774513f714d0642c7ac2147ed5d4a82a1ab11218c900f9a84ccd401a45d5a9ee3468d159aa67c154e72871d8396f7fbf55bf97ff48e2bf1e45accac434e011f1754ecbae5b1caa67717d8a20ca13f842a00ff96a3112a9d1c828a280235cff2fff4c1f6b9fd5db4a1f8d07d8fb69df0f7446141d42a27c43ea63166916f121b8dbe7eb6bf66a144fa976628205a6fd5d74b9f0a2c0d8385c41d26d6b636cdb6f0337bc907d346c4413c552e48432144fe92a4b4fa0f7f4a7446f005e9edbd035d9549616c57d543ccdb3e46441cb34c8eb3695579342ede9837e411ffcbeff7b5210523c4462375a7b4a18b7a0f31f0e9cb5e74de4e1d6d1f65e208a39b1761f15557d968b44291a342c31cd6679685ea36dd27613d97aaa8fef39286f04a319e97f91dfa6cd1f8d2ca059cd529d6532d8cbba05d5cc26154b8c4dc4c67ca875843ab2f32e45e4556f11a19a947bdee6b2ef6a5d4da3f96a168266151379dcb0ff059a9a767cd08e8d8832d10343bd7a736dbee6136f2186771725abe6a17fef55482f6a465e9ce14345e07a585fa30ac6be1b8f62797d9178aeaa4ebc5018250a46cd5d1e3615a0e4d7b29c68796a2cae4f295b8db30f0a60ca5b2cf33385b5d6aeeec632dede9e114b7ff29f50b7dd53a07fc6f373b9c2d35288f59c58ad017154fdc75483f895a9e139411b99a01be5a60420353507a1a4be39221f3fa8cc9a2ecf99c425782627927d092cd9c94aff20e523b393c1a77fa8575ce1a4ec1542648f6f98ac92ee64474e708cb211e878e944b436b988f63bd52d933d904820b5407adb77d7ffa8b81e8ca85283f33797f970b3cdd6a2265baf466eddb454552cc6e77f2eb2d0732c2a003beabba3f761121d649b70241d5bcea278a6ad32f1e344c6684dd5c408afe9ef5f1b6560d5aeed48784d057de18d0d09155a6a501958926c77ac0de1ee0f02cf7461b593b83404b0ff70c708ddc98758d6f968a96979cdbac93069fe2f9767a25695d343f9fbebcb3068af21c90127b495e4c00993c53f0b763107c3633835d58e9b99b622bb61f6bda08cdf3968164c9cadf608a453a2368255a2791b67f7a2be54348f92f6e57d6f91b9cdbd9627f11be4fc0ea29f9636aaa007cf8f5b630d9928156dd74bd7bb22b28595166ca5674b2e8c2e63f9ca2689176e130440538ccd865d9ee5d59c8e5fbc4da9f607d8a9c659c9a2098d148ffcf8f6f0d6528c7dade84513f7c2ff3dfb59a85c5f626653703f8dd58d76f3f2c431bbfd51beb59bf5160bdf0abc9e4a9c3573ea0f94fdadb6dbc3dbe41061e076be315becf32fa89d9038510308c3f0ba1aa577f7707518e2ed3e6692becf9e277c40569666fc585b1ab6e31cd638b4ce3851ef7646bd1388f715c398422a55128f0490650ee2a10df587cad051e1cf6eefaf993b11e38491deb4bfc06889bf15f4b52dc4111bb3b5161823b7f47cfdc43665acd9e5c22396f2d9e96641e5acb04e7057de081519916c9cda62431f5c291e59c9a3e1e459a9f2d517df2c499f0fa5ab1b3ff7a6e783e4cfa8130afdeb5bbe1f0fb8c27a75ac0c2f293813a53652853474d08984e2d59f2314a1297238438fb99e707faae95e52d45b565c526ed5a7eb96c0a7b1d7e02351764d76bba8297eb9b13827eb48d8855e2c944a3779c173341ca22e21a50039cffa72de8014ae4d6057b69b3a9e8552e58d7dcaf0421e6cea18a42271b0029e9135c8a5dc333a97a15eb1640974ff094ca7c6609ca102a4fc599f60361c2eee58ea71858ba2a3180ce61e7218f8fc7746a02362be587b7cd09da83ee058e647726cf3c418892fddfc93f74b69f1ad1ebf819d85ae452e2d349443408718b96a35d3e5510d15145f6f395906bdabfe52762f9fa14e958e31e1bd02d8b672f543a8f7d24122063f9c84e483554443957aed74fbb6418040fd373a76af6538cae19cc2201e9015c70c52f10af87ba0c7d2aec5b437601dd84b5e49fad38d441173c0aca72e1874215b3d0203660efc066c51b56f189d44bf9792bef18cb4b8cf3623430130d896350f1c2b247bd8e8ffc9dcd887876e7d0da43e36aa4319e886cb65dd507c07eb9cc6c9497b0b75e2f090731eacbb97a064f594f21c67fffe8a0be8566464aa38d6768e0cee9d0decf8f1ca3dfad2660260d473f8da4e1bb68934c949a9e652787220f3c80e1d56c34524ad042ac2634005703393faf3a4c50b6301db57d63a7d7e7f1dabda01531010ce2dce160fa71fa519f0d4483ba8caa0851c46818070bd853dca1ccee65d4851a902695f5c0038fbf5ca49f69e09f959ad9ea56877b305b6a6aa111f39d3fb2aa3cb030305ca4063386330fa20120c0d63ad1008d3948a3c3214012bde2d3636e78b9fd8f0cd2819cc767cf9a94e92e1d51465bf6d03f802dea64a806c0160c5fe605c56a6672b1b6983ecb4a85eae8822de7d01fabfb10cc643aeb5552c773a5a27bc39a2ebdd93875c89f02ce255054106c0946763c01e1ea7cd1907afd884e9377ca19bdd6cac0b92313b10420e26c7ec3c1b7be7144fc02c2a9414eca0086ec246149a2970e55d3998ea80ce5861d65975a906f69ed7a6cee5f70368a4ce580bc83cf4773c217bd9bd0b111d82ff69b89e54a1b14a37b1000e476033a442e72640a83fd9ec3956db735aaf3e4390c315f62e78e52f15f788c1955f90b618182f3c2a16bde232eb3aed51a7528c656077b055111bdfa0d372bc36b7cc105e83934cb2576923bb1def17dae151227adfde5de0fbf70cc49eb0f9d23dece40cce4a0f1b00ed44f63a181df9e5a5cc4262c1807ae7bc2f376d5b8ee52f49258036e892b5621897fc6b103d8242993debfa07ceea51160c38d08a60f0ff28e9c257f676d832ab2357b0dc9859cdc07e0fa72c39ad7932137bc936b6ad13f942d8029f74c389f8f4b98df7d66dadfc736c6e4b13c31b85c537aea7b5a46062bfe9d4f5053041a75a946c99ea4cf702f3b0b7ae702ce72d4db2b088c85a19fe1673c9a6b371bba3111fabaada5c6216bcd80b31d027fbb84b0d2d1ee991b17383683dc840b891b8eb9f488b83b43a259b1a19f4871264943c62509615efa5b8625a932f8dbffc30c0f990a7baf8de816c967bc914cd2315ee60863abefd382aa3cb7c483ebae033f2028ee8a797dc374692ab73b287cf06a4eaa04b3856cce1cf700d65c58645281f679b9e55aff73c56882d47f06549ec54ca116d3b1caf79d024769adfbfb77a30d8ae4c83093f910abfd7bdb6e4dc2aae01fefb5d055b2e857d6f0383e015a54d7cfeb6eb5f0bc18164b680a16e823b05bbfc3bac2c992537cd942a84b5aff8184d933898e187b56800f0958a6d9401c6793b39b3f1fbcf86dce734500b0a53da5945e1c3d99c2724dd6005c22f59cff3d24bd53eee49031f2b9b52456a506b9da946c6096a5f09d45ac2b37247af3090916d2e82861ddef4f425e1307b89a1b5b73b0da1260d28b7cc1332832f71476872f99fee1b2c83c454bdbb7253a60f4e443cf9946e3b7cbb66e17276b7a01049ea8a507d072792505fc1e79ec944b23990258e9ddfa9584730e7bebad6a225c9f2d958d50c7b079bda1b7afa48cf6ca771ba29471d6ed1f3af03d47adbb6c43ecf89a71fc1f6239ed809e6d9b6d22121e81a1bf443aa2770e83ff07e6b9c44ddbbd88d9b1ba93042b84c483503871a3770cb3abdefc6d71131d56314d6ccbb30e9d7f429970a7078c0f7666ebc18b7587755d49280b27adf2e0920e2ca3d1dcea38ffb8fd7d2dfff277dd4c94c274e8980c92242ecebbc708d76ae1660f016a24b50fb6a69cc1ef3a94fc7e3b3ee09c4fd2b587a7989108eaba3960e17a9d753663f0467bb24239c8073c7a33fd28266131cd3fc5131e95cd0858de26d0bf21c7c63258a45e1bfe4f82f222b08708baf92750d04b72cc3ad695348f9035d811489273a7e43970cb3da5f757db606621e5a9a9350b38ee89d16a32f471d5dbecd2dab78268048119d70f7428f5b0fa8c6cdb7303ffbf93db5494cbb6ea8bd760bc2335372c1247a977e4d0476c493bcab78592d3c9257ffb870ff3dae7fefdbe548dd07576d6996fc88cbb522cc50fd94df365bfe6829142f4f7dad4a4be6c7b95672b3d9edaf38f84e318c00f76f8b9acd597b5b9a995344b6a81e434c872c0a85bc764edc12228a04b7fb63c55908643684e8ddf21f351fe33fd93578b4b483ff36de4a76490fed76dff3a1196b8330984803dd04e24901fc8635f6fd0fc555b1e85bc245545114f722caf833d8a99b63426c8fe94fb61aa6aba169db38001d1dc0f794219621b8d34b84c483a413385096c9618b6b4fd8c70de2a4eefe6ed417f989af7d37533c5ad21583ed2cab02092640e662fc03787fe36df92f6b5892511d3537678e499c7631eb84b35af6073151d0321b1a6caa7e3c08da18e95dae84d02e3ab799f3d9d4eaf9857dec974d9f712524c53e5d45ff5d4690d8908fcd1e86551df48cc8ed383656631c6c08afd47266f683152020373eb0f89d3b4c46735bf49604cbdc0c90ffdd22ca67be9dd6c07a6614b324545f67ccd230818af13b2aad80e76297f51649ad954e2f0d2bd8d3c95ffcf1283df697c2bddf373a26c094d7dbb0e3e2717ed150811e4b98461ed32b47ad02c4de8ba5392be84a7bf5eb5fadd65c08435f6a6e8f5458e4fcfd48753a711d3224cc5b695a9c6e5af7797854fe8485ae07d04b8eb12177716482f1ebf6dae1669323c1e8b5828fe04928662fb186c822e0fba7a20f7669bb1bea075f22ec642b3bb3f0bf2beee2346f7f2e6bcf14ca27cd4709f4babee17b07b7491821e2c9a0360a7d033117e33cb9c5f91798a56cd7dcce3d41eca19f81565d854ec6501632411239f4a4ff219378cbe327e4271bfdac9e6d3cb5748c59e6c5a0a19786ee04844c0bcead5d12a64c077add17e7cfaaafac20148998232e156928972815a9fb92e773c394f87c15e9639e8cacb70e34ea776f8398b92c6ad208803bef7275042799199d159d094b561e029422075ad08cc8968709fe84f1aeb279d43c9ff59228269e43a307090d68fb3426bfb1ba2d1f9bac4e0a7307f18b90c17c320266cfb003578085ae303cc6156b4cad3c2e327b8a468ce0e95b387bac6ad3bf9bd67e3d87a7490ceaae6ad838aafff3448285e30eff7483ae92f56dbf16f7cc5a7f1a009454ec98a8bd50501fb0d2c89e1a1cdc91dc93871f438f3ec3ec3afefba16f4f5cb1ab3a1b0df713a87bba862ddf60ceb8432578585a179ba91cb45a004287a82bdb7516ce5de9086b96cfdb4f1fe1de583605542b49a9f3eb79a001dc262df0af0967a56229b3fb33f07db41da272e8cb1dc927b16485c4bed6048230cc2e5421b61f7b35f479b1456374d2f43d5110b898f6bfe004c7e82cde7dfa36bb7e25ec30625a3a800fe3eadd265423018d873f704cd9f137163941cffe86bca2e36a15326e0beaaa42184b249857e2e649402ed5a702a3fac983e4e996945b3ef31007307fb7c933d72d670b17a91ca419dda7f5369e64cfaa6821"}, {0x90, 0x10e, 0x4, "520986ea4b23050e0f1a21d2410aa7ada904ad409e79921516ff8cb7a5f39dc0c61e826bf7fec121a4d628e21b079ea6eb591a14bf786e135b8cc997c915ebc825280fceb11f9534f74965a05184b7b2a5ef56eb5c5c681c3767026fed0311456db303fb2df0f50945e380108082b6cecb4fe38422bfc2c94945dc"}], 0x10f8}}, {{&(0x7f0000001440)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000003840)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="0536aec1d58c960e071e3772b7f860750da2bd6957664723dd8f882e9872a6dfd4ded766bcbab257affb04e7cc67207c52ab7e0b4529e2b57b8fa9f36da31f6ca5967f9b1ede4cb35d63e15c89d0c06e25800d2b8151ed5d6b68f9549806898db0a0c61ce5181811fe03c8d1b7b7c6829a9803b722a6763d6b700bedd51b8a5ac9e7c1788cb7f92078d1840e656283c96a6abe0e82184e3985bbed245c245f1dd97c88424baaea0af6e61d2c9ce4560e79573936c2b0c78b9582931b37e3f273a424c04df4f6", 0xc6}, {&(0x7f00000002c0)="c6f5454eca8929767a1fc1628b7957593079d48553cbb681", 0x18}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="af55fb950f0abe32cb7addc4cc211fe5203f14c7140925ee08635f3cc8d38ab382f3e84fa8634ddf0148c86d3d5e608cc3e2912d9404201ae33c42cb08085a0109992701d2a228ba7a77f138ea9abbfcf3112dd709734b", 0x57}, {&(0x7f0000003640)="5d6ca5a1d9e5bc9e48fde50ea25cc6b4344c75d58f5c54c254d3a63567d5760f016a68e8dc741831ce96550faf55efad11f47961ac8a6c35a5f693c43deaf77dbb584aa84740883f7e88b2dd5cf404a933f2dfe8030c18bbd9b93470ff83ab741c3da339ad1ac2401b6709339f8f651a6f13753a4de39c5aa3dd00cc0ca232c1d4abbc0a78d5642ae5b8509f65c93d6c20ce755b040b88acef749b6f591b8a1e44dbba9ece9a77e0ba6775f6ec29cb0e4f93156ae71582d209b65a55240fc24c", 0xc0}, {&(0x7f0000003700)="4664cf336fea6b783f02763d91665c8756876993d33c7c94852a34d1dca20d97c75378e7be38af1c670e8e4b1478cedd55811dff4df914b76d41ffec00ecda35f3725e2d45a92016c8d8f283c7029e04609952604d92af851bb3ef99863d5e0a193b9469b3d00fcb5f223fcd57123e06548aa477afdbc52287684b3a1f7a4bf82092aca641f558b5f9b2dd9a7adcc84ae6e5870354efc4ef8b0a80a2d204c6eb931cdb33a005e943e53f0c506c3870e6b9401825bc7b0d86e9e32f6bbd4ddf5a69585a1ebdc693774b3bdb315d3463f9aed4b52156a8feec8b76910707", 0xdd}, {&(0x7f0000003800)="71307d99ac7a7853da0c150341ae5516280aa8483c67ee84b948f3545140df06439d58edde872aec606dfe43a4a603", 0x2f}], 0x8}}], 0x2, 0x88414) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 19:38:51 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendfile(r0, r1, 0x0, 0x2) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [{0x2, 0x2, r3}], {0x4, 0x5}, [{0x8, 0x0, 0xee01}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x4, 0xee01}], {0x10, 0x3}, {0x20, 0x3}}, 0x4c, 0x1) 19:38:52 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1000000000000000, 0x0, 0x0) 19:38:52 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffe00, 0x0, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:38:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:38:52 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x1000, 0x4, &(0x7f00000013c0)=[{&(0x7f00000001c0)="cbc1f70383e12ddc41c2fe905681f2b0fb10db6ebecf68aae40b55350e6985ba830eb5fc1963236f694a254459912e4aaa67ee7c0c03e73c8bdb9dc18b294d1f7d4af2c3fd287f6419939474ffc9fd3c4015bc1309bae05a73d9a836ebf8eaccd877aac7b6495c3543fb5b624a51dba33c8cd6b515d84c0d339f49caf07f0889353336d2391cb3486cccff849bb03c4c33b271a103b7794be3d9b70d526a7f1ec7e6a4d71ffc83185d81b052c48c9e956d337fd893754f5d2042e0", 0xbb, 0x39}, {&(0x7f0000000280)="625a3e10a4f990b0cc623d9eaebf01450a08b5ddc65ddd3939b87f813019dd73134e95bcad8808944fffdf94e4013092abca66e39a93447dfde3e044a63a6f5f26ebb12f727b20e16ad71c8d50d7c5aa829911a4", 0x54, 0x4a2}, {&(0x7f0000000340)="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", 0x1000, 0xf8}, {&(0x7f0000001340)="a085f07e61ffe47026d41332ce51556f5ba0f73189cd58b0f4ecb0fccddfe53d2a0580b163694e9166adf3e6bbc2e775eb263388c6e04541c2d55c8095cf70cff2ebb3c1d993b743fccf8b348c", 0x4d, 0x964}], 0x2000010, &(0x7f0000001540)=ANY=[@ANYBLOB="71756f74612c646174613d77726974656261636b2c75737271756f74612c6d65689dca8511515c6d6f0df6b4ebfdeb61737572652c00a3543a6e798a52b1f6b293fee91546b82cb0493c3f5eb5c80d2a6636909176c89141616b0e19d1417f049237d94d663e2ca9c0f12fc9b1962919784578e3c7385bac1fa1a5f912761948c23de14a821f44961f920c3bf7c09efaaf304a9bf9995cfb67cf15ebdca53756ec56e2f65d8ec85496dd73eda0c3ad1555b005e377e613c73743ed59ba39f0000000001eda222bb42d7aa1fbf5dfb527cbad1cb242dbb3ec61bfdd3c5dc8e333958ec67e7b53c44fb9d58b3107"]) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) lremovexattr(&(0x7f0000001480)='./file0/file0\x00', &(0x7f00000014c0)=@known='trusted.overlay.redirect\x00') 19:38:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udp6\x00') r5 = dup3(r0, r4, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r6 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x57) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) close(r0) 19:38:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:38:54 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1100000000000000, 0x0, 0x0) 19:38:54 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0xff, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)="2d7ccdfeea14c8e79309f8df8e7cad3330cc3ccc7e3cc6e2fe1b7228c40e99492f37325ed3cbd2b5a4b6558b4f7afe47bca6b6503303841a2fe0195d7604636fac3446c679732b6aadc83b9463ec0dc9963e5af7501111ece507a16f72c865cb00f480afabdb07dd0d277d3bf82ba62ada4aeba30f919f0e14d3d277dd3bcf0ac4b0b37b02d56d9a580f32322b14fa0f7772071f37655d2336b90cd60ca710df5b4714c787d5f1abc4edfa0500c8ea5980695ec493bdb4c9dc5b16344beeb50d6dcd0894fb0edea90d615bbdf382cbe328410c", 0xd3, 0x400}, {&(0x7f0000000200)="eb4d3297baaa747ed85379019c1a937342416e359eccf948ba1c5f11d44c140bc604db6566f707e0769813343dc7ae7ca51f3b27e60c389f4464b7e3905bcf8190bdb4451d694551b31e9115c0d7ea1dd4547f3c9e6aa5fcbe8e30262e2b080781020dfd31d1ed6e7ce34cc15a8e95e26aa16b", 0x73, 0x8}, {&(0x7f0000000280), 0x0, 0x3f}, {&(0x7f00000002c0)="7408c3e71ae980dac2830e211ab4eaac2c035ca0a05150d51a54276f3f78d975294a1ee00b351ccd96cfb3ce81a827d7c8a420ac1b4b17c04940", 0x3a, 0x3}], 0x4012050, &(0x7f00000003c0)={[{'/'}, {'{]-'}, {}, {}, {'%'}, {'#'}, {'\xe3'}, {'-]'}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x64, 0x0, 0x33, 0x34, 0x31, 0x38, 0x34], 0x2d, [0x64, 0x64, 0x30, 0x56], 0x2d, [0x33, 0x63, 0x62, 0x64], 0x2d, [0x34, 0x64, 0xf, 0x62], 0x2d, [0x39, 0x65, 0x32, 0x34, 0x63, 0x35, 0x34, 0x3a834aeac508faf0]}}}, {@subj_user={'subj_user', 0x3d, 'n{$'}}, {@subj_role}, {@smackfshat}, {@subj_user={'subj_user', 0x3d, '}-.+'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%{#(*-'}}]}) openat(r0, &(0x7f0000000480)='./file0\x00', 0x60602, 0x141) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 19:38:54 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:38:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:38:54 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0xc) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x80) 19:38:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) io_uring_enter(r4, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r7, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r8, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f00000000c0)=r8, 0x1) close(r0) 19:38:54 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1200000000000000, 0x0, 0x0) 19:38:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f00000000c0)) 19:38:54 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x10, 0xfffffffd) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000540)=[{&(0x7f00000005c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x7fffffff}, {&(0x7f0000000680)="88001c0000000000001c00080000000008007809140b2a3a08020000010000010102", 0x22, 0xe000}], 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getdents64(r0, &(0x7f0000000140)=""/162, 0xa2) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 19:38:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) fcntl$lock(r5, 0x5, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x5f}) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f6607063c7e45e1b16aae23696c65302000202f7b2f347b2d297d240a11e5d4a726a154ed436204be45984c9280e8682c8b9c32a3ced91e2f1b9a216528cdad31bbab17e1812927420b370821e23624a924d6e9860533184a0f461a39446f44d769210573889135cf35f8404c539c81956853456e98331918614c29acbbf407005ae3b5696962f5b59551384cfbc3a8a63d210dc0509c749c63c7280221e92e473d74003ca3a0f02ece4dbe1b91af05ea5c1beb86ffd79e1e9cc2c4e2ecc30554f3982a9f9f9b6b040997991f92c265c176ae83b0ea4d2659660577b186638c266538465d7a0175bf82ed9b8eaff99cc80b23a2e975643be11a2ed14291ef45c2643378"], 0x104) 19:38:54 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x111000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x80) setxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)='(*\x00', 0x3, 0x2) 19:38:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:38:57 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2000000000000000, 0x0, 0x0) 19:38:57 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8) open(&(0x7f0000000080)='./file0\x00', 0x4003, 0x107) 19:38:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d6, 0xa36e, 0x1, &(0x7f00000000c0)={[0x8000]}, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:38:57 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:38:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:38:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xfc, 0x2, 0x81, 0x76, 0x0, 0x57, 0xa701, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x0, @perf_config_ext={0x1000, 0x80000001}, 0x80, 0x9, 0xc1d4, 0x0, 0x4, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0xb, r4, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x3, 0x1, 0x3, 0x9a, 0x0, 0x7fffffff, 0x98, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x258, 0x101, 0x9, 0x3, 0x6, 0x2, 0x9, 0x0, 0x4, 0x0, 0x1000}, 0x0, 0x2, 0xffffffffffffffff, 0x3) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:38:57 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2500000000000000, 0x0, 0x0) 19:38:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) fcntl$lock(r3, 0x6, &(0x7f00000000c0)={0x0, 0x4, 0x6}) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:38:57 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2e00000000000000, 0x0, 0x0) 19:38:58 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x4, 0xffffffff}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=@ethernet={0x6, @multicast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="52dcb5c81917eb0b36c221744231c053855e5d161016c3e99ed234e7", 0x1c}, {&(0x7f0000001680)="3bb6a9015bf9b7e6b3f205b5bcf405062f28060d9b99fa0ea71ec6c11735a7f17cd398795c33bd70a142ee5f7b6ccebd7cdc1a248874dbdce194ce66cd3eb349c2f52734ecb3ffe877f0872c4e427d74ddf78ff91c906eb4061c2e01eee995a232db87b3e50e30fe43bbe1da24df3194fdc385da84f916d5030c229c2d1496672136e1b90f7b580517c9c2bb44ae7a125d3aba546472d021364bae96768480776ac746deb2fbe17d6dcc26f93f183aea475b8c7360c3c80caa83320e5b344304fcd1276185959a03bef906e4d582570c4bd23db30d8f644cb102c5c0771f2d10a46cefe847341b3df4714cb2c1863c87959d4b9c78b9255f643d91b7223872efadd80b3225c52c29f7e949a83fe40360addb2bc108df372f0c607963a038c8f2aca805dd58823974cbadaece3138b56f258e4cdeb113d3c4c14c9d529608e5730e6d64337e6864937fce6cddca2152432ce5328caa570d4f21ab", 0x15a}], 0x2}, 0x0, 0x200000c4, 0x1}, 0x0) r4 = syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(r5, r2, &(0x7f0000000380)=@IORING_OP_NOP={0x0, 0x3}, 0x6) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000680)=""/4095, 0xfff}, {&(0x7f0000000180)=""/108, 0x6c}], 0x3, 0xd9f, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x52) mmap(&(0x7f00000e6000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) close(r0) io_uring_enter(0xffffffffffffffff, 0xffffff81, 0xa313, 0x2, &(0x7f0000000300)={[0xff]}, 0x8) 19:38:58 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:00 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4100000000000000, 0x0, 0x0) 19:39:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:00 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x820, &(0x7f0000000200)={'trans=virtio,', {[{@cache_none}, {@mmap}], [{@smackfsroot}, {@smackfsfloor={'smackfsfloor', 0x3d, '.:\'-^@'}}, {@smackfsroot={'smackfsroot', 0x3d, '\'^\xfd\xfd'}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x3a}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0xe, 0x35, 0x31, 0x61, 0x35, 0x37, 0x32], 0x2d, [0x3e, 0x37, 0x37, 0x64], 0x2d, [0x62, 0x64, 0x65, 0x39], 0x2d, [0x34, 0x39, 0x65, 0x31], 0x2d, [0x32, 0x35, 0x30, 0x30, 0x6b, 0x64, 0x35, 0x35]}}}]}}) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00') 19:39:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_io_uring_setup(0x2deb, &(0x7f00000003c0)={0x0, 0x4c20, 0x10, 0x3, 0x49, 0x0, r2}, &(0x7f0000408000/0x1000)=nil, &(0x7f00003b2000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x10}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) close(r0) io_uring_enter(r8, 0x1b34, 0x3d41, 0x1, &(0x7f00000000c0)={[0xf5]}, 0x8) 19:39:00 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0x3]}, &(0x7f0000000180), &(0x7f00000002c0)={0x0, 0x3938700}, 0x8) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) flock(r4, 0x0) 19:39:00 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1044002, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '\'(,\xe8{)%{]['}}, {@mmap}, {@cachetag={'cachetag', 0x3d, '['}}, {@loose}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@subj_type}, {@hash}, {@fowner_eq={'fowner', 0x3d, r4}}, {@seclabel}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfsdef}, {@pcr={'pcr', 0x3d, 0x31}}]}}) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 19:39:00 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4800000000000000, 0x0, 0x0) 19:39:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0xfffffffffffffed3, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x1000) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r0, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r1) 19:39:01 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4c00000000000000, 0x0, 0x0) 19:39:01 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x12, r3, 0x80001000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:39:03 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x6d11, &(0x7f0000000180)={0x0, 0xc89e, 0x0, 0x0, 0x5f, 0x0, r0}, &(0x7f00006f7000/0x1000)=nil, &(0x7f000053f000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)=0x0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x6, 0x0, {0x0, r3}, 0x7, 0x3, 0x1, {0x0, 0x0, r6}}, 0x6) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) vmsplice(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)="fef697a379a0616c8becf5fbc8ed40117605a79f0e810a3f531238c653369212e230182a267797b42cf1b238f6b0cf847454a11d", 0x34}, {&(0x7f0000000380)="cf58bab15754a41f412591785da9313b96c935bede5a556dc46352ec40d82ffc55213228adbeca59c579639dd5b730e661b7aa2df850aa453f11dd901be2cfe172cfde46a556282001747a78bf555444a23a0c00bc109fb47cd653c7a07cb77341145a7862ee59c120d65713620a405a1846f48798a42d6b3fd16811bed69f7170183aba7cfce5cccc70b1b606161fe97bc4251cf077ae3e2f61d5d3d06cfb5251993c9f2983c41d3b5ceacd995085b6442bb637", 0xb4}, {&(0x7f0000000440)="70d5faa062a5c5a39e6ba6a586a4936f50fd22eb2daeb4e23c41f71381841540f7b59bcea15fdeea3492d981bd05d484680000fb2811af092b74044487e78d4f3eae15a6b43f9926354bca62ca75d0bb467cbe2155f0e9e8bbe6a8b953e4ad16c182556b30854f393d295f6a7829df5f19b5ca15c1", 0x75}], 0x3, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) close(r0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'veth0_to_batadv\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000540)=""/96, 0x60}, {&(0x7f0000000680)=""/151, 0x97}, {&(0x7f00000005c0)}], 0x3, 0x2, 0x70) 19:39:03 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x6800000000000000, 0x0, 0x0) 19:39:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000029c0)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x3502, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000200)=""/43, &(0x7f0000000240)=0x2b) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @rc={0x1f, @any, 0x6e}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, @in={0x2, 0x4e23, @remote}, 0x1369, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='virt_wifi0\x00', 0x5, 0x1f, 0xfff}) mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) r2 = accept4$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x1c, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xd45}, 0x1c) socketpair(0x1d, 0x3, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() tkill(r5, 0x34) sendmsg$netlink(r3, &(0x7f0000002980)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0xc, &(0x7f0000002940)=[{&(0x7f0000002ac0)={0x212c, 0x34, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@generic="518ebf0def0b23d80744386f1041b5afcbe2d4e271c84c4d96ffe0f864a10dd9adf4d94ffbd19f6f12d26241d0de802353708316ccc887cf96af2a027b2b713ece93fb61591c9c3d08fabe6d4169fb4d82fb43f7b14c48", @nested={0x20bb, 0x4b, 0x0, 0x1, [@generic="9caee7622fc4a5258aa243f468afe407b775ffee03b1b7573a0ab3603ef482c43333a5281629df60953943d323827ea4f4a77efb2c22f3fd3d08070fe9872018865d7e80411570c7d6144ac9c8c1111d167b06ef908c4f8eca5e210455d8bc5435d4af36cce8a3b2d0ccbde65f9d454ac5db1d0af28c08418cf7e36da99e3b9830dbed0136c6f9d9cbf0387de1a7c280bed51efc4282d7", @generic="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", @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x1004, 0x3d, 0x0, 0x0, @binary="c87653db3552820b1afde574881b6536b96e9b004a6d83d7ff3a116ed445f48887dccc1437097bdf661a52dfc9bcd11c3deefd99fc24c543665fe966593da62259533ac7d9e9f99d80942a5d250e0e5b37ff5642f59401bab8171964d9c96a167e3aa06b710e4b71784f26827270ff483ec4ed30d3783af1d5cc1504ff2c550b76781b4495a5707871bd44b16af5138c09c9c45dad020f6ccf81e8d85e9960f1142061708cf084ad02c9d93676782a3f3ef202f766ebfe521d06feb3782807f43a73c75086c12bf874f14054c900a8abdb5e8a5701b4109338a6e087cd5ced9158e09098f7b2e96a1c239449d94144fd3254d63c8ec8d57f9ef33f2cf48784a7072549f75390492aaff1d880d2b22fc317c4a8882687b5b8c689b26f44cae4881064350b05704f3baee1063c8f7f38310b3b1ceccefe0296fb4e6173e1985ffd573aee459d56d8062fc25046556465b40693610565558b76da330428f30373e85adcea7eb545e621047dd7562b81155658f5c2ab1e6650fe009984f6abaced405fa200a3045fb69d9439e1f96e3e958b0dad35022af5d0c7feb9de5c1d9eee370730c9fda21da3e03970f911c6f025d9e59bd335c23a678f2eb9c969429149f543475268dc9e7f5721b295d595cbfa31aa69064659ccd52a413278e616c93c88779d8ebb8f83f6e192dbbf615368e39e5eefd0743bf4d240af3810414d04bfc93bb54415dec2b36d6aaf75cdbe6458d8573785e4a81397cfbb7b497a6e909b5b4543d538e72fbfdcb28d51aaecf827a2228a4af8beb40a01c9afbde1eff88b9485f956025660919dc8c894a166ce6bba1d7bf2e03ae75fb2bca61e1bf4925b2d2b596e9658e760a573c0a78d43593a2c57f5dc35ec381ce55c15ecab9b200a9d322509f9b59945b61952794eb37cc92a2e5d3bfcc7caa31cfd7da03a371461efde48740eec2493515c2917046b2bf926365d73be92a3d75cf753d4d3da3106a413860745440dabdfdf553b3cd941da87b9307826e1168f552336b69402ead770a9c6ad9becca4446e785e3e2db2a5546513bfa3bbe9eefc6627ab41dfab45af8bfc0605c65c0a1d40a896e87b97843fdbc3eadab01dd15d1746963edf5c658924c1e870ba5d30c0bc0fbcf137a173c76b9d09bd7ecf8c3f88293151e07da8a7f83b32241aba81e27245ef9972234f5bde85b35e4cb2bdf309007f58928ea7572e06673457184110ea49427f0cd235572f1d4e2951e0d9f272e252feb5728e24b908c01e2a63b74cac663527b2bd45115d84e11d7f8b83040047bc55ae7127a20651da2d852a0d1d3df4dc4f59f9cc96782404ed963779b6e8561510b08de14540321dc280378c5dcd9cfa90054ef875e99d63225ac950cab79634ce6e8c7823929b9d47d8598b3238f043024d39876e41edec8d891bd924300c6e20080ca625d761a389d59617e29365c8b7b0d208d409493f62397cc4fd08dd3f3b119026d87450fa68949803437830a3ff8b8eff802fb5265e1d77afe4d3e38e2e6dcb79fb414488b2a5ae3da55d441f46987ea79e96f53285d357de8ce5f359f469ce1fe31732d7014a77f994adf05d4b4ed80c3cca9654a1b590953cc89ed0e9581687e9bb6c70ccac5dee951b480cf1ce47fca05d6db85bf96b13c3e7a84454274b669d70e2e5167388a55f809991c2c2952cc979b57fdddc0b2538d79fd68b988fac9f5c1f1d6a6c1c41c0e2e2cee9464420a6b49df57c8611f5e21f1c67b45205e8dba84a2d0e8bff24b26fef2b2ff62b2f2b19764b59c4829b5b0a12f3f68393487552d93edb5fc240fee6c17ca4d2c7af098bbead9cb4130bd767c0b2f65ac13c4a1c79cd83b3042ac2e25c810cdf3f38927b8bd3688a0d8d6586d399f41e38f60a2c8a9ed51ab1cc1e5d3211bbd1132fdf1ef0e8349c949aa3ccf885eef1de1e338a9d0b08d1ed752f258cebd59bfdfdfbb6f21d972f2bd500eb442f2ca7b45130feb3171efef651513c8590189acbdde386b529ef9c289d76be4ca9ed7f76efe4db8f81c3067b5d8619c731c67776a74523344131d9318bae600ff2344179fc5adfd0e9d6f61d2c1f722a0ed35dcdd6dbbc9a387f5b361eb4b345e1846bc478e9bf84ac2fe03d6ea25854441a61972736609967ac8a0f03350a1c44d9a12dcd357ce393d083c19fc94fe6625de04029c0a957b6d512d98929450bd22d22b40cef3ba9713dc43060c9745250c845534725d78f9c285d03dee259271aff895752db3e08c3bbc2053fc655d9e5e72d95a737f8191817e0e3d60c1abb5229c887390740b28acdcab4872e1985b036c0fab2178cba0f347596da7e0c64b7fd65c2c6724cb16ab22f227f4d418f33baaba73480e615012486aedb2534baa3fde404c71f380f77cf9dc9ddeabadd93325c170576ea1e05652ae4f8437963cbab849769ce77fa359ba9d2c639aecd4b310c5da6b6f12482af678b49f4ae531356e9e5b782482d56d4cd49db3a0cb047afcc5874c64767d0958af401464a9ca86b65d824a82945afdb253f6e93ceabdf076eddf736fafcc17febb8fa77692661fadd8cef85dfc6c212e164aa7c0c03e52871536ac18d3115f74fca228fe5ec16b2de2e2eef70048e182771b63ec17457111ab8726c417962983e5d6049e949c0697a661afa0126e477ea31e2cccd976024e16780c4b5ee5f4ed0d69beefecc8c0b080d34ce914a3db248a059ccda9d61973c9e6531fe1019f4bfbc87f620eb7341f3a1a1610b74fa2be652cd28574666851103d3d61010440454286d9ae340cc85007a5a8013f516d74290142dc065495799829310b0858164b77ed3a17ddde9f2e55d8e957a18338195b8ec767a4e6bae22c7d93e47620ce30d5ab09986b6adb716bc4d5055d93ae710e87a2b0d7c632fd20d1d47dc7a87891ca0ddde93c0d020715b28c717e4c3b78d07c86c916809cfc8b4589c1018362d5900295db1fd9840fcea3d2a4629610634be7c7ad429f67849f5648f78d7a118272aa6c05b065df83ee7edff4fe559f659de26b0305ba7a0b9a426b451c7fc0741635b27c8afc482e8ee56cc6e271c237f41a000415f84c16e4f331c5e2d628ab61782a2e3e58cfaee8f79934ac1dbdbf9ef82edc006c290e79ae9a97a239ceb0fcc5ee7e3b9602f0c4a0b2498aaee1ec8eb567720a3778d8fb291d73a23298c7e2d1e10828852af2a5ff4dfc22b47b09726bc2530a198959a29de74ba8b4cca2060ee11312e4c4fb2f9e7013dbf319abcdb456b6719e909de1c23376e5b3e55dc192bf39ec917e7c73bcb95421206215bd2ea7c9beef1dc8e181229fb9a843b42d6fc76bfb4cee3b5704690b966fd0367243a361e099d54a961b0849226ceebfa45f4c7178c956c407ead9dd528a2c64785be757c3a1dbcc6262ed8ec115535af44458fd6a256753da92a068b23daed6bebdf673bbdc845d653bfd40d842e6beda1c195ec580252ff9d2ea310ec458a0c7c5644274b0697a360fbbb1cbd5a0a396a396c3790704d06f294fac06e9b771cf2892c7f43de51969d0eb102e7e9bee554ca5543bcae7f8ac481231177d5622cc7e9e8adf41f8f4d8f91f2ffec1ff76d2f2cdd00a3f38c474b8ae9f9a4a7232cfd994567a7b35d5396d0072181c395c32a7638bc23aef97428ac472c753280f5e036ec58d820b16a5a5c8c2ad376cda03f84585a85d1e73a0cbd9c323f2c19f42f5d76b52b52f1bb8ebe8df2c65a0a5e27cdb0ecbbb0b400f6c2066dcd0ddfd4747102337aac67696dc67a085cb1cf77255452364c5a8f17fefd36bdbfc8e23d77b0e6f7d0621f2986354a2eb14133ed85399154c40ec530137df60d6e8a531a6a2ca5cfe2d05c58641c977ab1f47cb4b33cb15a8533458f81503ba066a3a3d8501a69c7df4139f12db6f6b2cc65dcda681a51cc43d6c74ffd697ce82f0b690095651ba4d88e1ccebdd0df5084029b89bf7addde2aef0e1eb722ecb4cbc819e6f00cfce3c344db2720e4f51d868fb6ef8bd57cfed7d6cfa75ebb68b20f908c7129a1a6dc23b13eac160fd66a5601a0ae0400c974bb774b015f2a2eb762940df46c54b4f9e31b7c01187168177f094c7ad2308e95016b15eb928fec3d246106e5a39324cad5b59ec0342e2061ac22e9e8f0780fcb5b6263a334f3188c1e8e0da251a1f0413828d8a73a18f8d131eb0bb929ee709bb6c4179f6026fea11bb4b85817bb579af218a826e0a8001ccc5a74a91f214422554f10caf5f1f1c02d884bf27328b8eb6832097bae5a4c4d05ac52f82defe11c1e547ed31b34321a8da9c1c8b9df460f9489bd1affd176f1068af91ac22b4163b73b7da9ed60f1cba61e0f07eff3a218d4c2826f0a723f9a0ec5f174105c348d64104bddbc1bb553a8fdaca978a854c0dd296d5cb61fbe50abce75d13b8ee5538aa34bf33d49214e3fb83e7897ecaebd844ac4caa3421a0ac75a012d11496568ed6f62b78c027b1cbe92264a0427a826485ebeacbba9a16df0ba34216bec4f5879cf39c77c7b4aa5942d28ca2fecc0e7fc0cccbdffb11dfbf2ec2e4d26b9fc76231f62e554c65b27fd4bef3b06a0a39bfeb87fa64dfe29c4fb2612d025d8a8035ba6299ee8e705dd2aac2ef91a1164cececcb88e91700a4e71ed0f6156c56ef535f75a0868e507fc15e7e9dab904d7c18e3d7e05185552e36bb19746f24b240a0e59b9d098e5ded57b69a5533777eb34340383d1c684dbb3c012c2b244a15e275c1a4213bf4622a64db2ae518e8a2403ceae017984b2ce71b985d804b3ca64a8a794696ac62307dd6c04cf1b364723cdd1976209d41c99a550cb41ede365bad9ac92697bfd8006e5c2e130f12a1e2d28adc88683ac811ff1ac6581a21f8116700d08061d58245bb10e7d2b6dd302b86309a87b4fc742e590b744db2ccaf9518c5f371e2be81e78708000d08aa1eba3df919f107b66bcddca2149c6c16b9535b50704a412263a2b4e36020bb6634aa37dc8ea765dcd1958a20004952f6129ecc021327ffd71a9fc18dc8f8f61134716972e1e9e842151c649e721a113c929a09e85a5ccee2c07066ea82419bf0259d62612b670aa789902ab3ff012c4747b9a408354ce89d3b844f94c0c1535eafd8cb6696585f06dfb932852a0bacc317fa642584d712cadb6dd5c2b8b4e81e3f9d9f92254bf693c3d140e68652f913687badaf95f415f6ac5d83fb36fd331e1958e9f9c3ef163fe2d1a15abc465515d6eab9138e996429f51e4b8ff490f0a5a7451e3996a64bc3d1684f77f845e66ecc8664316559ba898e8912558e5bd631979b6e5d71401b16e02294fca812df1c40744913ef456ac7dd1d99c6c5793cae913cb8e13c5a16fbbd7a82c087a337792a2a31d3d02a1e2d907beecdf28dec51c3201d8ccedf07fbe8f95fef4faccb61b0fcd39a690f3e35a7c89c385c65cb7b47cc59f47054c1aec45dc0194baf44f87aa5d21cc4c4569918e763d576ee92ce5e93a691d4be36ff9de06c6d64b7d6c0b49f2c2adb37dfee575f7a9003c7b63d10931247fd6428971f0aa391dc2d240dd1803e842ec35484f0b129f781db8570921cbfeee8d3107d436799842761217d33fbceaa9ee42b0ba10d357c84a15f3eb71626a3f3a631b055dc3ae3ed75dc2c4cf1d098802d53adf44e3e10c3e9f84be108647ea785f7fc5228de1f0aad3a0d8c4435378309fff3174e7fc20fb72580ff13ff269c577f33d8dc375f1ee09a35bff83c89619e2f9841788a6a933d8067a5b15bcc5a8527925bea87621aa45a9be7dbe611feb19d88e27002"}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@local}]}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@remote}]}, 0x212c}, {&(0x7f00000004c0)={0x2f8, 0x23, 0x100, 0x70bd2a, 0x25dffbff, "", [@generic, @nested={0xc0, 0x60, 0x0, 0x1, [@generic, @typed={0x8, 0x17, 0x0, 0x0, @pid=r5}, @generic="7eed8ceef778651eda220e66b8f9547f5a0bfdadee5f8dbcfc153f95175c75d993f41a9e22d1465f62885deb4713c5c63053103655047193a1753d63e483e1ff137438344d9f970d040020dc459cbf4f05073a4923c8702b1de7b79bd598c26e7e6a8a26a8272f94784ea51fb3ef6c2aa8f4bee8c7ca4d96aa53eac59469f28285410d00401aaf0ae91071109c2ddedf52cfc2d8b406cbf2794ed004ba4e626f3a66a9ca6cab42b76d425471b5eeb621", @typed={0x4, 0x8f}]}, @generic="24b7d8b16065e994dabb655f", @generic="9fc3382ecdf6fd", @generic="a99729c674b0bf9190bd5fe1a68fce8d55398cb0cd97a43082f30cffb81cd7455272e086cfacb6e4b8bb0d8f9a7fb1ef23ecc7616bca4067220345faef04c4a2028e3203645ee8e57d785e7070d8283b5231ef131fb6c06be0a317a19f0d0516fa3ae818fcf31a8d8c5edf657faced0a1bafe8303975dc523b095fe153e28fb57bb3176a4e854dc152034ef0037d15af8929b11c985cf5b11fcf8773a7558c5ba3f9679155198489c68d88752dce01705ac675f042823b", @generic="7c8b737860600ac8315418d7533c77a8586773c2833141c6511291a6c9a978cfe1a8c13b1d8119c399e82c05cb136515d14f796812b3938dde98322fa3", @nested={0x1c, 0x4d, 0x0, 0x1, [@typed={0xb, 0xd3, 0x0, 0x0, @binary="ff264a2e909c88"}, @typed={0x8, 0x10, 0x0, 0x0, @uid=0xee00}, @typed={0x4, 0x63}]}, @generic="6870f7129f7ca4ae223d635c369b7c39c8f2049549bd12e355c7708b0001205616c8412968783d90e379475b11f61f671013a82947a5b9f02fcd21763bdb5840e125b9d1b97698d865b0275173a71a12e3c6b1091cdbe226c3feb5e8d1d1039189e8be7651b4a661f5d2fb152433f65a9496ec1d300180366c41616321389b4c6cfa806e9c1fd7fb89801cf16bf79e20551ef290fca1ae81a7263c3dc25af548c43f41076bc29b8fd91a896c0f87a18eed44f2789fb31f7e1ae36ad01fb2e8a2795c5ef989dae99ce5612b59ee0e11f684b1a0fe1a67c0819df0f86b379e391ee56dc43d7ba0492c3bb708d11bb8", @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@remote}]}, 0x2f8}], 0x2, 0x0, 0x0, 0x8010}, 0x1) tkill(r5, 0x8) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x38}, 0x20}, 0x1c) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x7c9183, 0x18) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000280)=@fragment={0x1d, 0x0, 0x80, 0x0, 0x0, 0x9, 0x64}, 0x8) 19:39:03 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:03 executing program 4: mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x6) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) 19:39:03 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0xbb47, 0x8}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340)={0x0, 0x1, 0x2, 0x0, 0x20000000}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r3], 0x6}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r10 = epoll_create(0x200) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x2, 0x11, 0x0, {0x0, r9, r10}}, 0x3) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r11, 0x0) close(r0) 19:39:03 executing program 4: mknod(&(0x7f0000000000)='./file0\x00', 0xc8460913cf590c35, 0x80004) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 19:39:03 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x6c00000000000000, 0x0, 0x0) 19:39:03 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) close(0xffffffffffffffff) 19:39:03 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) close(0xffffffffffffffff) 19:39:03 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) close(0xffffffffffffffff) 19:39:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) 19:39:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 19:39:04 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x7400000000000000, 0x0, 0x0) 19:39:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:06 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 19:39:06 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x7a00000000000000, 0x0, 0x0) 19:39:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r5 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r7) syz_io_uring_submit(r1, r2, &(0x7f0000001a40)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=@can, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/172, 0xac}], 0x1}, 0x0, 0x40010023, 0x1, {0xa6, r7}}, 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r9, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, &(0x7f00000003c0)=""/252, 0xfc}, 0x6}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000001780)=[{&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000680)=""/162, 0xa2}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/26, 0x1a}], 0x4}, 0x1f}], 0x2, 0x10000, &(0x7f0000001840)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) close(r0) 19:39:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 19:39:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) 19:39:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) 19:39:06 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x7e30000000000000, 0x0, 0x0) 19:39:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) 19:39:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 19:39:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:09 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) 19:39:09 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x9a06000000000000, 0x0, 0x0) 19:39:09 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:09 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x5e40, 0x4, 0x0, 0x15d}, &(0x7f0000682000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:39:09 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:09 executing program 3: r0 = syz_io_uring_setup(0x188, &(0x7f0000000240)={0x0, 0x2, 0x20, 0x2000003, 0x80000}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x5b1, &(0x7f0000000180)={0x0, 0x2b19, 0x2, 0x0, 0x2dc}, &(0x7f000039c000/0x3000)=nil, &(0x7f00000f1000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000037f000/0x1000)=nil, 0x1000, 0xa, 0x1}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000380)='oom_score_adj\x00') writev(r6, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) close(r0) 19:39:09 executing program 4: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:09 executing program 4: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:09 executing program 4: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:09 executing program 4: r0 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:10 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:10 executing program 4: r0 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:10 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f00000002c0)=""/80, 0x50}], 0x3, 0xd9e, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) socketpair(0x11, 0x0, 0xfff, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="f8a06e53eb55a6d3f3ffffffff703fecab1b6f61886af3158875f60881cd393ffe41b5ec8e25c7884994369d67ee67e3cc8b35c003d53a3e57d923e5969a702e9c487a60142536d418ce5bf88d83a692d7d041476a6676483c2186dcc106dcfa76fe0988e4a9f7253f6821b3705c12dbbee070", @ANYRES16=r8, @ANYBLOB="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"], 0x418}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x1ac, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "382efac8ccb1942ffccb8c5708ebdcd1b23fc5ec17b9"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "3cb7661168e2d7fd00225f4e9c74dc2168c7eacc5bdeaf998ec94b7fb303"}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd43c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa6, 0x3, "8087415d4c1736ad41f9fa520651e0a2e5da819a8a0c3b108db5e301268ac04afb24c0a5532d3afd26d810d5d72daca2e4fbc1d7fe089f905bcd2a0b353c6c284d1dc84ad26f8f73ebfaa358abf4fe329ff4d4cfa64b5cf98a455b1ac5328caa4314fb7f6077d49db75cf990014ee7e569d707f8035745a8b8618f26d36a5e693d23385be506b157cf76a942f7592237ab8af68ddee4c9ca210891e911b29c8bf276"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000004}, 0x8081) close(r0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') statx(r9, &(0x7f0000000340)='./file0\x00', 0x4000, 0x200, &(0x7f00000004c0)) 19:39:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:10 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xa1ffffffffffffff, 0x0, 0x0) 19:39:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:10 executing program 4: r0 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:10 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xeffdffff00000000, 0x0, 0x0) 19:39:10 executing program 4: r0 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:10 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000240)={0x0, 0xffffffff, 0x24, 0x0, 0x0, 0x0, r0}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r1) 19:39:10 executing program 4: r0 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:10 executing program 3: setrlimit(0x9, &(0x7f00000000c0)={0x0, 0x93}) r0 = syz_io_uring_setup(0x5144, &(0x7f0000000240)={0x0, 0xffffffdd, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000025a000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x200000, 0x20, 0x1}, 0x18) syz_io_uring_setup(0x613, &(0x7f00000002c0)={0x0, 0x2ae5, 0x9, 0x80000000, 0x36a, 0x0, r3}, &(0x7f0000401000/0xd000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x6c02, &(0x7f00000003c0)={0x0, 0xfcd1, 0x1, 0x1, 0x163, 0x0, r5}, &(0x7f0000445000/0x1000)=nil, &(0x7f000071f000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) io_uring_enter(r6, 0x410b, 0xd5f5, 0x1, &(0x7f00000004c0)={[0x6]}, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:11 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3f00, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:11 executing program 4: r0 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d3ce1d4dbb574cb332f5a48121ed641f67874014af3efbf3b4cc1cdb122702d504373227f71c5917e8fc3ecc0e51bc668d64bcc85e06e6ee850065972", 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f00000001c0)=0x2, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:39:11 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:11 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 19:39:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:11 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000002c0)) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$incfs_size(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=0x3ff, 0x8, 0x3) r5 = openat(r4, &(0x7f0000000300)='./file0\x00', 0x220000, 0xc0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r7, 0x0) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file0/file0\x00', 0x8, 0x3, &(0x7f0000000540)=[{&(0x7f00000003c0)="040218bc03c8133ce070f16f586a0532fd7d163edbf65994534cf3ab528abb3a0f75f3908b99a56e7491fd2a15d9f3d6166dee2e938a5df73f68227f5e491d37638d4986c1943d2a7d", 0x49, 0x1000}, {&(0x7f0000000680)="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", 0x1000, 0x7}, {&(0x7f0000000440)="e290d3c5089c15a388795c94492c878d28f2f8fbeebea66e1d7cd40876a8df00864724bf7d928eaaef7ab475b3a171db4d7919a035a0acb93b17817c8a90a8f0d5b840aef309d9da7d1b9ae7683c8935ed59e47928b126d1d68d2ec55536fd2756bd973ed61c1d47cebea6b803288ba222fd88c9f1751a7a52fb2240277966f7fd578491ed37b2e1ca5553beb3a8422f10e3037ff65d13e86115df786f4a6ad2d8f2d55b3d75496202dc2e8b35b100a450a8fe62c2138220f17dc55eeed8da015f1547ddc48ac37dff656ac80f9c31d55f19588e3276", 0xd6, 0x80000001}], 0x300082, &(0x7f0000001680)={[{@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffaf3}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\'-3\x95[^(\\\xfd]%%@'}}, {@appraise_type}, {@measure}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', r7}}]}) 19:39:11 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:11 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:11 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:11 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf5ffffffffffffff, 0x0, 0x0) 19:39:11 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:11 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xfeffffff00000000, 0x0, 0x0) 19:39:11 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800000aad5, 0x0) 19:39:12 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) [ 1442.647850][ T1916] loop3: detected capacity change from 0 to 264192 19:39:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:14 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xff8f000000000000, 0x0, 0x0) 19:39:14 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xeffd, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:14 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840dc5ff52ca2f4392d025d3c860d5a4d81a687b19cc03c97e0b394b360f59d", 0x3c, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x140, 0x0, {0x3}}, 0x9) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r10, 0x0) close(r0) 19:39:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800000aad5, 0x0) 19:39:14 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:14 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:14 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r3, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_enter(r3, 0x2ae1, 0xa9b3, 0x3, &(0x7f00000000c0)={[0xffff]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) 19:39:14 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffffffff00000000, 0x0, 0x0) 19:39:14 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d70b38aa064651732eee9cdd1f0f840", 0x1e, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:15 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r7, &(0x7f0000000180)={0x0, 0x8, 0x2}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffffffff) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r9, 0x0) close(r0) 19:39:15 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffffffffffffffa1, 0x0, 0x0) 19:39:15 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfcfd, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800000aad5, 0x0) 19:39:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:15 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xfffffffffffffff5, 0x0, 0x0) 19:39:15 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffffffffffffffff, 0x0, 0x0) 19:39:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:15 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2) 19:39:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff0927ce14ddd55d", 0xf, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:16 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:16 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) close(r0) 19:39:16 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3) 19:39:16 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdef, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800000aad5, 0x0) 19:39:16 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800000aad5, 0x0) 19:39:16 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800000aad5, 0x0) 19:39:16 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac70d4f1aaf7b6ff", 0x8, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:16 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800000aad5, 0x0) 19:39:16 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) r4 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r6) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000180)='./file0\x00', 0x10, 0x1000, 0x1, {0x0, r6}}, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r9, 0x0) close(r0) 19:39:16 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:17 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800000aad5, 0x0) 19:39:17 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:17 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) 19:39:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) io_uring_enter(r0, 0x680f, 0xf9a0, 0x0, &(0x7f00000002c0), 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) dup(r4) getpeername$unix(r2, &(0x7f0000000180), &(0x7f00000000c0)=0x6e) close(r0) 19:39:17 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdfc, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:17 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:17 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800000aad5, 0x0) 19:39:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:39:17 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:17 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:20 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:20 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5) 19:39:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x11c, &(0x7f0000000140)=0x307c, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x3000c035) close(r0) syz_io_uring_setup(0x734b, &(0x7f00000003c0)={0x0, 0x7eef, 0x4, 0x0, 0x310, 0x0, r7}, &(0x7f00000d0000/0x4000)=nil, &(0x7f0000115000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x100) 19:39:20 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdfe, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:20 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:20 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x6) 19:39:20 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7) 19:39:21 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8) 19:39:21 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x9) 19:39:23 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa) 19:39:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:23 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdff, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:23 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000680)=""/4096, &(0x7f00000000c0)=0x1000) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) recvmsg(r3, &(0x7f0000003700)={&(0x7f00000002c0)=@vsock, 0x80, &(0x7f0000002680)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/20, 0x14}, {&(0x7f00000005c0)=""/120, 0x78}], 0x6, &(0x7f0000002700)=""/4096, 0x1000}, 0x2) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:23 executing program 4: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x800000000000000, 0x0, 0x0) 19:39:23 executing program 4: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x200000000000000, 0x0, 0x0) 19:39:23 executing program 4: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf, 0x0, 0x0) 19:39:23 executing program 4 (fault-call:1 fault-nth:0): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r0, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x7, &(0x7f00000000c0)=[{0x1, 0xd656}, {0x234, 0xfff8}, {0x4, 0x1}, {0x0, 0x7}, {0x9, 0x8001}, {0x0, 0x5}, {0x8, 0x5}]}) r1 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r1) 19:39:23 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:23 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb) 19:39:23 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x2, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:26 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:26 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:26 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc) 19:39:26 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfe00, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:26 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:26 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x5, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:26 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x4, 0xfffffffe, 0x91}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x2021}], 0x1, 0xfffffff9) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) 19:39:26 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x6, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:26 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd) 19:39:26 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x7, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:29 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x8, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:29 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe) 19:39:29 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfefd, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7012, &(0x7f0000000180)={0x0, 0x40b9, 0x10, 0x1, 0x197, 0x0, r0}, &(0x7f0000080000/0x5000)=nil, &(0x7f000078d000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r6 = open$dir(&(0x7f0000000400)='./file0\x00', 0x200000, 0xb) r7 = io_uring_setup(0x2ba6, &(0x7f0000000100)={0x0, 0xf5b1, 0x10}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) r8 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r6, &(0x7f0000000440)={0x0, 0x48, 0x1d}, &(0x7f0000000480)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r9}}, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r10, 0x0) close(r0) 19:39:29 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x9, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$unix(r3, &(0x7f0000000180), &(0x7f00000000c0)=0x6e, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f00000002c0), &(0x7f0000000300)={'L-', 0x1}, 0x16, 0x2) close(r0) 19:39:29 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xa, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:29 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) r7 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x9) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r9, 0x0) close(r0) 19:39:29 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf) 19:39:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:32 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xc, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3cf0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:39:32 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x10) 19:39:32 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffd, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:32 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xd, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:32 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xe, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:32 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xf, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x1010, r0, 0x0) syz_io_uring_setup(0x4279, &(0x7f0000000180)={0x0, 0x3845, 0x1, 0x3, 0x1f6, 0x0, r0}, &(0x7f00006c0000/0x4000)=nil, &(0x7f00001a9000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd_index=0x9, 0x55, &(0x7f0000000300)="a9409900bf25a91c0ef481bdb3b514608aaac8da519ea253dbe2aa4d597a5a5dbc7355ff6b5d46044c8ef72267d457908b26c088c650291b60982f118c806ea1bb000b008fd60ea7a120594b09164968483adf3fba38f4edd808311da6ec33220c8972f138da31853f4fd1d2acff94a87bca12582071df3ae69553a11fae014805cdadd18aeda1b735ae75e024456fdb7e4e8db8ba81cbd40e734952dd5b2bb46b612240055e8571fd1788ace69ad898bcc0b6a80ec1f63524a508945296f78d1ff1de563db187bf5f44fbefd414d9986024460053bff716e80c18dd2428d14730a6e948fd88359aac9567acf8aefe6a8f0e77aae972ad09", 0xf8, 0x1e}, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:32 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x11) 19:39:32 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x10, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:35 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:35 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x12) 19:39:35 executing program 3: r0 = syz_io_uring_setup(0x2af, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x1, 0x80}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="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", 0x1000, 0xc40bf7238652f3a0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_setup(0x2ba6, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x1}, 0x10000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) 19:39:35 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0ff7f, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:35 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x12, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:35 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x13, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:35 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x14, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:35 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x15, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:35 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x0, 0x148) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) 19:39:35 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x18, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:38 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x25) 19:39:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:38 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x19, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:38 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfeffff, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:38 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0xfffffffe, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000047c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="7800800000000001000000040000000000650000082f9078ac1414aaac1414aa890b870a0101020a010101830b39ac1e0001e00000020000"]}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@broadcast, 0x4000, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x6e) recvmmsg(r7, &(0x7f0000004640)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3, &(0x7f0000001680)=""/55, 0x37}, 0x81}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f00000017c0)=""/86, 0x56}], 0x2, &(0x7f0000001880)=""/214, 0xd6}, 0x9}, {{&(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)=""/46, 0x2e}, {&(0x7f0000001a40)=""/158, 0x9e}, {&(0x7f0000001b00)=""/53, 0x35}], 0x3}}, {{&(0x7f0000001b80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001c00)=""/13, 0xd}, {&(0x7f0000001c40)=""/121, 0x79}, {&(0x7f0000001cc0)=""/167, 0xa7}, {&(0x7f0000001d80)=""/160, 0xa0}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/85, 0x55}, {&(0x7f0000002ec0)=""/141, 0x8d}, {&(0x7f0000002f80)=""/155, 0x9b}, {&(0x7f0000003040)=""/227, 0xe3}], 0x9, &(0x7f0000003200)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004200)=""/247, 0xf7}, {&(0x7f0000004300)=""/7, 0x7}, {&(0x7f0000004340)=""/40, 0x28}, {&(0x7f0000004380)=""/78, 0x4e}, {&(0x7f0000004400)=""/202, 0xca}, {&(0x7f0000004500)=""/184, 0xb8}], 0x6}, 0x1}], 0x5, 0x40012043, &(0x7f0000004780)) 19:39:38 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1a, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:38 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1b, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:38 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1c, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:38 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r5, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_enter(r5, 0x5f86, 0x82d4, 0x0, &(0x7f00000000c0)={[0x7fff]}, 0x8) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) 19:39:38 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1d, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:38 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2e) 19:39:39 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x2) 19:39:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540)={'syz0'}, 0x4) 19:39:41 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r3, 0x80, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, {0x0, r7}}, 0x20) r8 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r9, 0x0) close(r0) 19:39:41 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x3) 19:39:41 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:41 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x41) 19:39:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:41 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4) 19:39:41 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5) 19:39:41 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6) 19:39:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r0, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) r1 = syz_io_uring_setup(0x18b, &(0x7f0000000180)={0x0, 0xb93d, 0x6, 0x2, 0x8, 0x0, r0}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x2000000) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) write$binfmt_misc(r4, &(0x7f0000000240)={'syz1', "a1f8a387d06bf8283495645178be1f71aa73e1dbfe887b16565baf71a6768fb441325a27827181d74091f01b92fe5f8348be537856e590aafea4d3638b91e3"}, 0x43) close(r1) 19:39:41 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7) 19:39:41 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x3b7f, 0x2}, &(0x7f0000682000/0x1000)=nil, &(0x7f0000578000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:39:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) 19:39:44 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x48) 19:39:44 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8) 19:39:44 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) io_uring_enter(r0, 0x458, 0xd449, 0x2, &(0x7f0000000340)={[0xfffffffffffffffa]}, 0x8) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) mmap(&(0x7f000051c000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r5, 0x77e63000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r7, &(0x7f0000001380)=[{0x0}, {&(0x7f00000000c0)='-', 0x1}], 0x2) syz_io_uring_setup(0x3690, &(0x7f0000000180)={0x0, 0x244e, 0x2, 0x0, 0x2bd, 0x0, r7}, &(0x7f0000267000/0x4000)=nil, &(0x7f00005fe000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000002c0)) close(r0) 19:39:44 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:44 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x9) 19:39:44 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xa) 19:39:44 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xb) 19:39:44 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername(r4, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) connect(r5, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x1, @random="b3a00f63bda2", 'veth1_to_team\x00'}}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) 19:39:44 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xc) 19:39:45 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4c) 19:39:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) 19:39:47 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xd) 19:39:47 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f000003b000/0x4000)=nil, 0x4000, 0x6, 0x100010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x114, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'geneve1\x00', &(0x7f00000000c0)=@ethtool_ts_info}) close(r0) 19:39:47 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x68) 19:39:47 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3000000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:47 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:47 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xe) 19:39:47 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10) 19:39:47 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x11) 19:39:48 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x6c) 19:39:48 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x12) 19:39:48 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x48) 19:39:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) 19:39:48 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4c) 19:39:48 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x74) 19:39:48 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:48 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x6fe5, &(0x7f0000000180)={0x0, 0xcedd, 0x4, 0x1, 0x128, 0x0, r0}, &(0x7f0000224000/0x1000)=nil, &(0x7f00004f8000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) fchmod(r5, 0x120) preadv(r4, &(0x7f0000000280), 0x0, 0xd9f, 0x80000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f00000000c0)={0x0, 0xfffffffffffffff7, 0x614}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:48 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x68) 19:39:48 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6c) 19:39:48 executing program 3: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)={0x8001, 0x1, 0x7, 0xffffffff, 0x5, [{0x10000, 0x400, 0x3f, '\x00', 0x8}, {0x8, 0x20, 0x6, '\x00', 0x1880}, {0x200, 0x0, 0x1, '\x00', 0x260a}, {0xd68, 0x7, 0x6}, {0x1, 0x0, 0x12f, '\x00', 0x2200}]}) r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) syz_io_uring_setup(0x31da, &(0x7f0000000180)={0x0, 0x490f, 0x20, 0x4, 0x333}, &(0x7f0000396000/0x4000)=nil, &(0x7f0000694000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)) r7 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) r8 = io_uring_setup(0x2ba6, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x40}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9) syz_io_uring_submit(r6, r2, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2007, @fd_index=0xa, 0x3, 0xffffffffffffaf77, 0x9, 0x0, 0x1, {0x0, r9}}, 0x6) close(r0) 19:39:48 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x74) 19:39:48 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7a) 19:39:48 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7a) 19:39:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:51 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x300) 19:39:51 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7fffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r6, 0x0) close(r0) 19:39:51 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa1) 19:39:51 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10000000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:51 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x9, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:51 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x500) 19:39:51 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x9, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:51 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x600) 19:39:51 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x9, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:39:51 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x700) 19:39:51 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:52 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:52 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x403) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:52 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x900) 19:39:52 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf0) 19:39:52 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:52 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3f000000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:52 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xa00) 19:39:52 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xb00) 19:39:52 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r6 = geteuid() r7 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x1, 0x68182) getresuid(&(0x7f0000000600), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) sendmsg$unix(r5, &(0x7f0000000840)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000002c0)="1bfb1bfefe0706ac377079a224535e5b419db11293d522cff9b61dcd0b44d32673d36befce218689e89d75348b44a4ed9cc700c514f5bbcc881952057ac06495fb902155eb72b5265f043d91755de0b42740bb17d9a97804e98cc61f03a35bfba588332ba2b6224ba8a73c470a32a97bbcf0ae4c94a2c560074a7f3eca7a88126baed861af4b24229b2674f1343e4b60d604b7f101260e00d72010be03190e14e913c7a3c1fce3aea6c20bb91f73101def45b51a4b5637651d56f37a75f8549e2cb3b0c725a83caf49cedf08c7ebcf693288f68b1a8bcf191bc4", 0xda}], 0x1, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x18, 0x1, 0x1, [r3, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r7, r5, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}], 0x128, 0x40000}, 0x20040000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00000df000/0x1000)=nil, 0x1000, 0x0, 0x2010, r10, 0x973c8000) close(r0) 19:39:52 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) close(r0) 19:39:52 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xc00) 19:39:52 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5) 19:39:53 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:53 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xd00) 19:39:53 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) 19:39:53 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300) 19:39:53 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x40000000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:53 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xe00) 19:39:53 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1100) 19:39:53 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) 19:39:53 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00001d4000/0x1000)=nil, 0x1000, 0x3000000, 0x2010, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd=r3, 0x80000001, 0x0, 0x0, 0x0, 0x1, {0x8001, r7}}, 0x97) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) close(r0) 19:39:53 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x500) 19:39:53 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1200) 19:39:53 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) 19:39:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:54 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4800) 19:39:54 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) 19:39:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r3 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) r4 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="5957bb957d66d362c0d68d72a01069297e5aec329d16c6f40bf8afc85dc960560d0a544643884cbbdc4dfc9e59423d307f57fcc2ed566fada588ffc6c39c48d963a7d165dcc14c6e2f27f11047", 0x4d, 0x1, 0x1, {0x0, r5}}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r8, 0x0) close(r0) 19:39:54 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x600) 19:39:54 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7ffff000, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:54 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4c00) 19:39:54 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6800) 19:39:54 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:54 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6c00) 19:39:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) mmap(&(0x7f00005fd000/0x1000)=nil, 0x1000, 0x1, 0x50, r6, 0xa2aa000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x6, 0x810, r7, 0x5d3c8000) 19:39:54 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x69a) 19:39:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:55 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7400) 19:39:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:55 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:39:55 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x700) 19:39:55 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xeffdffff, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:55 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7a00) 19:39:55 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfeffff) 19:39:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) close(r0) 19:39:55 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1000000) 19:39:55 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x900) 19:39:55 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x2000000) 19:39:56 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) close(r0) 19:39:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x7771, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_setup(0x7760, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x9b}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}}, 0x4) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x20000000}, 0xff) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r10, 0x0) close(r0) 19:39:56 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa00) 19:39:56 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x3000000) 19:39:56 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfcfdffff, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:56 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4000000) 19:39:56 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) close(r0) 19:39:56 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x5000000) 19:39:56 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) close(r0) 19:39:56 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6000000) 19:39:56 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb00) 19:39:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:57 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7000000) 19:39:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:57 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc00) 19:39:57 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfefdffff, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:57 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8000000) 19:39:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8e02, 0x0) io_uring_enter(r6, 0x238e, 0x2ddd, 0x3, &(0x7f0000000180)={[0x8]}, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:39:57 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x9000000) 19:39:57 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd00) 19:39:57 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xa000000) 19:39:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:57 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xb000000) 19:39:57 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe00) 19:39:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) close(r0) 19:39:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:57 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffdffff, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:57 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xc000000) 19:39:58 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xd000000) 19:39:58 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) close(r0) 19:39:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:58 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xe000000) 19:39:58 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00) 19:39:58 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:58 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000) 19:39:58 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) close(r0) 19:39:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:58 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1100) 19:39:58 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffdef, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:58 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x11000000) 19:39:58 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x12000000) 19:39:58 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 19:39:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:58 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x48000000) 19:39:59 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1200) 19:39:59 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:39:59 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4c000000) 19:39:59 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 19:39:59 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:39:59 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 19:39:59 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffdfc, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:39:59 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x68000000) 19:39:59 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6c000000) 19:39:59 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 19:39:59 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2500) 19:39:59 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x74000000) 19:39:59 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7a000000) 19:40:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) close(r0) 19:40:00 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2e00) 19:40:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:00 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfeffffff) 19:40:00 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffdfe, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:00 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffe00) 19:40:00 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffe) 19:40:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) close(r0) 19:40:00 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x307e) 19:40:00 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfeffff00000000) 19:40:00 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x100000000000000) 19:40:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a78", 0x18, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:01 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) close(r0) 19:40:01 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4100) 19:40:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:01 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x200000000000000) 19:40:01 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffdff, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:01 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x300000000000000) 19:40:01 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4800) 19:40:01 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x400000000000000) 19:40:01 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) close(r0) 19:40:01 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x500000000000000) 19:40:01 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4c00) 19:40:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f", 0x1a, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:02 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x600000000000000) 19:40:02 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) close(r0) 19:40:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:02 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x6800) 19:40:02 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffe00, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:02 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x700000000000000) 19:40:02 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x2, 0x9b0dbfcf06baf3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) close(r0) 19:40:02 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x800000000000000) 19:40:02 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:02 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x900000000000000) 19:40:02 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f", 0x1a, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:03 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xa00000000000000) 19:40:03 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x6c00) 19:40:03 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:03 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xffffffff, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:03 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xb00000000000000) 19:40:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:03 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xc00000000000000) 19:40:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:03 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xd00000000000000) 19:40:03 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7400) 19:40:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xe00000000000000) 19:40:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:04 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7a00) 19:40:04 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:04 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f", 0x1a, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1000000000000000) 19:40:04 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1100000000000000) 19:40:04 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7e30) 19:40:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1200000000000000) 19:40:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4800000000000000) 19:40:04 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8fff) 19:40:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4c00000000000000) 19:40:04 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6800000000000000) 19:40:05 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:05 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:05 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x9a06) 19:40:05 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6c00000000000000) 19:40:05 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:05 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:05 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7400000000000000) 19:40:05 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7a00000000000000) 19:40:05 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa1ff) 19:40:05 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfeffffff00000000) 19:40:05 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="16c59923ddb7cd676e72004d", 0xc, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x0) add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)="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", 0x1000, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:05 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf000) 19:40:05 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r0 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="0109", 0x2, 0xfffffffffffffffc) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r2, &(0x7f0000001680)=[{&(0x7f0000000280)="bf14890631a567c28443552ff2844532ebeec71e63b830a0f8c92a94aa", 0x1d}, {&(0x7f0000000340)="3e22e8ef4c793f66c7846ffeaa1003e60ee99563730b0d0803c20c9e999060da64335ba1f313587d8f72e807bd8c2a81fa3e7a3c98f2032d075752cf87a41d846d123ffc0e7ae58150b3f9b6a5adbd508cefc80754ec960eab157fe6798c0233c7523e747ccb54fc053da9728722b1f2ebb9a581d298b98f72756345a724452bcc6e715e55e91c08973ecd9a165b8219f589813894dc8ff3e47e628dd25b31", 0x9f}, {&(0x7f0000000400)="d24361e7466cc6c61be5989f83b68bd0671fbf1fec0e1e46ed5de9d9e4a57df300460dce52bec431b6db63b77c53fbf6b5b5a79f3ac0acdfaa4be0a6e45cff69f58eb59cf8ded5659f74d833c5be3cbf29ae0834298f0beb645b659ed4997c7d9575e07901c6d853c1ac218959dadae201f8b9e8c6337c219c6e1dce9a4b8fcbb92aa8add2c5bd9d470fad05d5c5463eb5baa21e9c5255bbbe5d7c6616ca67ad234098a00e3d0d7a774e35dbc4f071c3b83d89644747965b76eb5a981ade217473f4873e948076a0a5fa2d452065b26beab649e9b635e2de27d97778", 0xdc}, {&(0x7f00000005c0)="8432f93c4e60278fe779cd3de6e440757e9ed487a62fc2516f1904cbe436c1f745cb7168565ad76e8196d4201d953ab353901a8bd06eee0fc539dd29c98d467ff7fad96310194f8239d83a361ec8eb69c0b730102b6181c78722105c11c3fd2ae6280c25", 0x64}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="e4a8a2fcaa1b65a1fd9505a392786611d664b85cf701e6cb2119cb1d9ce64a80d58793424acdd2b26566c014a8b874b1bd596885d2cedd870a17aa52", 0x3c}], 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@posixacl}, {@loose}, {@version_L}, {@privport}]}}) keyctl$chown(0x4, r0, 0xffffffffffffffff, r1) 19:40:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:06 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:06 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ff) 19:40:06 executing program 4: r0 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)='syz\x12w\x00\xd5\xdf\x1d[g+F\x16\x87\xc3\xf0\xcd\xc8g;\x98\x8d\x8b\xf8\xdf\xef{qn\xd8t\xb9M\xa3\xad\xfe\xdc\xee\x11x#$\x1e\x1a\xda\x14\x94\t\x90\xa1\xfc\xebI\x16:\xfd4\n6p8\xcf\x12\x9c5\xday\v\xf2\xf93\x1f\x97W$z3\xc5\x1aF\xd4R\xff\x86\x89\xaf\f\xc1^7\xac\x87\xa3\x9f\x10}\xc7\xa6.\xf2\xce[.\x0f+D/O\xc7\x1c_\xc9\x93\xdb\x93h\xc1Q\xc1\xd9\xd3\xee\x00'/137, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)={0x0, 0x0, @b}, 0x48, r1) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100)="ac8c0d254eba5769f8c32783fcb1c7d016789fb2a3536f17430c1f185d2b934d5da3d33bebbd9805c7c51588db5ed34041ef5607d5121298ebf5781ba3b40c582a488fb5e08341ed70dfb4495d6c", 0xfffffff1, r0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='user\x00', r3) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:06 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:06 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\\\'$\xc2\x00', 0xfffffffffffffff9) 19:40:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:06 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff8f) 19:40:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r2 = request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\xde)\\{%\x93$/#+%:\'#$\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000300)={0x0, "e218b70f5bcc1133822386890bb3bab3643787d63432611ac24014c715680baedff06758cd234912e7e76a8c2421f134db7fccf59292f960155b5a72af5f07a3", 0x20}, 0x48, r2) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) clone(0x800500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 19:40:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r0) 19:40:06 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) [ 1496.399785][ T3422] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1496.431335][ T3424] 9pnet_virtio: no channels available for device 127.0.0.1 19:40:06 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:06 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffa1) 19:40:06 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r0) 19:40:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:07 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$read(0xb, r1, &(0x7f0000000000)=""/23, 0x17) 19:40:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r0) 19:40:07 executing program 0: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) 19:40:07 executing program 4: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000009, 0x10010, 0xffffffffffffffff, 0x2b71b000) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1, 0xfffffffe, 0xffff1f1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) 19:40:07 executing program 0: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) 19:40:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:07 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000000)="aa00f955a98fa1004eeaeab14f96", 0xe, 0xfffffffffffffffe) 19:40:07 executing program 0: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) 19:40:07 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:07 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfff5) 19:40:07 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:07 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="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", 0x1000, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000001c0)="26ccdff4ba6ddb21096d269e60a22ee3fca2b36ff6d2081731a2c6ab565f9bf117d87d6a8522d85738a693cb39fbf67544059f9c900ec2cfa623d4c0969d063034f3e9f98dc1d90def6dc92801784923751fc2a1ae98c8cf4d2dbd8aa0fa1f8830f6b183ca1917581e72c408e40684787e3cb9955bb0c07abea61163a3204e5eb4b55e0c5cf1a3d6758db259511f9aba4ba1822a4d4cfadc1400de61d458d36ac591", 0xa2, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="cdaae048", 0x4, r1) 19:40:07 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:07 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x100000) 19:40:08 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:08 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$chown(0x4, r0, 0xee00, 0xee00) 19:40:08 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:08 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$instantiate(0xc, r0, &(0x7f0000000040)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '%\\', 0x20, 0x521}, 0x2d, 0xfffffffffffffff9) 19:40:08 executing program 0: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:08 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x17f, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:08 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)=')+\x00', 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:08 executing program 0: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:08 executing program 4: ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000000)='geneve0\x00') r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:08 executing program 0: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:08 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x800000) 19:40:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:08 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:08 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:08 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$restrict_keyring(0x1d, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='syz') r1 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)='user\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffff8, 0x0) 19:40:08 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='V\x02\x00', r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$chown(0x4, r1, 0xee00, 0xee00) 19:40:09 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00000) 19:40:09 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\']+\x00', 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:09 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)='-\x00') keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='.request_key_auth\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0xfffffffffffffffa, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)='{[(\'$@\x00', r2) 19:40:09 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1000000) 19:40:09 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='user\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:09 executing program 4: sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4080) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:09 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1000c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x1) 19:40:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:09 executing program 3: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) close(0xffffffffffffffff) 19:40:09 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000) 19:40:09 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffff, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:09 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="401594ad02af03086ab7c33e574295787852abeb556db7d575d6e89ba4d6093b5a8b62d647fa8ef10217011d73bd1f832576b983fdbf06dccc79da6e7b9e361b48d72963fb5eff8cab574b31aeea65a5ec083f520d70cb634ef9e797c1ad25e3cec79b5230be99ea6515281e15a6407dd9e776da7c60175a26c6b4578e4bbfb4d27ca5db74df1396bb0c0c8fbd7142b785bea857a971abf7b59665a3d32476a501856840e0db11d395c8748d99dba0167e9f9a", 0xb3, 0xfffffffffffffffa) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='{\x00', r1) add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="c2f4c01108215e669a332ab5e876f45faa518fa7811d59cb9f09b1c20b105045e0fbdc67343dcf45cd50e6dd2f36f7b99db844f8648b96cbf1a3", 0x3a, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000380)=0x1, 0x4) 19:40:09 executing program 3: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) close(0xffffffffffffffff) 19:40:09 executing program 3: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) close(0xffffffffffffffff) 19:40:09 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:09 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:10 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:10 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:10 executing program 3: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:10 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:10 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3000000) 19:40:10 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000002c0)="ac", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) getgroups(0x7, &(0x7f0000000140)=[0xffffffffffffffff, 0xee01, 0x0, 0xee01, 0x0, 0xffffffffffffffff, 0x0]) keyctl$chown(0x4, r1, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000080)='syzkaller\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r1}) 19:40:10 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:10 executing program 3: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:10 executing program 4: add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="a666fa960ac15b4df43c3ae8868b7fbb600fff1b29ed31162ef78f36e1c1142ae35e212107e0c7a1b84a1b0a16fbda5de5b44904ce62b7ebf05e9a4f87a5bdb5139b5ee40098b75cb2dc35d32f5669b24839f26ad418443ee2c5e587a6bb", 0x5e, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000240)=@secondary) r1 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='asymmetric\x00', r0) r2 = request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='keyring\x00', r1) request_key(&(0x7f00000004c0)='pkcs7_test\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='\x00', 0xfffffffffffffffa) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000000)='@', 0x1, r2) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "9bc052e0104581928ff959a7d9349eed04df625af844b16b1522eb3ded1b8fe42611c13ab28049660693f572c25b6c489392944c371552d69c54c991be980266", 0x24}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:10 executing program 3: r0 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:10 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:10 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)={0x2, 0x0, @c}, 0x29, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "5ecb63d6561a899370fe80d94e7a4b2af93fc2caef853f4d086f081ef00da0bf788d0f44956976fd22e70a0829de5bceaa2580cc593c310e6754f77228955b18", 0x3b}, 0x48, r0) r4 = request_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='fscrypt-provisioning\x00', r1) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f6f1ac95697a17184add45c496901fe3e76586eecd74d227a3", 0x19, r4) keyctl$update(0x2, r5, &(0x7f00000004c0)="8c687cb0e1a6499de719a311f0485d5211a40d35ff14e7e5e00bcb8df3d1263a6219f1edddbd21ef04659e3303a798fc15afc899ee9d97d7513101e7910ef26cc9f3f12f83bdf1315ad7b282e81d3ad00787a2ac55128e8c24924c5144c785be3cc3d29684dd96204ae3395f3e6a4f", 0x6f) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r6, 0x0) 19:40:10 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4000000) 19:40:11 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:11 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='syz', 0xffffffffffffffff) 19:40:11 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5000000) 19:40:11 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:11 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$read(0xb, r1, &(0x7f00000001c0)=""/203, 0xcb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:11 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000140)={0x0, ""/233}, 0xf1, 0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0xffffffffa0008000, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, &(0x7f0000000140)={0x0, ""/233}, 0xf1, 0x0, 0x0) msgsnd(r1, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r1, 0x0, 0x0, 0xffffffffa0008000, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgsnd(r1, &(0x7f0000000040)={0x777e9315904f}, 0x8, 0x0) msgrcv(r1, 0x0, 0xfffffffffffffc89, 0x2, 0x2000) msgsnd(r0, &(0x7f0000000040)={0x777e9315904f}, 0x8, 0x0) msgsnd(r0, &(0x7f00000001c0)={0x0, "0472e4a9d649545e8845dc292c76ae0279be1d3b4d848842b3e7ff11c09e77c778d24ff6f224a00e87d5bf6c2ad86e6b95fd5cbace5ed069ab4b86429e051e03a7ea0df3bce3125220f0d673a1e946c0cbfe654ebf880dd63d34eac6ff35908761b79a18e75e6624ada6646d48408351fd99212258894d64bc66df0f08c6edcc3f18fcf96aeee6a79192c5e2b1e62dce2e211f995cc87115381ea577df368e4d958cbc78d7e66907c64e8641691cf504291419c878bb3049f29025fd0a12768db5390fec0fda8ba4fc2930068fb163768c"}, 0xd9, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="03", 0x1, r2) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) msgget$private(0x0, 0x40) 19:40:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:11 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x6000000) 19:40:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:12 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7000000) 19:40:12 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:12 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8000000) 19:40:12 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x9000000) 19:40:12 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r3, r3, r3]) keyctl$chown(0x4, r1, r2, r3) 19:40:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, 0xee01, r3) 19:40:12 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000000)="ac", 0x1, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x1) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)=')\'@^@^[{:%\x00', r1) 19:40:13 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa000000) 19:40:13 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:13 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r3, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:13 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='.&!&%\x00', 0xfffffffffffffffc) r1 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)={0x0, 0x0, @auto=[0x2c]}, 0x9, 0x0) keyctl$chown(0x4, r1, 0xee01, 0x0) 19:40:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:13 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='user\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:13 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb000000) 19:40:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:13 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, &(0x7f00000002c0)="ac", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:13 executing program 4: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x4002, 0x40) signalfd4(r0, &(0x7f0000000140)={[0xec]}, 0x8, 0x80400) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='&/!)\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0xfffffffffffffffe, 0x0) 19:40:13 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x10, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:14 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc000000) 19:40:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:14 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="ac", 0x1, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r5 = request_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='syz', r2) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r6, 0x0) 19:40:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r0, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="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", 0x186, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:14 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd000000) 19:40:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:14 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:14 executing program 4: writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)="4b5e0b231149051fe90f1eb560d64547767329210d26b4e528e312ca1b657e758a65e3e5dc2f662fb0c2bbff13b0e17e7c499e7ccdd028e5b022e93535479b09ae84c62fe047b152658a7162383cd837b20350aacb87ff29494fb9144f4638a366af35a4b3341e45f39ce6a57abc7f8615601c24bd0734f7d155f8c892fb0b59113dc2971bd81f0ad181663f1a4f6cc6d7d87f3c92a90c7b4e7ae9a94b76ca45798bf991", 0xa4}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0x1, 0x5, 0x1, 0x6, 0x400, 0x5}) add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "5919dcce96e6ce3ca7de9d718cd329030199631651d573b0c00fcde356bdef773f543fac2cace2a644c98a8f9db0b29524df6f0d8c09e852fea9f27ee3a5cae8", 0x30}, 0x48, 0xfffffffffffffffc) add_key(&(0x7f0000000540)='ceph\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="3e52d565e6f76a1ca43f05b2b2cffe1e1505e5ce7016220ee5d2ea69ab8d84589c10c7c95b8afa897f5c6b045111785fb67846c60539150cb4d1f0aeef66795f755363c7f4935d2ca42d973d188db1c7d882ce598835864687c6b97cf086dffb597a47a4dbde1a8b0a187108e548f121921f3e2063d636ff6d90dee115c5ef53c81773526555bc6f821338acbf5bd7584235b24e5e8393007d221b0daedcbbd9a07b6d1ad7e2219d0f6d8f087d797119b79b59b7d4f6c89aa018ec398e406fa77a7342a88b5053d36cad633b569dd00300fde28585b81430228b992fd50a172442a8da17b0b2babcda4d", 0xea, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="551c62f7c6981c7d265d70531ca32bd141282f95c7d013b57835d96e72daf132ef0d5ec3af21eda4bbeaa83c42edee8584b44308", 0x34, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r0, 0x1) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='-{^\b\x00', 0xfffffffffffffffa) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/199, 0xc7}], 0x3, 0xffffffff, 0x6151) 19:40:14 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfe, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:14 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe000000) 19:40:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)="315bbf15379ffcf364eba9209e64de3c7c9180f1009e6ef922ed2c61edfa38ce45addb583052c77ce949362de066392a84fbfa4b307590045b049675d8fa46144fc7dbbed84271d7c1830b7c645a741d6c0880367fd3c38d215aaebefbb37e33ee9f552f02cbddd57a27edb8a85a6f23b110f0e0b3a2ea3a5634c02444347ddcd558441a007a7b61d7356ab587f352f13f", 0x91, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:15 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:15 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf000000) 19:40:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:15 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:15 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x10000000) 19:40:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000080)='m', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffb, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:15 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) 19:40:15 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x300, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:15 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x11000000) 19:40:15 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "befebc546d1ad876b800fb44b60ee2e35df057f75c57776acce568421f3025da67b88d4e93edef66cc18c2877a3eeba38e11e12e4f19bfa3208a10c6dd2b1789", 0x11}, 0x48, 0xfffffffffffffff8) r1 = add_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)="12177537aabe0e85c0a03caf8f9ebc317122c1a927883c7fe76520418eedad8986f8c8b9806445a07ec4eaa23591e9cf6a76e5ce204b772223e46ea3c4524eeaf98f7ccf76f297c82f2a5be51e593c83949eed3d18f82e8e7edd801313a7aa22bcc8e969b20b94cba50c80293de5508f8a051cb830f3335423cce045d9603f7107bedaf2d6f7efc390731ec40267d78157267d6d16884d5a7b5dae09f6df3699aeb6e9a4486a58d6ad35020593002cb138a578cad1b9b460c780a7b1eb8cd170454583daa9e6318bcbdd9458d97e93d44a207286bf8ba4ea1a44126ef175603fafd450e3f0408ead81bd28dfc249039096c83dd03ccc72f7dfd2204347b9f3a2c78ccab9d326f8b33f60cc4bc85b57061707715b7d1673e6cf11770322969d91dfb2738ce9414aecb574a2cef38db27f85a438c0829507dd06066dac0c7a5d0ac3471c5fafbb08072279f3a2d3058313b73b18b9a4203c3f05b92a7c3f9f9e1a36fcb28491a7cec6188ee48e4ec0f5ec37adf9290316a1a32bbb69edd743483fff66a68542abac318dedd1d36d543a817464f9255dad833315f93c1b94b62930f8aa5f1348ef1bb0a734eb57330c6832f3090baaa8b2057db95adc331fbe81a0396968ba2078171e1bc3cf33364f0b16113107b1f6fa1bf792319fcc449dd188026d3ed7df4f262b6d6eaef7f74727892310c322a2eefde21b9b959f98c3444747a4ab202e2c236a5436498b0f2c2236c2f7b1a5208cb347462d4f3217e11ddf8155f314e98ff8a136e9d11a23aca6636f0bc9fc9c3bc420f43c309ff74cea6dad9040583a698904284fdadb02b1c8823947b430cf988f13dbff7ab29d2f8c952b2d72c278b2a6fcdf4268ba1bfcd0103df8a6d90dcd27b52b38cf737bfb497be4ff66798e49b72067165e9f7fc013b3b6e435c7d0bacecf15fc919525bb3f3310f1337017f475b25d70de5b74d03abecee5e8770c767d9a8d2748feffdd2e25fbdc73bdb53c7dab893a8319186f4d0ca5552199ae53cd3aeafb09a99376c112d4eb24dda9e5bdab6bb1f6a1341c1e28ae7fda545f2ca9a2891c77a4d72de1d6400cb40b8dfac5ab171da029a0c4747dedc06f7cdae38debebfbe83418e19c687b46d25b8b51177f24db8528b1aab568fff4dcb2a08d7912e64858c39084ec5638bfefba3d2ae945de1c1cf2e8fbdd8136eb617c25ac6168d748932295f5548f0e04008857c84bcf73a84b430ef536a39d9c88f0d9eb99750e57458b51b88eb0c3b0848f1a57badc29ce06c3012e7acf1f1dc0e90f9626bd27d5c36a19dccbd6fad344e582d9c1f049099e659ba9cff66f28abd79153347b6b88ed1efb13eb71ba8169791fda3d952972b596bff4ca66d2f40677d457dfa966f3275a5d60af4c734cdb64455a855b27bcce76fecef73677ce11818a2c19d3a5a8cc8a585d4c16d20e9322437bdd51d77474aab03f60d4e04bb75dbd92787f05f450c0e72265ade6567a8ff5f101a8aeba2f1e8423f7ad9a82f7c855a749aab1c4a7c9c68333b7d53ecbbc02c7b9e780953f4f0bb80d0f67fce292a93b0d04e073bcb5b52d422426e10c8fa94917b59f20d3a24eb72c1787c0a921140a0f92fcc2db62252bd5b7f990b1717fd18dd05fdf726938f81cfdbc8cad21cbde78ae195a6dfe10ec9b285f5f75fa52989b4e0d02b0c51ce15e041eaf04147d12ed9df0c4bc3c94273efa24e2eb238a374f13bdd442081acb232869605a7747469069cef8e53191086fae65396d95c08b7747bfc492a61b70146531a913ab1e132a9b57b852f4323d020727aa3f287600df76438403405b921c1bfbbb859f99c1156b781f737388df655cb053096d993b3d01b9880d692f342e0b0307ef28e3c32beba3b764c3944636cc99be5fa1ad1353b45ba765dbe5e4ace237af932be8ac694203f739177dec8e4e1c1c076f8c6ee62522819d5d7a2aaa30e5955ee672363402b18755eb84eb1fa75e5a1b35732c8a346d82eb8c0ddb93d5abd64351fff8e37418b7a302ed244e54bcab47eb4bb42456cb364c56f9ed6dd213c0dc9aa7b4017297a12445bb71716d091f385bdcc9e260453b07ca32cacbdb97acd2c40f23ad5d6a025f94c1a97ce6d9eef075cf0123b938d4bce65f0cd78ecb26237d2be6499e1d832fab83e6470f39768e9585df0374a4f61ded9d01347130d282d07caa7b4bff31a2fe544603d79c6534a579d7563fdd2eb5326752453850b7caddc479e4a4f4e0e36bcadf81a157de6c3483691f52a8722e63918c7cad9baa3feacec6e6f85c2832bd3932fa7ff0cbd2d7a6c6fd40b778a1ea56dec06f99d479c50104edec197341847fdfd891875f2554d874dfe2bde0a6da0f7b99b92a552271ddbdd63bf8144bb1104193681376924519b9e063095807aebafb34b5519e3df02659b805ca87eb02843c1194b31f5085e3bf69a1936b4472fde789f92db3414d66ec5bdf23209e2df60781c46c481e52959df40d3ddc6b978cdda63873860fbb5347af3c13a6d2ccd2fb3437ee40217616c63557a0cd494c8de1eb66bf3d8a0ca8727df4386133b115dcfc58531bf60d08cbbd3820423abdca776f6c38f7dc7beb0a412437c25f473bd600ab72be4c8b693cc1a4698787fedbde45b34b6a8a8a47ae04770bfa6760a09493a458dad3b5eaad3d2a7c60698d4f554ef63a766a6c98bc31755f2beb29cabc3a71c2a24112013f06a67426dc71b9adeadb99768808180460839a21a43a20454733788af7d084307132e35ef03196bc23ca18a7a17bf182fbe45b426f859a484950d2590eca5f0d7edb8667e4652d2f6cf72a1206c2bc17c11b28e957c85e1d8fe75348e8b579f021c9610fadac088add2c9aaf991e4b79110cc5e1de59bcdb3263e3ba725b6f779d7a7360fcccba40cd47f8cadbc92a1739ccf8c51304bdfe4ef586f79867d58ad2c230402b657be0b8930426e00631b529283b80d6fc66465e485b286cac7d0fc379f9f4a9bf541365ccd2953b7871b3dbde2898330ae523ee7e29da000f6a4b22a96d28e70562d505c476daab4f5f65f93d5c1f5fbdd4532dea5c6e1be444effb0fa4155e527b10f48b288d7f058ce6e3fb875791a6503b4f42ba05ab0b72375608f6c98435c69df3e2ddb774c5976b29ce5b151b2963913b1495eb7e4741eec3b35cfc2dc6635bb8e2244b1e0fcf4cf9974ec8eb644505c0f3564f66de369bfa7efccec36643f7d7b93d75bac572502c1adeacc0bded9bf2f1a22cf5b2d72bdd1a65cc8f9955f091830221aa99b5287d68025e638108ccd481674850be8894b9cd373c3711ec46f77ca8c744fe543169f6e3ce6d226dfca524db237876a325c26704a71862d90d7ed2cf6be4c0f32d4bd720ccc17bbb884b540df30b513fa60a7bac71e4c0ecd18aadbbb4e6a881e7405a0aa1dafde25e2d59e06ce7b41b1d9e197f96dd293544c065e139ea07ee861433d1035d99297cbb66497519e9414d8a4d820f566d8596ee9bad448ff3ba76ae62025d2a25c95a414bbdb16d5e72d495a62fc5a36b7fb187758a00581604736423de4726f7829dcc7b84665e204fd5f36ebe2b39a51130e0596adf587ee2961e94a0a009e3ac8b2a4f4334453ef6e4820f78cede577910660b9843a7e635d30f385dd5512ae29e4163dc10ec09a6330403cfe7c490b075c3fe936d0b0cd649afe1b68e05962f7b2d4ac5917cbdef75faca05907a75ac4a293fd47541c3f0b4328748e301d43d0c70628c41c7543891a8be381d987bbc89d0431ee8bc356978730341c075a2be3bc610a4531cbc3354a9709b360655de9af23280c07218694445da9a55924470948c1b8e4ee56816b2000d287ac3b1ad8f488efb85ed8a9c1c2cb2e6b5193c9173141875ad53fa3fdc201c8aea638cfacf1eb7256900ccc46c11f1c58e8278beac9ce4e4a6e59c05008208393c9aa2087728f508046bea0633d17bc650d28ae061729b5e15ebcab5399e145e25d6d0819f6e0807b7f9dcaa1fb2de2493f742e8b525fcf7168be9d5f9866b358a9cb5859a8165aefb20bb56a0cb53cbbb4b09967068194ef94b41a8d0c8acb079f5488d06356ac07f57ee0e1b8fd877c64e67119f3bcb6cc92818efcdce9754d87d56c4ce90738437da7c7db5f9aa1d9c9ea147900a378b6ea744c92345aa4078d162e8b6b76fd7e95270ee9c4a8d3f0858735283bfcd55f937163d2cac4a81b2b76c51ef665b86720ed995628a20dae9f67e3af9e3568106d72c31a798d824ca75060e1b20cfcd5b56d5e17f372abd65e745eb2829ff240d1d1bea62869088a3b8b8bc7e117e1dcfaed4231933540c96d6c41fc4dd726a22edad389080538a1dbe5820cefc1fdfee08a540649ba172884aa02bc2ea2cb974166cb13fc5e2a3c8ff77f4702aaffc4f2c905c391d64b35b821e52521506cc0c1b6f914a0f897e05605d3976cad3f8a6782ed8c665684cb95da1d4b855789e05bd4dd3902b07a7551dc87877aad30f14b05eebfe052b6da6025ff405316d83704181af81b8c992e12d4e160a8f9ea4967b7d8e7904fc39450f00dd16017c0054a741e6e866501dba7e05bd7bc3934297bd27ca6fb4f42e8386f579c252f39c4ec6466a3d21c23d7365b2080a3c023e3d3c41a5a4abd9989a6d3441d52cc523e91889298bf0d261c3bbc5e0dd5baabf972687602f3c20e61be7294c499a9fcc0337c58623275ccecf4884546752d9f758ad8aca64436609a45a4fcb34e772cd32e848826080268bd614456f4a7a1095b941dad8c3318b702640be2390540f56e2ec3290df4256a14dfe8a957b481e0a37f721a262c5d5d9518f40bfab1229e9e3702e6777dbc38d228ade4143c05c3097e2686d866f509b9f98057d9d73a2e99bfd855771693bb6095b88f9766bdf69a32c98217ad48484deeac3bf7f24de98f0d8234e5625b4752f8e9c071381c1fb5743b55c76c1de166b228fa4f9472f5d6aafacf4980709ccabd94ac30a35d72b77ca44fb64e83f5fdb14ac431341c871e6820564eb4feb526afc56ebf84404af755a062573182fdbba370d489fabb1a3f7ad63b40c7abed29e883918b3a42112dbdccc2810430245c54e827d37bed3e0ce85de31633d67317faa696bec04b4cd2307cac7b98b3e8b731c006e99499f1db3d52b3c5e54ba2f29defc3c350f72de05b60f4cc4334eed77121d4f73eeb340f8e530b223b650f397a9af0fbccbf117f189b19203194e4bd8c2b5a02b6f7ad1470393a7336812189b168c76a84d70f2162b5abf74d61d963828adda0e7c37ec8413bee33004538ae53b243a89521d84101fb1eab3be716ed2d163555d8b20c6b9a51646887d693434339a074fcc56440ec99baafac374afcf0ace50f577b8476df87ac5b42d7b208c2a2ab7d3b1e65fec64107f68e78931616bda6cec75455856b640ef8cc436e959bff4890c33ed48601e77d36801a841589301fb6ba6416fd921460a49d38075ab77568cba3afd111c0f2a83dd3dd6029eb3eb3e97b2289ee5ad3155b78ced024738fcddc9430937433a355b797e3ad517522b46d7d5dc7515ca3c337320021e35fb6685a14ce50bed83b094f689bff44de775e4f72e982400390b12132aa425601e32ff1b3c05341221dc57d9bfd9395859391dcab7a452de48bb3901cb776b95c3be29222d876fe3a6b620a806dea51926fbcf4cb23b00f53e8729c6774c94f9b112a616babcb8a821129db5d81908cc3ab1387bf1b6f14293200d1435797e0a570444bbd5e05c74051af49a39b2590b4fe9a9dbb14a", 0x1000, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0xfffffffffffffffe, 0x1) 19:40:15 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:15 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='syz', 0xfffffffffffffffa) add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000300)="dbfe4e7d3ac560d114fd81f57c67ca43d4961344d37c68388f3345336300b9073f7fa93b68cc2bc27b0219d3a0a211831a8dcb0d62b5b5b9191e12ff44c5ba68dfe09805bfb8f5f77aa50bcdf3fc900d06766d7508c73355677d1b0179a38bf66791763e6949fd752700a105daf38a23a7d0623091e200e3b0cea43e568ed52afd531b03c5ae9af68b17769f1b96b685e9ba6a1eb9b1eed4", 0x98, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r3, 0x0) 19:40:15 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:15 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x12000000) 19:40:16 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="452cd00304cc697786a8deee53d8e20a044be42b50595ff7963bbe3265cc88543dbffbefe015e6ed5cfc55811f6864854be865133ff660e49cb8f7e955cb2b898b665a28cfd4399ffeb04736668bed726a8bbc2e22df", 0x56}], 0x1) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:16 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20000000) 19:40:16 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x25000000) 19:40:16 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="c6", 0x1, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='.$,\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffb, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "b3e730ddb7a5ad4084329bc45a810931335912dc05eaa6ea5fe0b994d4ece9f4066f6cefce31e66292a489fcee132a6b0d29dc49ae1df2fa448e36a0f7f6d200", 0x25}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='syz', r2) r3 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000440)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "5b2aa74fa9bd34e2f30560cd0001e8ddd59b9fd8fe84efb70f53293677a5f2a70cb0de273ad519c5139abaad3bf948eb9413aff39ecf4b29a0e9c671972e3e6b", 0x1d}, 0x48, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r5 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r5, 0x0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='@,J[^\x00', 0xfffffffffffffffa) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="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", 0x1000, r6) 19:40:16 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3f00, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:16 executing program 4: add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0x0, 0x0) 19:40:16 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2e000000) 19:40:16 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:16 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:16 executing program 4: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000300)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x3fff800000000, 0x410082) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x15/\',#\\}:\x00', 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:16 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:17 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x41000000) 19:40:17 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="219d45157d86ba34092fab8ad0711facfab6370036a0775367ddda02fbfb4686336411241ab803b84affc1dc390c06bc73e8737fd5742e72b95d6a2bae770f9eeddd546aa57b31b2be70ebc4bc51eb6b05ea41459e34f00ca32b2ba636043adbfc7ce500619a0814952f13ea213c1d7da699eed7d6ec784512230fe38e63f1e4fb0222325ed92b2dbff98b541e45455bd88cc273afbbfbee2d3b3687dd191f45b08ad399f2968bfd3a2a845a03c26c4a7aaa0b727ac516717a0d1ca2e57c8026544cd9b1be0362261dea", 0xca, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:17 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='NLBL_CIPSOv4\x00', 0xfffffffffffffffb) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d9f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x50}}, 0x0) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee00) 19:40:17 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x48000000) 19:40:17 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000300)="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", 0x13d, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:17 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4c000000) 19:40:17 executing program 4: write$9p(0xffffffffffffffff, &(0x7f00000001c0)="eaa74f65a4267743258989b99f506b53eee41b06856278f4d815c7dc7163cb58dfce0d5a5b918fc8d104a6cd60dfe156243e460b6518da9ac6aa267a5ac76084a0569b0fb88db008f0b34d440a8ccf732d07bc7bcb81fa08726d0e312683978e22a62c911462e048fcb38d6412859dfe5338a8f7ab18c2b5c399b41db7b565865c29710c48dc8f028b621795a4f07d389be6ef9b7f60f094c77aa611171550577c161b2d0cc5a5dde697559cea05c4c99e6c6e4504a52a4020c34335bfcc6d9b48d57a973786e1a6398c0d261db5ddebf65d50b576c16817694daa08", 0xdc) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4d73]}, 0x8) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200040, 0x1) 19:40:17 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:17 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:17 executing program 4: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r1, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) keyctl$chown(0x4, r1, r3, 0xee00) 19:40:17 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x68000000) 19:40:17 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:18 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000000616263646566675b696a6b6c6d6e6f1dde72737475767778797a30153233343534"], 0x29, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000003c0)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='ceph\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r2}) keyctl$set_timeout(0xf, r1, 0x100000000) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="2ab93fc3c41b73343aa823243512708d196c00068480667bd8d3c09d1d1cc60af506200a4f94638cb887b83c0e16d744ebabb339ef05b9606d3c57c64aa18cd3aab12b6a91ba3cc3d2ea4143cec825", 0x4f, 0xfffffffffffffffd) 19:40:18 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x6c000000) 19:40:18 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='syz', r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r2 = add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="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", 0xff, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='syz', r2) r3 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "75c49d9c8dda379cd06ccbed16f0ad59d94a423cbe7cc0128c9273a2d685129ccd20e3d43eeda2f426dc3f556322080d8d432a2744e257b1737a99f8d7209bb1", 0x2e}, 0x48, r1) keyctl$read(0xb, r3, &(0x7f00000004c0)=""/252, 0xfc) 19:40:18 executing program 4: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="02f367e6b6263dc1b593f80bf560dd621e60c3cc6ea800bb3b0f989ed142c1760000000000000000000000d66c", 0x2d, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:18 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x74000000) 19:40:18 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xeffd, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:18 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:18 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7a000000) 19:40:18 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:18 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:18 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:18 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7e300000) 19:40:19 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x9a060000) 19:40:19 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa1ffffff) 19:40:19 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r5, r5, r5]) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r10, r10, r10]) request_key(&(0x7f00000005c0)='blacklist\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='rxrpc\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() r15 = getgid() setgroups(0x7, &(0x7f00000001c0)=[r14, r8, r12, r7, r13, r15, r3]) getgroups(0x6, &(0x7f0000000700)=[r6, r11, 0x0, 0x0, 0x0, r9]) r16 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="ca087a291d677c1c9a646a72cf71fbeaef472975706393129c7df8dacc242c39e3e4c0c711daf6fd1b5b4a0ee41e13fb3d58f267966630ed8b022a1b83de67388638e8e9de27e678a0d7c1266557b352407fbe7b8c46c080587f9bd1b5c3731952724ce07b842ea3776c5703e3536e1df3717a825901de1b6c803ea786251100a151d11b932dc6326e843aaed08bdff165e43d62642fe6f8a049150d05a986c7a3be98729fe6ffecacc3c2d01d51523fac26107fd57c9d387f8f5eaab5cd2f6f907f8a8f", 0xc4, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000580)=@keyring={'key_or_keyring:', r16}) keyctl$chown(0x4, r1, r2, r4) 19:40:19 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) 19:40:19 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xeffdffff) 19:40:19 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfcfd, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:19 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000000)="2ff8491a2e43db00c0aeec0c52e4070fae9019c73121f1049fbc9a2b679e351ebc68fe9673a8b7b89f9fa17e05a2855b2455aa8b443474bd458353c395e144666bf264d9cb1571dc274d427ffde429d9a3673d97daa8de63a63fcd1dcb34373551328c7beda949df1b2025b4e6f18e26e26bb17ddc37", 0x76, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:19 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffff) 19:40:19 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:19 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:19 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:19 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x1) 19:40:19 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r2 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='syz', r1) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "b9678d7c74ad5bbc8bc64e9bf7497cc338898903d305f44f0b7635a1c933ea4390b16f871f8e262161182f77234ea674f4816da8f2c03eb0429c275ec5d324cb", 0x15}, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r3}) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='dns_resolver\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:19 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfeffffff) 19:40:19 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="dd705609fb0ef81bf5fab8b446cbcbcdef76f3460ea33ea98b89c55d72bd59c9e1ddf9e8291844161b71cf3276dc7fe520", 0x31, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r5 = request_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='{.(@-\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r4, r1, r5, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:20 executing program 4: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xee00) 19:40:20 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff8f0000) 19:40:20 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdef, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:20 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:20 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffdef) 19:40:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:20 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:20 executing program 4: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0x40000, 0x8000, 0x1, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x9, 0x8}, 'port1\x00', 0x8, 0x0, 0x69, 0x7fff, 0xfffffff8, 0xaf, 0x3, 0x0, 0x1, 0x3}) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x7c7) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:20 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffa1) 19:40:20 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffff5) 19:40:21 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffffe) 19:40:21 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x10000000000) 19:40:21 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001b0000000700210030"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0c0099"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x80c0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x45}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1000}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x1, 0x3]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x777}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) [ 1511.414694][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1511.467713][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:40:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000", 0x4}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:21 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x10000000000000) 19:40:21 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdfc, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:21 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:21 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x1) 19:40:21 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:21 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='syz', 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)=@secondary) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='keyring\x00', r2) keyctl$update(0x2, r1, 0x0, 0x0) 19:40:21 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='user\x00', r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)) 19:40:21 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x80000000000000) 19:40:21 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="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", 0x147, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:21 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)='syz') keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:21 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf0000000000000) 19:40:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000", 0x4}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:22 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="4c6aefd4e82881d1efe6e0b08f04685340c978", 0x13, r1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:22 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdfe, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:22 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x100000000000000) 19:40:22 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:22 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:22 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='.+\x00', 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:22 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="11c708cb129eea88e8fee52b3a18636b408e5eda409a374707685a25e99248957cae5f7706bb8cf1c9a65200874c70cad957a85ba325719fee5f959af3198ee803cf72a5c524e68ab08552022efae0dd1ce5eaf5478e78831723158d50af998a2c6d7d74418d5e7c7b3e44e9f16b19249c4101e26abe171686002c2d7304718141d73703575989cea5e5db02ee153141a4129f187d1f69045758ff4a03f99e642644cbc4acdf6d35f7ed39c965c10bf62099ed3f1ed71e579bdc2a4cbd98922af08392de5385e9d423ddad45bdd893f6c4f3", 0xd2, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0}) 19:40:22 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x200000000000000) 19:40:22 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\':\x00', 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r1, r1, r1]) keyctl$chown(0x4, r0, 0xffffffffffffffff, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f00000009c0)=0xe8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000800)=[{&(0x7f0000000300)="b959b12534dcf204ce473f102e17360a276fc65e0122618e108945e8a560192f406ecee967905cba92ae583f8318214c5ad36daae4cbb345c93be33978ab5f23c888fe7d8c0b22be142a90e115a3c69f1b516ee326c20a4c493bdfd37a0c35e7292764bfbb2a7d0c6c3312544d448db0093d82fefb62d9701fab8ccb4161898042db0b0961b7c17f33b30400cf38c6b8468bc7242e329a7a138a599b7cf399b6cc45becd559e323058e37f81b3a34a9746134d0747ecf571bf323d", 0xbb, 0x7}, {&(0x7f00000003c0)="89c3857cc962e8ae6115e3e1898caf4191fcc9d9c44c081a7f243cb7709d124c0a45d1c936ccb0b28ebf9c697227ef531dbf58652f2ecee6d9214d011ed26f6db66428f43960a43bb90dc0f2455a374850b56ac2b53d839d71b65ad13ab46dd1a9dbb86e6295952165d8272387b8832bfaa28ea19c39785559bb461b55cdac4d20ce13e9dd7b08e5389f14f339287eb198ac8c38da27345de6e84a21fa133625b2ffa015f3eecea26e7e06aaea10f3d27b91fb93c3074259fe", 0xb9, 0x7}, {&(0x7f0000000480)="a14d817be5b42bdcca580f91c53e6617acc3198a1fa0b93419802080c096ac6101ffacd485ded6e9b8181e8758efdb8800217cf25c5b4394d8a1f18cb7df6b1b221b1a30c395ea9794b93f6c7b94e9f266d584751a9d11587259f324309b1cb7021240ef1f7543fd086f0ce96fee674e9c206f62950418450d02baa40c0a8b2e58ae70c12bedb932457c5e8434f89a1d053db36197f6957dfad28ab47eae2699e5a244e5701bdc8eb73e7cb0596e9653740c796ae55c78f00e3753650d8003d66bd5138515bfbe3533eb85b4a07aad19111ff743897b9477eb988f78aef28230d7cd897f3ca86f736d14ff812c2183fc84b42101a40477138b", 0xf9, 0x3}, {&(0x7f0000000580)="bce221584d55b59a9981ff87e5ad91d4a3851935c0aeef0f1543046fb48ec7649538ce3b4834cb49162e23e71fdbe71b4428c2b720ce1ab5bd3224536e81173f48bc4cf9ffc98e55e825e67f3cc11dee1a1e7ef4a0e2417662d51bc9edbe70f5fbc88c45f44e5015584192badc7726e3db3044da6932ff9d998462a5a03c33251cf2bea292ede897c7c1a5053b531ed936a09b6533eb20f7e9ace2f9b604b123e08bba7dc480a5f692deb414412defb795ae7b093279355bb2f4f5ec4e6bbaa19846", 0xc2, 0x8ff9}, {&(0x7f0000000680)="fdd42096c43b42b4e4a5985781eda4870fe7637d391330a32db74d84ab8bd5d2e53bd2e542903ebdc046e12ac8e63a3599f32cd83c2284973925ddecb33766d85d567a644a84be92c5ab0e56df9d545492fab1a3b76ef7b0c99428af2a363d98324060102271a9637d91b13261501dfa5601991ae43db5a5ee718833c3dd0e64625493d1434f0f0041238c3c4e", 0x8d, 0xfffffffffffffff7}, {&(0x7f0000000740)="9963a9ccbe0bcf7166e10753d51cb81453ace6ad826a9579c2535088d928e38704c9b93f1cb8b5b70bbb957cc4344798e41bfed682c039b84d5de4a76e41f451d05efb1d82b4b128195e8ea0f618f86500d41ad5d817508602e4af5ee4f1c9d69d9b7e76773dcabede65dbb5b957c108a96cb44eda1c096a4fadd0192c2ccf078566306d16eb14b505219c212ceda1319baa2738aab11f0f600983f9", 0x9c, 0x6}], 0x800000, &(0x7f0000000a00)={[{@shortname_win95}, {@shortname_winnt}], [{@dont_hash}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r2}}]}) 19:40:22 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) 19:40:22 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\xb9:\x00', 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000", 0x4}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:23 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000300)="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", 0x1000, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000001c0)="8c2c6be620388a1e0195895f734671403d94e48acdf2061cfe95f2e084aaf5236beb3159e340de5cd641c0220eb106ce7e1410c22c647fa10edbd64980ab3b5a9de6a2ddaf6f8b00eef262cd6a6db9515064ff97f7afbb254e440d785bae5f2acc2f3d8fd323a23772b014cef1345b7b8ff400f31493c7ab636d85af1001dd9df016d9dfb504a643bbfcca868aba857e24e95360e7811b4db7652945e4cb9e262992c52b4b1475ca6ced485abed85e6e99b31bc7ac6d181633ab2bc270c07e1bdefaeeb0d479bc148f5e895bfab22e6211c4329bab902a36e1811b16b34c8223a6c18bff85", 0xe5, r1) 19:40:23 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdff, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:23 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x400000000000000) 19:40:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:23 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:23 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000300)="273c580aa8ba8b78934dfc77ae7cabe10ef2bef908101ae25e6158eb78b22d54e69ade885023e6ec0218e9b1fca093a919367f3121065db6d6b0a17560a1ebb897a758407506c5ab7332338da36b23ad5eec01539c022392b3c2791ef0c85aa28593634714675ea26d36d170a3918573d023ea4c8c9c39dcd6de3df925fa9f39dec4b711a1d4e4c3fcad4efb663d58a02abe3e2f34e77be8da6aea447ccc2eabbd7b0eed077901ab13b1e16b98c5f5db465b2306f24d4fa764821a2f57a64de552b565387dec871b704bd08b80b98914dadb4f8dbfcba4faa611563cead0d6bb6d9a6bc075d8eba91543918875741328c2a7bed46ff73093a9", 0xf9, 0xffffffffffffffff) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r1, r1, r1]) keyctl$chown(0x4, r0, 0xffffffffffffffff, r1) 19:40:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:23 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x500000000000000) 19:40:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:23 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffe, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080)=0x0) keyctl$chown(0x4, r0, r3, r4) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r6, r6, r6]) keyctl$chown(0x4, r5, r3, r6) 19:40:23 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfa, 0x228000) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x11, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0x3, @mcast1, 0x9}, 0x1c) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = dup2(r2, r2) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x2b, r4}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/195, 0xc3) r6 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:24 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:24 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:24 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfe00, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:24 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x600000000000000) 19:40:24 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:24 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:24 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x700000000000000) 19:40:24 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:24 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:24 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)="bac33daa6f59b4fb8a400c06bf288595fc3ff5c69a68288adb6f02df84ad991873dc013cadc47959a7c878d54619ea67a46702912c6b51bfc80ea884431e17c3d709ea62a0af05b495f09788577baaf95770edde31d889af6a2093e7b27af35016990044bb873f4b3646d3b596c74ab4340483597bd049fde09cd3acb30141c9b3d9138cc6d4540dddafcf3ac93a15d3b722c6fa1f831582901134ad4d88f522eb36419b0d686971768f0c5225c9314ebbb2a88ed902b7852c15eba79f8d", 0xbe, 0xffffffffffffffff) 19:40:24 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:24 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x800000000000000) 19:40:24 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r2 = add_key(&(0x7f0000000800)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="6264978b608a677ba4bd46e997319388582a543379b56e84670ade7c0118c69e83", 0x21, r1) add_key$user(&(0x7f0000000440), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000540)="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", 0x12e, r2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$instantiate(0xc, r3, &(0x7f00000007c0)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'user\x00'}, 0x1d, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r2, 0xfffffffffffffffe, 0x0) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000500)={'syz', 0x2}, &(0x7f00000001c0)="088e87a3585847b108d5e03f7c7849b25c50296552664e8bad94a104d8d2d0edc8ead454baf681215806d80e689e53d90c913f0efe2a1810615e8fbfa26a8eee89b4060be2636cf408b68a0b0575e67e8e7b65fa190ff1fa0ad08e9cebd6ca8174d5f72dc3b15fb55af1e1a20dad20c1d5c51bfdc94bfcadb63112c3d53ba79a66d6ff36be1a7c62198798dbcdcf12fbce0819a4b8f39f9fec21bde15d1c7511de672052f570ba1547756e09b2646a7697a6051d5953e1409c8c06d0259c1cfd21173679e7c3272fa6350232a4da", 0xce, r2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key(&(0x7f0000000480)='logon\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000280)=0xc) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000680)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) add_key$keyring(&(0x7f0000000400), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$chown(0x4, r4, r7, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000300)={'veth0_virt_wifi\x00'}) 19:40:25 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='keyring\x00', r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$instantiate(0xc, r1, &(0x7f0000000000)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, r2) 19:40:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:25 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x900000000000000) 19:40:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:25 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfefd, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:25 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$chown(0x4, r0, 0xee01, 0xffffffffffffffff) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r1, r1, r1]) keyctl$chown(0x4, r0, 0x0, r1) keyctl$setperm(0x5, r0, 0x4240000) 19:40:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:25 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='$^@()\x00', r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r7) setresuid(0x0, r6, 0x0) setresuid(0x0, r6, 0x0) keyctl$chown(0x4, r1, r4, 0x0) 19:40:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:25 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa00000000000000) 19:40:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:25 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='user\x00,\xf3\xb4 \xaa\".\x9aD\xfbue\xad\xf1\x9f\a\xe8\x03\r\x02\xc9\xf3\x03\xcb\xfc(XC\xd97r\x8b\xa4_\xa8\xfb$\xa3\xc2\x9a\xde6J\xd5:\x8a\x02\x00\x00\x00Xr\xdeH\x95C\a0t\xeaD\x98\xbcg\x88\x97\x8bdAfX9\xc8o\xb3\x95KN\xf8\x0f{u\xaa\b\x00F\x83 \xf3\x97\\e\x00', 0x0) 19:40:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:26 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r0) 19:40:26 executing program 4: r0 = gettid() tkill(r0, 0x34) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/vlan/vlan1\x00') writev(r1, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044054}, 0x1) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r3 = syz_open_dev$sg(&(0x7f0000000740), 0x6, 0x20401) splice(r3, &(0x7f0000000780)=0x6, r1, &(0x7f00000007c0)=0x711e, 0x5, 0x2) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:26 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb00000000000000) 19:40:26 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:26 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfffd, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:26 executing program 4: getdents(0xffffffffffffffff, &(0x7f0000000080)=""/152, 0x98) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:26 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:26 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r0) 19:40:26 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) close(r0) 19:40:26 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:26 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x63, 0x30, 0x37, 0x24a16bb3203d59e3, 0x36, 0x31, 0x64, 0x34, 0x61, 0x34, 0x32, 0x37, 0x30, 0x62, 0x32, 0x61]}, &(0x7f0000000240)={0x0, "083ab053927e80d54756073ff26e6e95f895344a2006cf4373a6796ff5db816fba0bc7ed77379ce37e23b51f288573cf086308fae003aae5becdcb23281c2476", 0x37}, 0x48, r1) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r3, r3, r3]) keyctl$chown(0x4, r2, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='user\x00', r1) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f00000003c0)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='asymmetric\x00', r1) request_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='logon\x00', r4) 19:40:26 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:26 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc00000000000000) 19:40:26 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:26 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:26 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x800000aad5, 0x0) 19:40:26 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffff, r0, 0x0}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:27 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:27 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:27 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd00000000000000) 19:40:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:27 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:27 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffff8) request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='\x86&\x00', 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)) keyctl$link(0x8, r1, 0xfffffffffffffffe) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000001900)=[0x0, 0x0, 0x0, r2, r2, r2]) keyctl$chown(0x4, r1, 0xee01, r2) 19:40:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:27 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x800000aad5, 0x0) 19:40:27 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="1e4affce7a12432661fa8629a0ae544408cfc5ec30416974c09f7172a1a7590408d0c567f08d5afd999878b7859029c2cba7a222635ca333a965e3377d2b861c112fc13e9df0d6fb7a9c6c934d1aadad2c1815689143e9daf060cfea8065fcd735afea2c42872269e65bbbb8ae2373160c981c793d5127cf2ba06ded928055978241bf2b14a0ca2f94e66774a23db9b6c613ee45af0b8ee2bf60abfb866ad8eea81e01e19c80175a00dcd673b48fe15be912be8f1abd37b9d4a0fa3a202eb0853370cafedf1d4bf73ef8", 0xca}, {&(0x7f0000000400)="4f255d74c1300b04943036e7467e525b62b5b1341376563f3c852c8cce29378e96b77adc4c886cb5308fdd99087069e4807b3bc89abd800cbb232b690c12dfa4c614218d04dfe739de47e5a4ea623844f3929f5ed51a301a42a7550db1e9a7580277adf6f266865d11367c58345c48f9112fdc", 0x73}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x158}}, {{&(0x7f0000000600)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)="c35dbbeda4d80275e2606708f1a4c1ae4bf8812694b6e42c4436a3e28114cef8120ea49a8c1294a8a4c42d8bc79bce87d43485f7949b014aaed3b6276f52d15919fa8fb896be1e482fe2f519e5ad128c000c5e16d9767298cb466a1b5f8e34ebd5391dc2473e21d400576aeb7748b26e76b89badc927de37e80798b95c99c734635e8327224ae94f56909e5cccf182a7b776cdaeb9394e825a62b4c552b3e998633f56cb295f35c15bea73d41a0bde319b3446543247", 0xb6}, {&(0x7f0000000740)="c9c202fb45275aa9e8eed60bf7fdb2a344f020033277e9eb70ed86c328b12b289e9a0b3c4a45e5b6", 0x28}, {&(0x7f0000000780)="23e1cd5793f2a354c5567b9efb37aa8c842123df8e3f595ea2a7182bb7c6f48cfdd79dbba47eb0a9a31a9f74893d858753aa63337282f9a19683023966168026b3dc4bc913754b2cde9e61837e244608f8a8c8d53da34d3ebc8329764fd0464c5c6b25f143bb2d50815a6e8cf2a442c487613c9b77bba812be83ca49cf89b03eff8b1e3ba761acd13c2c882d27de82467c008215170cb908e2ca6dfcc72bc514452d7af63561537674aa1ba549dea31b763ed95e56ddf5f6d7d7b0cfdab8b079", 0xc0}, {&(0x7f0000000840)="2d78d38489437775346f757b060a3effe130c0f7e298e06395eaac7d55d7", 0x1e}, {&(0x7f0000000880)="042e967a6f4596c74fb54d010786ae9316e0e2311e777823b8ba0cdbdd078a3ce77aa129975fec54307d1d8cbefdf63978", 0x31}], 0x5}}, {{&(0x7f0000000480)=@xdp={0x2c, 0x5, 0x0, 0x3}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000500)="bcbeb6a87eece0f9ab145de0a1e526c21c004fd70bb9bf0a797ec5089bf132b2129a6e7036e59200bd49a1f4805a1db9b9992bc377632041acccd8bd7722cb478da3c081d371b721e5e6ca28835304cd27a11277997fc5d438bbe4f63c0a1d37d2f7d9e29d1d9a162ffec4ea5eb45d6e3434398d78ce150d9ffc4b1fb32c0fa1a58928f0", 0x84}, {&(0x7f0000000c80)="c740290df1a28e3998461704129a9e74f7acd69e8c135c9e2fdcc3d8c8ee52ae24502ce218ac1487d370f9e84aff5983335901b82326836b51b467c50f8c5285ebd5ef121bce79a568f4de26eb2a3bc90892bcd124a875e4c4f9ca63ae9cb633013edff79963207d107f6611cfab66103cfb29682fb17d94655f0369509a6c7cf114352678d0facf44be4acde414dec45bbd161701c8ad062b3ac9d9f133b8cf317cbb5fc76f81b69d04f49db4fa43fb58f0ab24992345485264698687dd85c9a61ce0", 0xc3}, {&(0x7f0000000d80)="80408ec68b952741a93d3c406c290da72d454d560a20ce5e063da01b90ae310e4fa92e68bda56cca39a772352add8883153490847785e9d16db1ce7011488f4d9937343ce155a1ff2bc46dee1b6ea47246408bda7665276d4ae5ec2076c2274fdda1a2657c9c6e01c9e7352d9178d8f351ffeb834d33b7d4eebdd81dcce4a7063efcce9b22f3fdd3d17d98ec0d89be8bfac4f54141648032a7f16a44ca59b917bcac5ebe1f9d401de8a709066295344986c19c4019ed7a96bf939a2099c5a8238efe8cb5f38ab19786603c42", 0xcc}, {&(0x7f00000005c0)="3dd559c2bf2c1f", 0x7}, {&(0x7f0000000e80)="3f7cfe4a441d9ff5df81d99b65899e8763994833ed61cd07dd64f3c7c426bcac023c467e340ace9d511b3e97773406d86086bfeab8692d3205fd4c7d33131321a3e9519e4dcbf3cdef624ea6e22b881d11b71ee1994a224102bcc8d72ddc525c3a65bbd61f5ee2a0cfee29b03afd4cf2ae5e9b49cebfb118e1c5d8fc622813b64daa53b843f1f87613672decedfea6331f1ea8056cff326d1474993e5e398c9ce01634f17cd78d51c0331fbddaab85e9fc5cd568ec97d416e0a158c412c5b29799bec1f9fe2c4dc592", 0xc9}, {&(0x7f0000000f80)="54ff1fa79f9e41e2566d16b5ec882197e88c93cc0cf736e87b4149d05932962963edd319f2ec9cd9bcec2c8fdfb3f37a0317041d72352b5454f081e23e4ea0e618496d0dd1d1", 0x46}, {&(0x7f0000001000)="ed9384b9d94b3c49023fd189a2783fcc50814b185dcb04976f8dcde9fd65aeade6876202b11fa7e812a082c974bce5638963fc77c3471a6148f2d87d60ff69a01579f9f9292b289715e4584f8e727ea809cbd8de07b0668b281f4db42a10e07042a42bf33358af3717821599cb3f8b", 0x6f}, {&(0x7f0000001080)="f2a7a7506d23a4d251f38e177dc6ea1e3ec46a724dba4c05e4d33bae56367b4fdb9c7d313faa2873340e15411279ffedc1e144aaa5a7ac1937b86d6d1df739", 0x3f}, {&(0x7f00000010c0)="1c83ad6611f1770487da2f9e71728d506c81726dc2490594bf14030aa64ab7585104be06e9557a023a89afc16f9248bbdd7fc9e037dc90f20fb98081c32a295d7bd5e678d6e982b55e42b5", 0x4b}], 0x9, &(0x7f0000001200)=[{0x28, 0x117, 0xfffffffb, "9c918a86aa3fe278f9e87d67eae7db8f050e7415d7"}, {0xa8, 0x100, 0x400, "2b57d17485efb8a5a959809801be0cacdeeda05fbdbe36f0664ca61131547cab4487400b597bd2c491b1359c48f198c160df7611a83cd1cf748c48d5228afaa944ea3fe0f54631cacfe43eefe29c58b6f7f596ce44eff425838037c5753a442d6449b9b80da012105479426a179bf21c48a059bc519765545f1bfd85ae99caec60705ca0bcb00af5e5a3f39fc89553b63cdda95211d023"}, {0x98, 0x381, 0x4, "033c145e2bf29063f892863590372b05874ec0537cdb9a59756621d8edc778a61755da0bcbb63fe8ac2b6d8241775741e260a47d50e5c6e40486f290fdb9f8f3ffa03c97c80410e1741033f7df11788150bde530747e82daa55247210d03e3541784605438e233a8c15d9d0a36ea6100cf6f839d0b5f1d08b0b9b3e2038c4c1a32"}, {0x100, 0x115, 0xffff, "6ad88eb161c2290508d667e31a15be1ff0a9562b71a2e3a666d8b2e284c0b956583e198059934508370e87cb730f42d639adcd7ac2b3b136cb3aa86a5d9bb9a50e70c5516c329b5948cbe0873b4a3ad9a9ab5ca3158793ef08ba2dfc25093894d4df20d81c9cf9b920903d8aa8cbbbcd39d506083fd5acf067cb13bb76f8c9a3d293fbfd5217b0db5d313b8c6cc6954bd249a5057410a297278141058f9dda455be56fe0486025274e63a6fa9ea2710a1ba7f6b255eef5e9d25734a74e8b865012bd039a495894e8cdc216cbca8a363169c13af1e206a10df448631281e33931c783641742adbecf0ec8ab"}, {0x70, 0x119, 0x85, "1d9c658453a1182bf8a01ed7a1dc5aa63d2caf8c757ed8e2b5f0784ca388a3aa837cc05594123b7cc8b71c01289ff7919b4b0f31327b867fc603362bbadf17527cf99e5a2ddda563be817e350d851b2e83fb5debdd07a68c52676e"}, {0x38, 0x0, 0x3, "5c5ed53582ee959c830acec4bad89e6bec08a5904accd5b7a6618ceddfa411744f1e0500fa9d1fc0"}], 0x310}}, {{&(0x7f0000001540)=@in6={0xa, 0x4e21, 0xff, @local}, 0x80, &(0x7f0000001600)=[{&(0x7f00000015c0)="5f603732ba01a531c0ad8d0c2435a457332dfc97c219325a3048", 0x1a}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="b0000000000000000000000003000000dbe3734241c8489db7aec21593c03faea884877930baa951001b6d5d6f4888b235827da84dbec9345ad100a96e9bb9f24d78740ff775d6ec3c21cac1bb82d585370540e3806a0a463116e5f1931d78de7322aa4d0d239ca876b8f42e72c80989b81829065766a8db334980ab0b338688f32f73cef4d08ed086bd6a2704069a3d7c22b199024e14e1bfa8f00b9bb04fd14a4ef59209f1dce52c91000000000000"], 0xb0}}, {{&(0x7f0000001700)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001780)="7ec6ded919073e66b0349c6dba232ca65ffdce644c2e4aec6ac3fc", 0x1b}, {&(0x7f00000017c0)="8492f43faec717e173728341faa826a3f1df34a22c856ca08755fef7e1104389834cf3090b94d6cf893921c867ba09493eddeb080d1c6fdfb52c1451d97ebee2eb7eaafd9f5141076247cb4b3f55fc3f41665b8055109012575f84e1b9b4bd266fe74bedb60374bd9854cda9feea534d670e9f2ce6194ee3191775c6d8b5f213795e363c", 0x84}], 0x2, &(0x7f00000018c0)=[{0xa8, 0x10c, 0x4, "cc8128a2f42d66d0735cf06d64d8ee26dfa821b56863ab0f2bc60c716969e88b146510030f23763346c23e3c7a737b6f23ef360a9ce4c04f989abf171e55f02d0db7490ee33d8da978877aa41e7e70b5c8e2826e7699a755a81097389924b2adbae335e2e001b9fecf01fc44cea036aaac6c6234fa1f2b459c68636256944d29e85176bde3d59cfca2f57f9ee6862d497d329b117d"}, {0x1010, 0x3a, 0x100, "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"}], 0x10b8}}, {{&(0x7f0000002980)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002a00)="3681b33621b71fad297ba0fae9a023687bf9d248328c587c62f1c8a4b9549ceae6beeb5a32eba69e9fab", 0x2a}, {&(0x7f0000002a40)="fd42f0fed405ce25338d1d5c0bb79d22bb3c59164e5901e624d990b0c668a7999a35628ad20d8ba2d61e25bbf67520a2106a87295e58594289d21a7fabbe63dd2e4806464fd9e94d41cb2c2437415fdbc294a7d6de9db8c6c0bfad889688cb62cb3e75b7d923c1f5971ecacc91e3f166965bc8e4ec641a6b1ce9", 0x7a}, {&(0x7f0000002ac0)="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", 0x1000}], 0x3, &(0x7f0000003b00)=[{0x58, 0x10a, 0x100, "bc88fbc1605b2d54cc53046086d3fd8aaf1cd85c08d521acd80476ad665ea7e52cc04a4666df7c2325a967026335a2670926b89d4b50a5a3e84b716b150e57758f8111b7c061b613"}, {0xc8, 0x109, 0x1, "c7364713dc19471ae47e7850b73426f1ab74f5913ae1b29baea5f38f913e7e2fea62c4315fb34c4a220eab6feb22cc4edab3e826743c7733f978e1eaa7df11f7a1299d2f5811e055db7c83b92588cee16e326c834f2e380d5a4f17d005cab5e848decd15396b1c073d836f4e97202c3a86fe1274ba57770653db070b208aa4194efdd64aaff408d5d54fee83e39fea4b0ffa466b58fbb0f013128829f11414c942b6b64986a81482b1df9d1743564ee110"}, {0x1010, 0x0, 0x3, "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"}, {0x80, 0x1, 0x2, "e2e225a39c9bee5092d69e6bfb71879ee95ffc50104695dbfb5c3181dad3e7e675307a9f2a5ee55f76be9044a025ca6e38910ee53eab27491ded409fb6d56158666d5a2d8709dd0d76956bc4fef76996af6a26090ca21a37c4077b2c903cf191ce433f328598ce5be26088b0"}, {0xf8, 0x2c, 0x1, "a8d60fae3695b1c57a65f1ba43336feb69656d2be2dff98145ebcf1b9bd0c0cd8cafae45ff70b6f1e9a8a21eab58bb9f92a5a08bc183a77c243a058719ba794bae38ca0219db6649a3c355a71f0092dc15e6e0881b600730055c93ab76de1f0394910d3d144aab024607c1109b1913505be0dbe408ee4117552dd36b8d59f2bd4fa5fa062e04bda20cbfa1cd92ee291ab0dabe7542512b5193279a8fc72e3b024d97f1bdd7467b750c47036cb55adb943256ba1e455996bff286b396e1fdea860bf51ad165119dd50953d39cfcb5b3f54999e0acd0c01c78d02cfc39318b81904267fe"}, {0x18, 0x10d, 0x1f, 'N'}, {0xf0, 0x0, 0x4, "c0bd37b94bac8d3701d240266699f167c29049b9d6af9d34d6623ae726ad286f600936137d3f29585b09eb45ae6b6a37299951a39ffe20dd41a803fe820999a04b935bceda593d296d379646a8f25d46b801db5d9c9ac5b5dff4ecea484f03ed5c311c2c07269a85f4078f8c1b4cb06021c4ce50a13781c8a19ca779e2315fe8b452e9afeda99845c0d792db1d9c5882e2a1694b0e868c1abb942b82789a467c9456f7bf6f9ee86270a9993c8d750e7948a03cedf4368f9395098c82b040b2b34c534dd69e600b53b6bd11fa2cf7024758f1e6096dffb5dc80"}, {0xf0, 0x104, 0x1000, "5691e488313ea75f887341b49b229087d2a188fddab1f2e6748aa81e2c2caf89a079aa8075c7d3e44d3a62a32ef5c8c831ea395e4bf02e670650c7c91bf7b6130437a612e3d9d052ebac1fd8f7b9a03a864ccb7392cdf2c0dbfba628bb6895e3d283b9ab9c8a64863362a586e3b8fcd6ec4fa1eb1a386b8ceab972243ce57a414571d563168a9dafc3b5f4a7a0658c18718c08b0d6e7880e60387f7bbc958f1e2ee72f0da10c5d6acbda010660aba54e804f39d0825b395742d75d09fb5be397bcbf571dd47092cc1c5d9b23b356899c8485c9ea8b09a16c93d2a1"}], 0x14a0}}], 0x6, 0x1) r1 = socket$inet6(0xa, 0x2, 0x10001) sendto$inet6(r1, &(0x7f00000009c0)="e00266e5c46a52e103458a0d15c5efeedaf82fc5ed35abb0ed5b1a0d6585db3424470f081ec37ffdf167bfd5cb851e8743437ea9f14889e37ebce76dbeda4758f2", 0x41, 0x20008800, &(0x7f0000000a40)={0xa, 0x4e20, 0x9ba, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x561}, 0x1c) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) keyctl$instantiate(0xc, r2, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="d154219bfdcd5703e480975fdb586ad940ab554eccab68d51f49e2a9dee7ae762e40c7961f6f6ccf8d0d0e", 0x2b, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='keyring\x00', r3) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)=@secondary) 19:40:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:27 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe00000000000000) 19:40:27 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:27 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:27 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:28 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000000)="e2d695e8a4", 0x5, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)={0xc4dcc8e6968d47e, 0x0, @b}, 0x48, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r1, 0x5) 19:40:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:28 executing program 4: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, &(0x7f00000002c0)="03", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000300)="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", 0x1000, r1) 19:40:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r1, 0x0, 0x800000aad5, 0x0) 19:40:28 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00000000000000) 19:40:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:28 executing program 4: r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) splice(r0, &(0x7f0000000000)=0x4000000, 0xffffffffffffffff, &(0x7f0000000040)=0x6, 0xfffffffffffffe00, 0x6) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000001cc0)={0xa, 0x4e22, 0x0, @local, 0x6a}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept4(r0, &(0x7f0000001c00)=@in={0x2, 0x0, @multicast2}, &(0x7f0000001c80)=0x80, 0x180000) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@private, 0x3507, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001d00)=""/72, 0x48}, {&(0x7f0000001d80)=""/170, 0xaa}, {&(0x7f0000001e40)=""/94, 0x5e}, {&(0x7f0000001ec0)=""/117, 0x75}], 0x4}, 0x9}], 0x1, 0x2040, &(0x7f0000001fc0)={0x77359400}) fcntl$setpipe(r1, 0x407, 0xffff) recvmmsg(r1, &(0x7f0000001b40)=[{{&(0x7f0000000200)=@generic, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f0000000280)}], 0x2}}, {{&(0x7f0000000400)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/41, 0x29}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/94, 0x5e}, {&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000900)=""/165, 0xa5}, {&(0x7f00000009c0)=""/250, 0xfa}], 0x8, &(0x7f0000000b40)=""/4096, 0x1000}, 0x1000}], 0x2, 0x21, &(0x7f0000001bc0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x9, 0x0, 0x3, 0x1, 0x6, 0xff}, 0x20) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000002c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) 19:40:28 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:28 executing program 4: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20000000) 19:40:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:28 executing program 4: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1000000) 19:40:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:29 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, 0x0, 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:29 executing program 4: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x69a) 19:40:29 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1000000000000000) 19:40:29 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:29 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x4}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:29 executing program 4 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:29 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:29 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x407, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:29 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1100000000000000) 19:40:30 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, 0x0, 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:30 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:30 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:30 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1200000000000000) 19:40:30 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x10}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:30 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:30 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:30 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000000000000) 19:40:30 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:30 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x2, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:32 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2500000000000000) 19:40:32 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfe}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, 0x0, 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:32 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:33 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2e00000000000000) 19:40:33 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:33 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x3, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:33 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4100000000000000) 19:40:33 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x300}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:33 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:33 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) [ 1523.882973][ T4909] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:34 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4800000000000000) 19:40:34 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:34 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4c00000000000000) 19:40:34 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x6800000000000000) 19:40:34 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x6c00000000000000) 19:40:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:34 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3f00}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 1524.767797][ T4949] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x4, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:36 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7400000000000000) 19:40:36 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:36 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:36 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x4000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) [ 1526.912333][ T4978] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:37 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7a00000000000000) 19:40:37 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7e30000000000000) 19:40:37 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x9a06000000000000) 19:40:37 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa1ffffffffffffff) 19:40:37 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xeffdffff00000000) 19:40:37 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xeffd}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x5, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:39 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:39 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:39 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 19:40:39 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:39 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfcfd}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) [ 1529.935014][ T5037] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:40 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffffffffffff) 19:40:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) [ 1530.061711][ T5044] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) [ 1530.183534][ T5049] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:40 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfeffffff00000000) [ 1530.308924][ T5057] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:40 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff8f000000000000) 19:40:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x6, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:41 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffff00000000) 19:40:41 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfdef}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:41 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:41 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) [ 1531.186347][ T5089] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:41 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffffffffffa1) 19:40:41 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffffffffffff5) 19:40:41 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffffffffffff) 19:40:41 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x74a3, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x1, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/56, 0x38, 0x11}, 0x80000000) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r0, r3) r5 = syz_io_uring_setup(0x4b79, &(0x7f0000000000)={0x0, 0xbd8f, 0x20, 0x1, 0x2c3, 0x0, r4}, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/1, 0x1}], 0x1, 0x8000, 0x80) 19:40:41 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f00006d7000/0x3000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) r8 = pidfd_getfd(r4, r3, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2007, @fd=r8, 0x400, &(0x7f00000003c0)=""/232, 0xe8, 0x2}, 0x7ff) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:41 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfdfc}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x7, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:44 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000180)=0xaf, 0x0, 0x4) mmap(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0x8, 0x4001010, r0, 0x753cd000) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x545b, &(0x7f0000000340)={0x0, 0x20, 0x10}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3}, 0xfff) 19:40:44 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) close(r0) 19:40:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:44 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfdfe}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) [ 1534.189279][ T5147] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:44 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_setup(0x3daf, &(0x7f0000000000)={0x0, 0xc7de, 0xceaf20400791cd0b, 0x7, 0x3cb, 0x0, r0}, &(0x7f00006d4000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_io_uring_submit(r3, r6, &(0x7f0000000440)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f00000003c0)="64faf7ec7362d7e1e1b5f349a81fa2316aeddbc0eaff9235169d80a419bfa927ce094fd15647ffe9e5f422074b9192a9d53316a3f53a5ffc46269017c8231087d920115c91fb349217fb7f43e77a1efeae", 0x51, 0x4}, 0x4) 19:40:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:44 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) r5 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_setup(0x511b, &(0x7f0000000000)={0x0, 0x332c, 0x2, 0x2, 0xfc}, &(0x7f0000ee8000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) r8 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) r9 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r10) syz_io_uring_submit(r7, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4007, @fd_index=0x5, 0x9, 0xa, 0x8, 0x0, 0x1, {0x1}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:44 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:44 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x9, 0x0, 0x0, 0x4, 0x0, {0x1, r7}}, 0x0) 19:40:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x8, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:45 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:45 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:45 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfdff}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:45 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:45 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) [ 1535.913843][ T5208] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:46 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:46 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:46 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d9000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) io_uring_enter(r0, 0x4382, 0xd27b, 0x2, &(0x7f0000000040)={[0xd3]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0xc008, @fd_index=0x6, 0x101, 0x1, 0x7fff, 0x1e, 0x0, {0x1}}, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:46 executing program 2: syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x4) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) readahead(r2, 0x7, 0x1) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x6000000) 19:40:46 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:46 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0x300000a, 0x10, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000040)=0xffbffbfe, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r4, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000008, 0x4010, r4, 0x8000000) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x9, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:48 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) close(r0) 19:40:48 executing program 2: r0 = syz_io_uring_setup(0x52f5, &(0x7f00000002c0)={0x0, 0x560c}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f8, 0xb3f2, 0x0, 0x0, 0xfffffffffffffe91) 19:40:48 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:48 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfe00}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) [ 1538.943571][ T5263] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:49 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:40:49 executing program 2: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @empty}, 0x103, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x100, 0x7fff}) r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5eea, &(0x7f00000003c0)={0x0, 0x6a22, 0x0, 0x1, 0x130}, &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d8000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000001b80)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000001b40)={&(0x7f0000000440)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000004c0)="4ba082a6791b6c120601a01f33a046683ec7f736b3ddbfd4296d4572b19c4d9aa2f5e2839b5d4ffe861d979c669595ebc8dbb5360d7d595a3f21d1686d7714a78844f17ba001f3772de47dbb09b62665e4f30d72e09b63f94395a6f82d983c061ce126c0234709a0a56210fcc830255f04ba060f7235c183cadac0fb8bcb546d8ff58e7cc6f211c6b5d59a5d35c5a13dccd1eddfbb298b3a0c37f6c2d9342db20375c01a9647e1d324f45a9dc20428bc7cbe61c54280444927f84080506bafbbb5bf3f5fcba2b839c00dc18fe36d1b64cbc56c44fba1900bb7419e6ea90de0c5d5a7e57fbe33002cf34afc7a", 0xec}, {&(0x7f00000005c0)="53313b3e4188ad32f3a1637e5bdb18aaf6603db6770eaa949df2ae4e28e0a11e5c369a87496bcf94cc3eba6781196f7ead650496", 0x34}, {&(0x7f0000000600)="f5da5d8650e4ce6c3a01abd8c30ce82fbc02a46cf34b114b0aec403c8a5d97c3a3ac9080ffd53c480cc22ef322ce69d2b136bb45a48158ae291dc2b026c9f35cac29a1dce349acfa19dd95cc4da5fa1ab57b69a23738ad4bbc807d5342fe410e977a", 0x62}, {&(0x7f0000000680)="a86d0be8dcc0fb4e63f0e2079d2de4a4e6e18f840d756aacd0c5cee356e2323ac146b0e1a46c17cc4763ea2d29c2d241ab36a5e9137e767ff21559cea8ea2f4b870f211a709617fac08be9cc224e284034ea7ed82056ddef81f912b415629988c0e61408d8abc773c016a0637feb2203fbac30a069828aad1d68642ff908c7545afd55914d686312bfd2fc8ac339e8315bd6da183e7bfd67fb5def5310c8c0186dae1fc25c5dc68e3583086dcf6cc6c214a60a190e9356993a710b1c4a33e5cf1e62bae1535314", 0xc7}, {&(0x7f0000000780)="4cf1231cbd706da641355863b0999ce9d5e5b7385b64d8219f1767e5bae6d9a7b330d597e74e95e5fa95bbd27850e8034a183b98003f9dcd4236845c33894f7c9b69d69b4473351f82b27021b276ee64e4593481ab9fae9d07f5690082dc8c6b28c727eb892a675a82b6fe8692d7ef8e6d8bd28cd2ce0adc5c04eece8586f127d6dd9983aa2ad752648fa9652594c0b29db081f7e98575f98bbba5f244bcabab844cc04d595b62f413c60b4d6ce10a07f773877346bfc6ffd5ed1c27e44fef", 0xbf}, {&(0x7f0000000840)="57f24948a4c6ad11470ca8c3de628a354bd1fb7715c8f13ee304e841639deefa0b52672ec27b8ee4980443454c688335611968414b81db5e4a4ad29822e8a4ffbeadb241aa360cb04291098b8cfa54eae3d16ae5500ec59d6cf2eafa056b7ea123719fdd7e489f4d7c6c7b9a233c9c8d8d5ce7cc1c0120fc409395853818bf4cbda78c4c51e9d72f77c1e69021131f47f9569b19af7d2c44e1644380e0c1151b1579262cf85cc624b719274ccfe818526803cfd2d76273604ccad438d20943e8f475c30a7c5598dc82411084c8ffbe514fa44b5297e23a404fa5b48884a3b93ade659cd066057e99300f9e1481798fda2ff3871ba112d5b833221ab345f43521355ab5f2f66be9e86c93a6d664496c5497863dd057c5e01da75f07684ec82eac8474112f6293a11294c0f46a3a7551045da4db2715d68366905f78035beccc0321831d64ed7b2144e0d4f7ef0087189e0885020c3f00c85919a6a3c95e89841723cc02c6bb2b260319695ae658f4bf8e6ae38a0d8b9e0afcaa42fab11d2caa6bfa541efc72271b2f8f962dd0f744340a80a277aaae0cca2b828b3f354f6e044264b7c708bff1b384a892fddf6ab5a7cd5371defe4e98732e09710001f38319eee9505265b8d1f72f33c41bbd3c1c227f81f5b561d8bf8b1d38b5cb6000646895ec941780711995ab61021ca3ed68fceebb89054a6d6efae79ab2ec2b80aa40b6c6b81eef7524c8d33fc6fa0942b28008ad0828bfce5270d8b7f21a98fd3b2606d742b01522bb558a83cdf3c81aeb78b0a46ef98728ee4e4605d97da016bec21251b6ff3d1c299d8eb4fc40820b536054766742e464c2693e6bc524e78dac356f9051cda6d2ec111066c169812ce9bfd0e91e44188fad690a0802aabd8346eecae1d1124d881a83a201ee884719a1610b856396697d4d866579612e50b99b43f3b733e421e1bbbc0dbc8b17cc2fa458e814ce9c1816848f1f76928c024be857ca3ff24f5c47eee5f09b840c243e8f11a74ad11c6f67d8cd37c3c84a53d5fb69df270d41064aafee03de1f45ec7320ac62ec88adc7fe9e5e770fa582fc6503831268e2b6fea63492b101c1ffbc1398fda9ba968bf552e984149e13ffcd13869a747d7012a514662ef21ac876e297bb8c76ab239548f85cfca4303756786bd4265716413e608ca6877f56a3edff19a599f106d9d2a14ff2e2d0b1ceb08577407496ae2b5a384f4eabd6d1129b8830fa01cdf6ce21256cb309b96f6e29b7495a964344fb4ea6ab30bffecbfc6ce532d54b4b6ebcf828240c80130279f2e334e6a4838ea3c883e59f91673a70512ed7d1394c78ba3f2321aa15d6b35f557655b4bc7cb4179558433d88a888d079e4f70a77c1aeca00dbfb51eb903296362a50e8fb0bfb69cd8e9782075dcef09941970a05ea829eb7ef1315da708e1e55955b78621019b3916db9b12206090c84edb10cd0d78346e105971a629c2302c2f23f2c87e7fa0dfc43c74a18b7d9b9d03bea36061b6933d2ea64a08367a7e5297746ff51790ac2a306628d075ea64cdb43e168c3e2e01c8babce868e223243ce6eaa5a5c60aa24c948c618c52196acd8f238f748219ed7eb288bc02663c8ebaa99c45700d90fa6e343e1c13d8d86633644a3c20b3ab23e827695fa77c5d7489c82a4f4e79c026efa1551c19b351042fbfd36943a1bead1872c464fddfd2c5e57dedb0c41c99d4660121033ba7c971de1815f1485a59bf82f2406ad4791ab338dfd2be5d55992c11788f57ef4ec7ebadd50cbb2f3806f92d24bdc1de781befd4153dcdbfdbd1d67bf99abd02296fca6ea8539b36077deb6cca7f248d09999950fcfd508d710cad3a328f37c0afe213026008250d4d1b8167c631c9582dc80230da53753162d29ab3a1c9a52a36287edd29c97f2613d01b88aa1a4c004160329484046657b2cc4971b32e0603890e331ffe207a70416f7351a1c314b2d6434957aec79d26cc692b17c008fbab3412c3fce425450ceabfca4efdba0de666dc4dcdba219ca19227bf09e0f1d1d79ce68c548b6283de6ed76d4104a0733924d04c0c8723dab2ae846450ad77af225ae10c7e788d9ddd93797bf6ccdc519ec29eac1d52bdcf558caa0e99fda54c6ab128d1718c0d3763144168be93b947691f665719e1136703582233715b8eb6d8521f20f2c1825162776775d8ae143c1a6d6f6511c3f3af530158e730f10e57bf1596a137a06da4dca86dacaae9e7ade0d3d94575a76e97d5cd03a86a514e624f250cd1a65a5b03c3e98cbe19b4d3275c23280dc822d15fa037bf192264452c7c60e238816fa4c173cfe73a59cb24c42fd5c92a6243f0f8e8efe24f378e1664a03071e04d164237feed6f9649ce0a112215a2655b71541a6cad96ea0ab5169a73c0cbaa020bc0addacfa3e079c6c96ac3fab113734f211849d9012401cd662cd5428faddb3006a86cdc9bf326d9597a156ee9abb60abe0d9b6e9de7b034d8e03a6738c210678eee8300a08236034d4cc8b835b2a9abdb5bb1333b210a03bfd2faba139616ed5a6708b2054ab635c08c86bb1804aee072566dfc5bdd86f9a14fd3d3ef3d8d37b54bf9bcb0ebd9815bd2c0c9c8df710a5ecafa65c47f252a31c6fcb8cf771a72629ddfdcb620dd18132cea5b14d0e6d4181aefa5b008b7a461d550cbed86b62bbe17671e231bd3a198d236060a33357ec03242806d216ce8f2f57411e8cb9a7a690e3604715a1569577e826832a2baa08b839ac1781338136324475a948f9f24e08a3e3cc92f94150116ebe403603e0672185097191593a7ccdce3c22dd111a3b9a159b95c52c5c4e21903189be74c92cd3d74c5f7a3c32fc4f4ae2822e68fdb5fcae85b38dce56a32cf4716b5068c32042070aabfaa6327e514e9af348a3e1c3fa9ba88a08c25aa76e8f7caf6202d4ac80d159d2655e82de4e2e777b7867d2c7e5ff9e778429a534b4012728ffc803af70ac893bb5ad97eddb693f9ab4a6b8e31b1df3bce8312de719ae6530fd9683dd975e5f210278c6bcefb7f098c179269257a82472b88a6dbd08c42b0210f5aa9cb1118bff5640ce1f947e7dca731d3a323acdaa02d080b5486e3c94d576e7309023ecb39bcdbbb53db96938f39e8fd15b44f6d278f81c81b4acf577f585ca2607490b1fd55eb83d9417d87ce2c84dfd2d7f5d847c172e0c87bfca2bcfc8015029ca2814bf883e0ec2982497508e8fd9edacc1ad46c4161cd30f71a509d7e57d3f5bc687f353391fbf4b69012b0b7024cdfdef0249b39713c82b90faac2b7d96f247982bbbca2599bd74c3b8768d15033e334d9a1905d2f41a7fa41c1137d912b3a19ce87df2877734375b75b4490641f297a0b6925f16e26cb966ec9bc44f636d9e2e51a6cd886c2a17c5509f916b6b2a4e237eb4cc66d4ce855b6870e2b0814cf9376ee14a282582bb46021fdbe370fe5b4cdd9abdee558b4ca01b0ac284c226e1e02af1f42323d2b739c88b471d0d596d21b716a89f3de70b5f1b86010cd152093f52d20472639f09b8b45060e786087dbbed519399d2cbb778391f1620390151a7645693e5bd3bde00e9b78970a8e00d2b702960dfd385aabfa8c27b3897912658d92f7a464d4f18841aed02c93485e33f921aed9589312d0aaa372eecd84653066094a3ed13e09768b3d8bd45b93008e32df0e72774ba4ea64d76eb5642d6157fad145537cf436462274a7a348f0f61274f764b492ba328a9c7c51c0c2684f9a24cb139919433bb545a353ea5125e0847b85a692830daba9475b2a16518ebfba7f5e3124e4423fcfdd7e1d7b578664b98aff30bf05cda84e26e02e8df93e1abe588924754db31f48b3acfb07b68de44d59d1222220b3d811d6ac522cbfba4b7cd42ba8e6e5c2c9ffbf7dd00289f29fb2db10b5d71306b6335bbc4450b84381909ba439161b966493542ac3d505273cefbaa34d7492e2c7772d55f9eb900cbcdc1c63de5161c8cefe3b347524d93dc88f8d1d14bfbfaf945907aa0b829d17d900214f1d22b29a10aa9ec73842c1957a3d88377c2af75d2aac2377cd90d6f84591ca3b62ff6e90ddfe5f6db06c443ee98c3c6712b720bdeb50a6bfe2ff774ebd6e91ba3b06b08760d29d4d23640da2473fceb00484c5abfc4b50085b2d5985af63403837f02e5a49e720b02c8a4a44b3996c1fbb50768c4c8180f0ebbe9681a033416a27a82249435f997b70829d12b826178e7a829c19597e127ff1f13e8070d967c6a9a8e4d2202d1bcfb318df549c735820f20623ce188076bd98d82759961690ffb3383f4ecb1655496a8b60adf84f6a37731e7ec0507643f053100773454f8ed9e58fa1be56640fe1d7cac126eec85d76edd22fe27ec0a6ab453239f9d1bdacbd544af9a04b2f9e0db883f314e387e53a78ba4f6e11944c90293be2d6bff082f165d80ea53d3947ac0ec81ee7cafc9460495027b94cc87a772149d566a4772f240b878c22462d0f86dc8647d572a68030838399d3680b76103bf0e862e2bd4908eee5c2cf127778dbdcb6c06a03e2425ebaaf3bc334bebe8f6590a7bbacbe6aa1633844bcd26ef6389434af9ca4152ab62eba6264c3dfcbeb3c42eaecbcecf13b1793d5d7ce9f11765a53271f14ec6f0e592cb6907b677845e614a79f0f1bd18945d658638df5fe9428f05e9c131105c1aec905d78cf20673d763c98b5c50c89eacc0d19e1914234f08099debb0af20b0fc063389c03d00520e87850ca3c2f3f65dd394f9d22e3e86addf24d9acacde62847751bfd396dbe26e60c774a57f3c1e509440b3f165bf10753e631fc66a93c065f8bac62c5a8f3197aed4dbb3d75072b1ab18f6b787fcef9bfa77ade6318443e3bb37208b4dd70b19699e10e593f5ad63361daa8df6d2ae530d9662a06ae4c533e632fd7b45ff367cb3af05fbde1da54e194009b1941c6eeba9df8147d9158d6893e6300d891ee9381b735cfb45cf65bcdf31c337612cff5f49f5221c7b9d05bfdd3fd2132e977ca3b3e8c682551496fe8786f0879c17a4c020595b386b2b8ce9cc6294f51ee6da42cf71fecf547b2d79d1024927166d8706647671b173df332148ea2b0c3b842530468a0ec51875ca69e0e863a6ebfcb37aeddc21800be3e60c81a1bd7a58dbd75ec528bae04dac919ab3b61cd638e0466dcf1ecfb41fb6bf3cdf64a12a456602207ca1b86f5534795007b7113a2c3c670c58d5b3a4014e4e44d18d97b76e234221d5f4496b92eee88edd6b7240194b8f9f0c7e81a8cade7e67b2943f3eca970bea35d44653235c5a9d328b6026b2e20e0e9b9b79f2904e56f575c28cd23c1b4da8c10073f866fd1114f4b62c5d0d1feb7f7ff0e5f38b8642e956b2a9cead7168e037bcd7df65848beb829c52499c0a7433641decb8c4a3cf463a4acbbf362b8d3577ebf609931c9eb53e7944f3eb577b1ee25c1613ea1a99e7dc35d628f30199c9e151235ea2aee6d6f720b8ba2da1ee786755aefb2416cef7108153db2f31e2d8128ceb3d518539cc54f53fa368ed04c7bd513bdbf61f5b5a909b431edcbcb7aa375a6b208cbe63800e6d7dc55d946e1bbe6852678006308f9391874e3a8e4aee81657976a807ac11d9cb6fb5f5e4c11146bf90f639f5735fe08d4f092c0bb9f066812400e4e93f02a8769594fddb0c3a4d55aab0e6f3c2534808b7cab5f479acd3675f4143030ff21e6c7a04cf1bb738207ef6a58caae0dc4c15416a241829550d90d689f928e98907013090a14bc46686aa6d32c42ac8622e70179848c27727d26a09cac679f1e", 0x1000}, {&(0x7f0000001840)="c5fcba5173704f923cf2f208522ab6e76de02d48f86824f476bd35fd77929af6d3755e250e3bf137daefbb86eb406c933e7519a45a2512de8041fbb15468e111", 0x40}], 0x7, &(0x7f0000001900)=[{0x100, 0x118, 0x3, "63ee9ea4e8a433fc439bc10904723892c5ce9b2597c53b32c10a90bdeffcfdfac7a3969b94972d4a4a5cd2d7add5a602167f738734afe0928cab2e5756a8e043db38745b891cd33964a019feea2cb8037160d5377f96279890f363543b7a4160e674990eafb0ffb78dc05b4fff56053da1a5932d4071cf0c272871b609f8147d18fa623d838113d8d2c79da89946539be47be655ab5b3b735d39f39a1687780ac2d363ffb37ad260a4adcfd809f1eb7fafd8e96ca7a46d112c35c5c9a092d7f67ab0316486b095de84788f19acc403579e8c7cb83edfe43ff877832c2e226392e2bc36e0ab8ced2989096f2d323779"}, {0xe0, 0x115, 0xc83, "7ef015f9149c04f2b700969ff27875872f7a3bd6f83ddd595f55222205fc00aaae10b65523312b55b162d947d4407be7de696c6cd22f3976b37fb3c0a44b84181ac4180b2cbc267a52dc61ba5b5e0470a945a5922e33aaea59694e0f775ed95fdfe1620c2591c3024b10ca0d36a56c1f21b24246be51efe8f591bb9e12e6d44f635efe76b91a77d62420b8237ec0db3684ba321acef6c29bd0922843ccd70047f07c52a4b86c781666fa41db6f7902e8a977a3912c2db3dc633d7736fe58de48451720003a5494cbef3f3a"}, {0x58, 0x108, 0x5, "517e55412417e573e3e7e45bd1c819f2a31ffac174351805e023bfbcbaf402f6c640f568d3569330dd9c70dfbe9b26167f15b9268fda013ca18ad26a9c78793ada99"}], 0x238}, 0x0, 0x8000, 0x1}, 0x5) 19:40:49 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r5, 0x0) close(r0) 19:40:49 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:49 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$FITHAW(r3, 0xc0045878) 19:40:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0xa, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:51 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r5, 0x0) close(r0) 19:40:51 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:51 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x5a39, &(0x7f00000003c0)={0x0, 0x9e36, 0x8, 0x3, 0x176}, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000440)) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x4000)=nil, 0x4000, 0x4, 0x40010, r3, 0x10000000) r8 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) r9 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r10) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0xffffff01) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:51 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfefd}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:51 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x64b, &(0x7f0000000000)={0x0, 0xc8ea, 0x1, 0x2, 0x210}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ee7000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_io_uring_submit(r1, r4, &(0x7f00000006c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r6, r3, r0, r3, r7, r8], 0x6, 0x0, 0x1}, 0x5) io_pgetevents(0x0, 0x3, 0x1, &(0x7f0000000580)=[{}], &(0x7f00000005c0)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x6]}, 0x8}) io_uring_enter(r3, 0x7d77, 0xb749, 0x3, &(0x7f00000003c0)={[0x5]}, 0x8) getpeername(r5, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000480)=0x80) preadv(r9, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/117, 0x75}], 0x1, 0x2, 0x8) [ 1541.961317][ T5326] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:52 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:52 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r5, 0x0) close(r0) 19:40:52 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f00006d9000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r3, 0x0, &(0x7f00000003c0)="aa0d629542cdfa1c1ad248b1c93b91f19f", 0x11, 0x8000}, 0xd6) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:52 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:52 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) close(r0) 19:40:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0xb, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:54 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:40:54 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) close(r0) 19:40:54 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x1, 0x100010, r0, 0x0) syz_io_uring_setup(0x982, &(0x7f0000000000)={0x0, 0x6d53, 0x10, 0x2, 0x2d9}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d9000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mincore(&(0x7f00006d8000/0x4000)=nil, 0x4000, &(0x7f00000003c0)=""/9) 19:40:54 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfffd}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:54 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:54 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240)={0x0, 0x400000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000000)={0x8, 'xfrm0\x00', {'veth1_to_team\x00'}, 0x5}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804c064}, 0x40) 19:40:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) [ 1544.985923][ T5384] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:55 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) close(r0) 19:40:55 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040)=0x3, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:55 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, 0x0, 0x0, 0xd9f, 0x0) close(r0) 19:40:55 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(0xffffffffffffffff) 19:40:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0xf, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:40:57 executing program 2: r0 = syz_io_uring_setup(0x67bc, &(0x7f0000000440)={0x0, 0xffffffff, 0x4}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r4, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_enter(r4, 0x3d8a, 0xf494, 0x2, &(0x7f0000000000)={[0x7]}, 0x8) r5 = io_uring_setup(0x2ba6, &(0x7f00000004c0)) gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') writev(r6, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r7, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r8 = io_uring_setup(0x2ba6, &(0x7f00000003c0)={0x0, 0x1000000}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r9) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41, 0x11, 0x0, {0x0, r9}}, 0x2000000) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:57 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(0xffffffffffffffff) 19:40:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, 0x0, 0x0, 0xd9f, 0x0) close(r0) 19:40:57 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xf0ff7f}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:40:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:40:58 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00006da000/0x4000)=nil, 0x4000, 0x8, 0x40010, r0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x3, 0xfffffffffffffffd, {0x0, r5}, 0x7fffffff, 0x6, 0x0, {0x0, 0x0, r3}}, 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41, 0x9}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, 0x0, 0x0, 0xd9f, 0x0) close(r0) 19:40:58 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(0xffffffffffffffff) [ 1548.011981][ T5442] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:40:58 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r4, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r5, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) syz_io_uring_setup(0x41ff, &(0x7f0000000000)={0x0, 0xc1f1, 0x8, 0x1, 0xf6, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000180)=0x0) r7 = socket$inet6(0xa, 0x3, 0x6) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd=r7, 0x101, 0x0, 0x0, 0x8, 0x0, {0x1}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:40:58 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0x0, 0x0) close(r0) 19:40:58 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) [ 1548.336515][ T5464] FAULT_INJECTION: forcing a failure. [ 1548.336515][ T5464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1548.350698][ T5464] CPU: 1 PID: 5464 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 1548.359669][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.370817][ T5464] Call Trace: [ 1548.374387][ T5464] dump_stack+0x137/0x19d [ 1548.379033][ T5464] should_fail+0x23c/0x250 [ 1548.384403][ T5464] should_fail_usercopy+0x16/0x20 [ 1548.390191][ T5464] _copy_to_user+0x1c/0x90 [ 1548.394981][ T5464] simple_read_from_buffer+0xab/0x120 [ 1548.401366][ T5464] proc_fail_nth_read+0xf6/0x140 [ 1548.406897][ T5464] ? rw_verify_area+0x136/0x250 [ 1548.411953][ T5464] ? proc_fault_inject_write+0x200/0x200 [ 1548.418172][ T5464] vfs_read+0x154/0x5d0 [ 1548.422927][ T5464] ? __fput+0x43e/0x4e0 [ 1548.427323][ T5464] ? __fget_light+0x21b/0x260 [ 1548.432259][ T5464] ? __cond_resched+0x11/0x40 [ 1548.436947][ T5464] ksys_read+0xce/0x180 [ 1548.441362][ T5464] __x64_sys_read+0x3e/0x50 [ 1548.446082][ T5464] do_syscall_64+0x4a/0x90 [ 1548.450857][ T5464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1548.457258][ T5464] RIP: 0033:0x41935c [ 1548.461674][ T5464] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1548.482120][ T5464] RSP: 002b:00007fe58f4c5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1548.490578][ T5464] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 1548.498766][ T5464] RDX: 000000000000000f RSI: 00007fe58f4c51e0 RDI: 0000000000000006 [ 1548.507381][ T5464] RBP: 00007fe58f4c51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1548.515663][ T5464] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1548.524544][ T5464] R13: 00007ffcece375af R14: 00007fe58f4c5300 R15: 0000000000022000 19:41:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x10, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:00 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x59d8, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0) r8 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r10) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d6000/0x4000)=nil, 0x4000, 0x9, 0x1, {0x0, r10}}, 0x2) 19:41:00 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:00 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0x0, 0x0) close(r0) 19:41:00 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfeffff}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:00 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:41:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0x0, 0x0) close(r0) 19:41:01 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) [ 1551.037569][ T5494] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:41:01 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) 19:41:01 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x7, 0x0, &(0x7f0000001940)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {}, {&(0x7f00000013c0)=""/149, 0x95}, {&(0x7f0000001480)=""/233, 0xe9}, {&(0x7f0000001580)=""/234, 0xea}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000001680)=""/231, 0xe7}, {&(0x7f0000001780)=""/207, 0xcf}, {&(0x7f0000001880)=""/183, 0xb7}], 0x9, 0x0, 0x1}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:01 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) 19:41:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x11, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:03 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:03 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(0xffffffffffffffff) 19:41:03 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x1000000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:03 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f00006d8000/0x4000)=nil, 0x4000, 0x2, 0x110, r3, 0x8000000) syz_io_uring_setup(0x7a63, &(0x7f0000000000)={0x0, 0x95a0, 0x8, 0x2, 0x366, 0x0, r0}, &(0x7f00006d7000/0x4000)=nil, &(0x7f00006d9000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r6 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r4, r5, &(0x7f00000013c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f00000003c0)="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", 0x1000, 0x10}, 0x9) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x5c, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x18275997dbf8fbc7}, 0x20000815) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000001640)=[{&(0x7f0000001540)=""/204, 0xcc}], 0x1, 0x1, 0x9cc7) 19:41:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:41:04 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x204, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) [ 1554.064659][ T5560] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:41:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0xf, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:04 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x402, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:04 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2000, @fd_index=0x6, 0xd6, 0x0, 0x0, 0x12, 0x1, {0x2}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000000)={0x8, 'team_slave_1\x00', {'syzkaller1\x00'}, 0x401}) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:04 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x406, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:04 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x604, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x24, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:07 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2000000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:07 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000040)}, 0x9) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r3, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_enter(r3, 0x7ad0, 0x846d, 0x2, &(0x7f0000000000)={[0x6]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:41:07 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) [ 1557.078615][ T5624] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1557.114926][ T5618] FAULT_INJECTION: forcing a failure. [ 1557.114926][ T5618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.128357][ T5618] CPU: 1 PID: 5618 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0 [ 1557.137520][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1557.148996][ T5618] Call Trace: [ 1557.152282][ T5618] dump_stack+0x137/0x19d [ 1557.156785][ T5618] should_fail+0x23c/0x250 [ 1557.161393][ T5618] should_fail_usercopy+0x16/0x20 [ 1557.166609][ T5618] _copy_to_user+0x1c/0x90 [ 1557.171173][ T5618] simple_read_from_buffer+0xab/0x120 [ 1557.176827][ T5618] proc_fail_nth_read+0xf6/0x140 [ 1557.182164][ T5618] ? rw_verify_area+0x136/0x250 [ 1557.187383][ T5618] ? proc_fault_inject_write+0x200/0x200 [ 1557.193486][ T5618] vfs_read+0x154/0x5d0 [ 1557.197980][ T5618] ? __fput+0x43e/0x4e0 [ 1557.202432][ T5618] ? __fget_light+0x21b/0x260 [ 1557.207433][ T5618] ? __cond_resched+0x11/0x40 [ 1557.212306][ T5618] ksys_read+0xce/0x180 [ 1557.216916][ T5618] __x64_sys_read+0x3e/0x50 [ 1557.221720][ T5618] do_syscall_64+0x4a/0x90 [ 1557.226429][ T5618] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1557.232790][ T5618] RIP: 0033:0x41935c [ 1557.236928][ T5618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1557.258079][ T5618] RSP: 002b:00007f120696f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1557.267320][ T5618] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c 19:41:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) [ 1557.276588][ T5618] RDX: 000000000000000f RSI: 00007f120696f1e0 RDI: 0000000000000006 [ 1557.284880][ T5618] RBP: 00007f120696f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1557.293039][ T5618] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1557.301640][ T5618] R13: 00007ffd09c6077f R14: 00007f120696f300 R15: 0000000000022000 19:41:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:07 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') mmap$IORING_OFF_SQ_RING(&(0x7f00006d9000/0x3000)=nil, 0x3000, 0x3000009, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x20000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:07 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:07 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x40000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x25, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:08 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:08 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x80000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:08 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d3000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, &(0x7f0000000000)=""/66, 0x42}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x596a, 0xc655, 0x2, &(0x7f00000000c0)={[0x2]}, 0x8) 19:41:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, 0x0, 0x0, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:41:08 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9d}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x3, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_proto_private(r4, 0x89e4, &(0x7f0000000000)="5f4a31ec8cc796326989a865f9ebf9efb6016282d9429464b7d5d7714c38002d7efb1faedcc7e9f2d425825cc5b8a3a90ca8761517aa8c208665e919b212a9a2069fe93d4cd97cf3210db9803c") syz_io_uring_setup(0x1334, &(0x7f0000000540)={0x0, 0xd944, 0x0, 0x1, 0x12a, 0x0, r3}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eeb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000480)) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:08 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x80040, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) [ 1558.697311][ T5694] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:41:08 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:08 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x200000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:09 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x400000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:09 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x204, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x26, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x1000000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:11 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x436, &(0x7f0000000000)={0x0, 0xad97, 0x20, 0x3, 0xe8, 0x0, r0}, &(0x7f00006d4000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 19:41:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x402, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:11 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x4000000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:11 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) [ 1561.692861][ T5766] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:41:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2000000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:11 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x406, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:11 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x7028, &(0x7f0000000240)={0x0, 0x0, 0x10, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:11 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0xc0480, 0x0) r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d7000/0x3000)=nil, 0x3000, 0x2000003, 0x110, r4, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r4, 0x5, 0x0, 0x3, 0x0, 0x0, {0x0, r6}}, 0x5) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:11 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2040000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x604, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x402, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x6040000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:12 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r3, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_enter(r3, 0x767a, 0xc9ff, 0x0, &(0x7f0000000000)={[0x8]}, 0x8) 19:41:12 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x10000000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:12 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) [ 1562.613931][ T5830] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:41:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x40000800, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:12 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006d8000/0x2000)=nil, 0x2000, 0x3000004, 0x110, r4, 0x8000000) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000480)=""/70, 0x46}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000780)=""/184, 0xb8}], 0xa) io_uring_enter(r0, 0x7151, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000900)=@IORING_OP_NOP={0x0, 0x3}, 0x81) 19:41:12 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:12 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0xffffffff, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:13 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x20000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:13 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x2, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x406, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:14 executing program 2: r0 = syz_io_uring_setup(0x7788, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') open(&(0x7f0000000000)='./file0\x00', 0x403, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r8) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x0, 0x1, {0x0, r9}}, 0xffffffff) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0xf, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x40000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:14 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3f000000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:14 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x800000aad5, 0x0) 19:41:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x300, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:14 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x1687, &(0x7f0000000240), &(0x7f00006d9000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r3, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) syz_io_uring_setup(0x295e, &(0x7f0000000400)={0x0, 0x8efa, 0x1, 0x1, 0x32, 0x0, r3}, &(0x7f00006d9000/0x4000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r5, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_enter(r5, 0x54d2, 0x369e, 0x1, &(0x7f0000000040)={[0x7ff]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r6 = open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x800) openat$incfs(r6, &(0x7f00000003c0)='.pending_reads\x00', 0x602700, 0x84) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4) [ 1564.423209][ T5903] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.1'. 19:41:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x2) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x80000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:14 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x4) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:14 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x80040, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x408, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x204) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:17 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x200000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:17 executing program 2: r0 = syz_io_uring_setup(0x6aef, &(0x7f00000002c0)={0x0, 0x4b68, 0x0, 0x0, 0x100200}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r3, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x8, 0x11, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r4, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) syz_io_uring_setup(0x52d7, &(0x7f0000000000)={0x0, 0xa534, 0x10, 0x1, 0xbd, 0x0, r4}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f0000000540)=""/197, 0xc5}], 0x4, 0x3, 0x9f0) r5 = socket$inet6(0xa, 0x3, 0x6) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) write(r5, &(0x7f0000000680)="e9ea6833d72b9a46d6667cb9b76031b2ded5beef912ab017dc0ce8506e", 0x1d) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000006c0)="f51aa7711ee6cc8e0dfc7e8a5ac67ec3c0fcbe21daaeaaef5d7f8f8005d498f6fde36cb2e3576f871c969d24f2907f974fc4d8df6d74791ff2cdf6bc5fd9f979a46198a32c4f0fe2772c16d9ac888ef625ca8af6b6aba55c61fbc89988532302847f67679fe4232f74d728d2d9edd322b869b0c4c612774b8a70c24ec922e6c7a9173f03c24215187bcb2971ec94a4acb644ed28fb7739da7fcd88aaea72e00d3fb96a268dc05b1b1628ef", 0xab, 0x8050, 0x0, 0x0) 19:41:17 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x40000000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:17 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x800000aad5, 0x0) 19:41:17 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_io_uring_setup(0x1df9, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, 0x1, 0x72, 0x0, r0}, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000000)=0x4, 0x0, 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = io_uring_setup(0x2ba6, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x28f}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x0, {0x0, r8}}, 0x2) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006d4000/0x1000)=nil, 0x1000, 0x8, 0x20010, r2, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x60a2, 0x43f6, 0x2, &(0x7f0000000380)={[0x4]}, 0x8) 19:41:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x402) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:17 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d9, &(0x7f0000000000), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x3000)=nil, 0x3000, 0x1000000, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x1}, 0x9) 19:41:17 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x400000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x406) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:17 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x604) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:20 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x1000000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x409, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x2000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:20 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x7ffff000}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:20 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x2, 0x810, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r4, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) r5 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x6, {0x0, r8}, 0xffff, 0x6, 0x1, {0x0, r7, r5}}, 0x7) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r9) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r4, &(0x7f0000000000)={0xa880, 0x2, 0x1}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r9}}, 0x6) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:20 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x800000aad5, 0x0) 19:41:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x4000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:20 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2000000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:20 executing program 2: r0 = syz_io_uring_setup(0x7761, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x4}, 0x1) r4 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='cgroup\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) syz_io_uring_setup(0x4080, &(0x7f00000004c0)={0x0, 0xdc92, 0x1, 0x0, 0x16b, 0x0, r0}, &(0x7f00006d6000/0x3000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) io_uring_enter(0xffffffffffffffff, 0x6ddf, 0xeb9e, 0x1, &(0x7f00000003c0)={[0x8]}, 0x8) io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x2) 19:41:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x20000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:20 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2040000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:20 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x40000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:21 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x6fe6, &(0x7f00000003c0)={0x0, 0x4387, 0x1, 0x0, 0x18d, 0x0, r6}, &(0x7f00006d8000/0x1000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) syz_io_uring_submit(r10, r2, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000004c0)={r11, r12+10000000}, 0x1, 0x0, 0x1}, 0x6) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x7, 0x7, 0x0, 0x0, 0x15, 0x1, {0x1, r13}}, 0xfffffff8) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x40a, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:22 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x80000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:22 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x6040000, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:22 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xeffdffff}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:22 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x800000aad5, 0x0) 19:41:22 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x59d8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000003100)=[{&(0x7f0000000400)="59ec0e3d56f0f04b1bf00ca1b3e2295d363dd2c22630cbe0e7ed2911b106a143f0c1da007d03acabdd8beca97c9604e5c65c48bea0a88b886f4e92d8f0144acd07c513a738060d36ff03cc7f4ae303180d9341b7b2c84d31c2cecd35ecf7fcaf7cc1e22442baba672fcb06e1f4303b1d9245a9b4a0df45b73c1678a7e65112be5475d9d2c2b5f0385f88ee1b3c4bcf5a3426ada866566c27e5440a7d2534dd31d2c486dd3ec7bd3e6c43b391f493e8426297f60f257b96485f67f9b56ff982a78863c61bb86632bf451a08b83768f467025f22b966c984f01603e7", 0xdb}, {&(0x7f00000031c0)="3c5afcf93fcaff292b8c2731ce0e19f6334b235fcdf7235815657415025a9bd005857f6dc61604f5895eae487e503b185804fb590d076783d483f012fdae747fc305c6cce7a99b519d2155d12dd154da7868bad12b5b3deadf36daffffbcd2c1c208e4285b668fd702172daa94f1a3e0e490990d29402614b2f58a6837044fca110e5a9e4ae646cc021980514dc9679b9f12d49d40cddd54426ae87b823d6f410708e545cbf2e18a211130ffcaa6452de514fb572b77e35a81d260faf0bb8a7b359c28ec86e568f272188ad15beec477db4fcb037fb9375a4c82aeb3f7780900de86019ae16fa47303d069732a5391439ca2", 0xf2}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="63be68da500e673723f25f554d61a0", 0xf}, {&(0x7f0000001640)="04d2c0a12cde49b0d0512b4af65f3c39b6dab4cc4aa0f720261512d15dd813b6aed2ebff94624e91853495b1cb9acd9865719d60822d1e32a02b4affe14a9b1a0854c19ab4c4e26f209a14e4682714ce0d317cd3bbf297678042b22b260be0417bc52b0756fc90c13b80a90563fd577502b2d21632c5107c5a16ce0b99c47f37e58c650053a98598dd26c16d694dd56e860d981f5ed81eb36bc1b1174c6fdb29eafe65201c575009291dbe89c56b39622031db5b5efa", 0xb6}, {&(0x7f0000001700)="074063e3f9c4457726fb0b89fb395d5e39921d056421033efb7b0f8b6ac3b277ef25b9f0d80324cd985716cb9e42390ed510b72706a148d878eac8de49f9b3fb15bbc34ec3818e7ceb69f8cf37de6d3aa39aea20", 0x54}, {&(0x7f0000001780)="fea69130332206d90c3a22f05189540d27b24ef1e645988f5b91b08970358f4749435b9c12a26ff565502032965bf41bea5a774d8757130515b944732a60546d9071d970a1ae1bbfe95618eb459a4fdf2ec003ff3f1c5fe24e2b02480bf7e4e0caa06aaa45142af2f721e045a6", 0x6d}, {&(0x7f0000001cc0)="7e688b2e54de9fe51e9d3e05790b7fbcf540494142851031e8b84e820f467ef27bda7aa0475900586fa2152662faeed8bcc39b1b37b50d96b78124c4b2eb3aa5934c11a762513780db58bb8d49e6729124688a1eacf630b50946e3dd50f309ef286ad00670151a7906ff102413214bf6d03800471e415d76797ae4ed500c28953b7ed12440905b51097b13bbfd2885114b08eb4ae6555bc47ab2e156d6d916ffe9e336f7917f096d9a90873bec4e731c0b7f31f0f964dc3cd352396f4f8860bd0e8c1767ae5fa1049008383c11e9cf9d3e95c3f7", 0xd4}, {&(0x7f0000002100)="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", 0x1000}], 0x9, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x5) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYBLOB="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", @ANYRES64, @ANYRES16], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC], 0x1d4}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000001c0)={0x0, 0x1, 0x20}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000200)={{}, 0x0, 0xe, @unused=[0x0, 0xfffffffffffeffff, 0xffffffffffff8af2, 0x4], @devid}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000200)={0x0, "b4533b4f5f87ddd4537c3d1ad60c478d"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001880)={0x0, 0x8, 0xa4c3, 0x1}) accept(r4, &(0x7f0000001800)=@x25, &(0x7f0000000140)=0x80) syz_io_uring_setup(0x54f1, &(0x7f0000000000)={0x0, 0x9085, 0x20, 0x3, 0x145}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 19:41:22 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x301043, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000003, 0x13, r5, 0xf59f3000) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xd) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) r6 = signalfd4(r3, &(0x7f00000000c0)={[0x2]}, 0x8, 0x0) io_uring_enter(r6, 0x4678, 0xc382, 0x4, &(0x7f0000000100)={[0x1000]}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000000)) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:22 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r3 = dup(r0) r4 = dup3(r0, r0, 0x80000) openat(r4, &(0x7f0000000040)='./file0\x00', 0x200000, 0x8) preadv(r0, &(0x7f0000000040), 0x0, 0xa0b, 0x4) io_uring_enter(r3, 0xe21, 0x74bf, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) 19:41:22 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x80040) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:22 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x40000800, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:22 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x200000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:22 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r3, 0x29cd, 0xcb90, 0xc2c85b10c9dec580, &(0x7f0000000040), 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x40b, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0xfcffffff, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x400000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:25 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) r9 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) r10 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r11) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0xffffffffffffffff, r4, r5, r6, r7, r8, r3], 0x7, 0x0, 0x1, {0x0, r11}}, 0x1f) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:25 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfcfdffff}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:25 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800000aad5, 0x0) 19:41:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x1000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0xfffffffc, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x2000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:25 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0xffffffff, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x2040000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:25 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x6040000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x40c, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x2, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x40000800) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:28 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f00000003c0)=""/141, 0x8d) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:28 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfefdffff}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800000aad5, 0x0) 19:41:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0xf, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x80000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x300, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:28 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x2) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:28 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x2000000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) [ 1578.369179][ T6279] ================================================================== [ 1578.377770][ T6279] BUG: KCSAN: data-race in unix_release_sock / unix_seqpacket_sendmsg [ 1578.387041][ T6279] [ 1578.389549][ T6279] write to 0xffff8881402d2630 of 4 bytes by task 6271 on cpu 1: [ 1578.399005][ T6279] unix_release_sock+0x2e9/0x6e0 [ 1578.404042][ T6279] unix_release+0x2f/0x50 [ 1578.408487][ T6279] sock_close+0x6c/0x150 [ 1578.413715][ T6279] __fput+0x25b/0x4e0 [ 1578.419265][ T6279] ____fput+0x11/0x20 [ 1578.423681][ T6279] task_work_run+0xae/0x130 [ 1578.428870][ T6279] exit_to_user_mode_prepare+0x156/0x190 [ 1578.435239][ T6279] syscall_exit_to_user_mode+0x20/0x40 [ 1578.440908][ T6279] do_syscall_64+0x56/0x90 [ 1578.445630][ T6279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1578.452705][ T6279] [ 1578.455282][ T6279] read to 0xffff8881402d2630 of 4 bytes by task 6279 on cpu 0: [ 1578.463587][ T6279] unix_seqpacket_sendmsg+0x36/0x100 [ 1578.469170][ T6279] ____sys_sendmsg+0x360/0x4d0 [ 1578.474299][ T6279] __sys_sendmsg_sock+0x25/0x30 [ 1578.480202][ T6279] io_issue_sqe+0x231a/0x6750 [ 1578.485416][ T6279] __io_queue_sqe+0xe9/0x360 [ 1578.490579][ T6279] io_submit_sqe+0x1887/0x3360 [ 1578.495531][ T6279] io_submit_sqes+0x5bd/0xbd0 [ 1578.500426][ T6279] io_sq_thread+0x74d/0x10b0 [ 1578.505935][ T6279] ret_from_fork+0x1f/0x30 [ 1578.510339][ T6279] [ 1578.512846][ T6279] Reported by Kernel Concurrency Sanitizer on: 19:41:28 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) io_uring_enter(r3, 0x53ce, 0x6ba5, 0x3, &(0x7f00000003c0), 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r7, &(0x7f0000000040)={0x80000000}, r8, 0x3, 0x0, 0xb10b5861109bff37}, 0x400) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 1578.519277][ T6279] CPU: 0 PID: 6279 Comm: iou-sqp-6271 Not tainted 5.13.0-rc2-syzkaller #0 [ 1578.529278][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1578.540557][ T6279] ================================================================== 19:41:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x40d, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:31 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x4000000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:31 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x4) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:31 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfffdffff}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:31 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800000aad5, 0x0) 19:41:31 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x8}}, 0x0) syz_io_uring_setup(0x6ede, &(0x7f0000000000)={0x0, 0x9903, 0x4, 0x3, 0x54, 0x0, r3}, &(0x7f00006da000/0x3000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = io_uring_setup(0x2ba6, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) r7 = io_uring_setup(0x2ba6, &(0x7f0000000100)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r9) syz_io_uring_submit(0x0, r4, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x8000}, 0x1, {0x0, r9}}, 0x8) 19:41:31 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x20000000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:31 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x204) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:31 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x40000000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:31 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x100, &(0x7f0000000140)=0x3, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) mmap(&(0x7f00006d4000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0xb85ff000) r3 = syz_mount_image$iso9660(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x4, &(0x7f0000001c80)=[{&(0x7f0000000a80)="cbbec1865d5e06cb4bd26ba44a74aca51723f912b8bb5e058b73f0efd30035b9aa553efdf7e0a1bc8c6e7b3d0a254e11d33130c35ef1103a374b678fe09b", 0x3e, 0xb4b}, {&(0x7f0000000ac0)="5ac62bbd50ab95dc533a0568e4568c5c82b98f0421f873f87da206f76bf8d3ce7c0b736cc9245a3de9f2b5f0bac4d6523fb7945c3b19a43f250755dc083467ce9d4bcb81fc0013ec7cbcae60f5d6b6f978484d60bf58cab3fc73099eaa2f5a0893e1cd97fd81cf6c3cb4a803e8acd8512dc87a4104c544a84c5b477dfdd88b923ef4671024a99d60ee98e455f6fedf14c35b90fe43d8d30501748e2e703f77c4c8947f07cd1c2dd32ebd6f91c8de0c1820b083a869d9accdd689923c0864fb346d96312cc599752fa2", 0xc9}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="3299f22f295ef5786210bcb755983364ef9db7a95312f905e646c3b3728cd467a8a0b28a97c5c4366d2535e1d4fa7040151c6d3f98d75fdcf943ff294e785a9c11a2a865365dfc579528169ae7849b9b7c698f012b55ced00133501aae668cd5e44004be0a344618f41e6705e69b415e48e6c8c97fe54a0e584e0813d1611b0b4b75dd", 0x83, 0x3}], 0x12000, &(0x7f0000001d00)={[{@gid}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@map_normal}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@session={'session', 0x3d, 0x5}}, {@gid={'gid', 0x3d, 0xee00}}, {}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x38, 0x31, 0x62, 0x31, 0x53, 0x61, 0x39], 0x2d, [0x32, 0x35, 0x39, 0x38], 0x2d, [0x39, 0x66, 0x32, 0x61], 0x2d, [0x39, 0x64, 0x3f, 0x62], 0x2d, [0x31, 0x63, 0x36, 0x32, 0x0, 0x38, 0x35, 0x66]}}}, {@obj_role={'obj_role', 0x3d, '*'}}, {@smackfsdef={'smackfsdef', 0x3d, '[#]\'/@-}-'}}]}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x121000, 0x100) r6 = syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f0000000440)='./file0\x00', 0x3, 0x5, &(0x7f0000000700)=[{&(0x7f0000000480)="6f8c8dfbe3e14350eebb753f60dd06c1d37fcd9250b63be5b7914b5173a7ea0b2e214115d65f6dc9bb12d193082d8f358d8a19ab98fed9157d3f73b2d2faf49d1a812eb516983ef61f1f2a7604fb51898b594040528bafa723869bcbe7341769f252d6e360800f017aeada390cc2c3865faee60e5b2e85465731c4b7ccb868e6f5225601bb46381dbbbf3061083709768761a3cceb3ad4d775084dc8774596df4d358a0c37723f33353555b3df415dc2e23b71b0e946460e99dedd", 0xbb, 0x863}, {&(0x7f0000000540)="62f093b43739a6a51b3678fbfe79aa102f3f37f381e9314312af81a3ff4645d403f36c15faf58ae1090f3cba6f07d782eaad77", 0x33, 0x3f}, {&(0x7f0000000580)="3b106890c0a0d09c3bc603132588471535c04f7e13df62fe353db526c1ac9dbe760999e40c3bd63576e0a19f1fcc9de3e1c35eda0800e2d34fb63d2006c31f6e1ceaf0", 0x43, 0x3f}, {&(0x7f0000000600)="80897b9dc70d049e5a27611c17db4fe712f46b0099c7b68b45bf26f764628b5725b375ef0e64788468f6aa807b614fc8201e1f749ac3844059e15f5a2f755b9ddc3f215054f9190dba9f8e18def1743ea947753a602d4ea0901a4523f59f29469dd9f8fc8743c965ab2b2c49bf06f5f7d7a5dc8ce194a47aee62789086313e78bac669187981c3ec30561401cfba27e89ab3d5a89ba4a6c6dd7e59d9e3498be8387b253c1f86de6c61a71ee55288a3", 0xaf, 0x5}, {&(0x7f00000006c0)="dab1645e9ec4310ddd715885b9a56a386734c688b1b90f4a9f8d", 0x1a}], 0x2000001, &(0x7f0000000780)={[{'\x00'}, {'\x85&}\x7f&'}], [{@dont_appraise}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f0000000000)="9bfae7da3918235ca6751b8fd19740d2c6b7f2c7bba7d475cfebd044081d760be041ab181c26e639333851b69aa5d5574f48bda3b5a12d701b4942d806bb1f0572ce24a67ada44dadf7f662993e6a08051b0c29272979ada44d21fa900faa5c08413a73f821052abb8bc90e3e0e01b91078fafab804621c78e422648f83931f621c07203e1a96cda980aab62183908e53c5c99f7af1832dce03e986bf421e75cf589b9e176f396fb975cad60065954f6cff0") preadv(r6, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/14, 0xe}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000880)=""/197, 0xc5}], 0x3, 0x96, 0x2) syz_io_uring_setup(0x5b75, &(0x7f00000003c0)={0x0, 0xd51e, 0x0, 0x1, 0x379, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r10, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_enter(r10, 0x40, 0xf97, 0x1, &(0x7f0000001e00)={[0xf65]}, 0x8) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_NOP={0x0, 0x2}, 0x3) 19:41:31 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x402) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:31 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x100000000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x200000000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) fcntl$setpipe(r1, 0x40e, 0xfeffffff) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)={'syz0'}, 0x4) 19:41:32 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x406) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:32 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x3501, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) bind$unix(r6, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[r4, r5, r6, r7, r8, r3], 0x6, 0x0, 0x1}, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:32 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfffffdef}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:32 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 19:41:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x204000000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:33 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x604) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:33 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x604000000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:33 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x2000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:33 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x4000080000000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:33 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0xffffffff00000000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:33 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x4000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:35 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfffffdfc}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:35 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0xffffffffffffffff) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:35 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r3, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) syz_io_uring_setup(0x33fd, &(0x7f0000000000)={0x0, 0x77dd, 0x20, 0x3, 0x390, 0x0, r3}, &(0x7f00006d9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 19:41:35 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 19:41:35 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x20000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000240)="1e0555b000eabe6d1608b2462cc80e8fc72c85b9f6c4197cf554f673871e23fb0b6c84cae951c20036f566b870db9296e3715e6ca165e5705519ba4e66946fcce647e41eb11c46f94f3ff55fa64de0928ba9d87542f7203b4e26538cf9d96900a55175e89c6040486c6e7cbd7f590ba037111735742dc0855af6dedbddc65e3a3c794378a955141e3aae0ea00693a05caaf3a4069a3cec51983bcc1df47b8bf073e6ba9eb47ffe0a302dcf96f03ab03ca311bf808264e26cf17f4cd7dffb5c009748c42abe30cf3395d168a3d530a03b6549353146d3bb9b", 0xd8, 0x8080, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getgroups(0xa, &(0x7f00000004c0)=[0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0xee00]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000002740), 0x20040, 0x0) sendmmsg$unix(r0, &(0x7f00000027c0)=[{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000540)="e916f35d4a873efb3ef324d52ff9d6c0c27efa276a92195775485bc1b24066b2a369769a39d67e83a030bef7bd32da8cddbe8bffae1170cebc5526102e035e1e106549f5cc7aa880b041c3160359dd10af3c86c94993435ac8eab8a2163c045d2bdd7fa76f52df2ea126429d853bb2447dde75f306727ef5d0cf1d4c0878ba19aadfc2ac62731a201a77889b264f8a0dc954e6b48031e6f071793a498412bf6ad1686d6b14e6d6846674d4d7a96d3773ccc7f6d32f2b724caa260a561b82eb9578568a12f842caf248", 0xc9}, {&(0x7f0000000440)="e068bcfaf8b309769bdc4610842194829e6906fcb2861653c6c75a8a5813498546b836e2cd710e02fb2e61071545cb68a2b0d6384678e68d064363fd88c3fd5231fb608dbf3e0c66e569ab3a06aa77eebe81bbd7f7b7e4b2974624b03be6", 0x5e}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="4def1d15e79a3d3748575c0c80dddb11803f7e487c27ef7dcfbf5627d88e2d559a8d22268b95048632fe376f0663d2f16c32c306e2c8cf7422a0ebb06126c6921d489edb785d97542153bf541edc0b80d6e1d72d88ce3ef97c05abdada44790e516760fdefae50f9d42aaf80a964f1bea95e927b66042837066f6e6854389172a5e5fc38b44a225dd9a4a8ce", 0x8c}, {&(0x7f0000001700)="9d787724bf7849da3cd185f82759e79cbce7b76a85f052d5d5229f396d67cd9ecda7d9163c32a3acfc4e39783a4a13db04c3ceb99f8b6672ebbd440a29649493594331abe630500ad31f54b16ad58a23bf69f2793734f16c7eb16a47f267222b6ffc4a053ad91b842daa0aa2fb1a964c48b061e8aa9b9160839610edbd3acefcc62783e7aea016778b16b22b1ddd2c3b953c9e93af2f30051a44bcaadf287d91ca032a0a2698859578f699a6b8232bd7d1eaca25", 0xb4}, {&(0x7f00000017c0)="9c0dd14eba153e25cfb29dd0e3500377425e25fca7a7ff3b0efedb8c654b55864982d73c60f2f736c75c9887a8eb2b0ef9224b3067af31790356d740b9f6c616003f2accc7f21e7663b775b4a2fb36e40545535d31b03d", 0x57}, {&(0x7f0000001840)="346b44bd11f19d9fd5f171c729ef9ae0551e2dd05f9fd56319689d7159da2d8c5009135fd705c6049d3c2fe642e99c257809f7681c7a2f9fae6af27adcabf7809c0804f6abe445cce1606fff5b8b7908d8b95c1ee8509654a964d8c4bcdb89677500b251b7f047ad87a343c5948bee1f8b1d69793ad31e551e21c571abba44cc4ac64505", 0x84}], 0x7, 0x0, 0x0, 0x4}, {&(0x7f0000001980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001a00)="c1342174de460081679be47e9f979f368b343053139cc54545cfd739c99a8cbb5275bdb811fdb21da2bbe6caeb41ae8ab681082884da4c8e3d5ad4e272440318422d633880248c61e9bbae33812f942b2083a06e12046b70889a469bbe968a23df157d2918e5088100138f1a59ce38279913b24f8d49fa7f660b99cc8c50ea1aa581cb4b0ba2fdeb48b61c1d7fb099aa8ec9e846d54b98d7ebe3847a64003ccd730ca4831ed35b420b7442acb33ed80844573896a4914870f8c0c87d3f86201652da88c9e7f84760c0433e4c70be25b8f3e3d23f915ba930408c3de5f563ed96e7ffdd8ed87090b2", 0xe8}, {&(0x7f0000001b00)="f5dfacbedc99294a29063e1387fef6ac765589a16b6c630a3bc20238338c242909399904d752092689960ab5fccb6cd5bd9924c44a402e2f4bea60e475a62d7972ca2a1d22cc4032f8860ec3d9a1896a86e162ccc53de19fe555bf70882dd00a0413785f48d4ec0d8bb612ef8f8cf4e146b817a88ac5c73bc399e9d6553badb65df35ba35c719a2bbc4ee898a651e36493919b2c5d2341bab18a9b48d50bcb56ee52d5d3c1560573c382d3fe9673f1a1472b79d2e4daf5781abfd9a16f", 0xbd}, {&(0x7f0000001bc0)="4b90653f679a3bfec3fa828bd0f6ad707990b8842b667507760f4d157cdb3c7dda6edd25f607c3a2b1b881d99c7fee139eec46223f2091542b1abfe7fa3a54eb15eabc688ad216e51f77759508bce5add96f0f4c6c468ca427d5febfaf9003ec585b9b5583ccdc6265c63b0a10ece843125acfedae3b2bcde26420712afd7ebe8caee1d14cee84f3c4d6d87f6f930fa7b445e87f3c4391b1deb2cada0ea0e78fe9552d7b7e64a3197e5e1f591b7b0219378b3861217cf661ecd2b793562a707281dd584e34bef51a4e5f5f2f1b2412e780f78016f5d12f523d", 0xd9}, {&(0x7f0000000000)="3a6237ae50d4", 0x6}, {&(0x7f0000001cc0)="df2b6a3e8bd72a8530e0aec93356ed15efba3ef3e80e35e85122242377c0a4f3677a648b1f2a4a2a0a5e4098e21b881e7d176416a903038ce486c7c948c9e01d3e18c594c00acc7b887409092b59f8ca77d30fae54b66d22529c0b934e85f0b00809d72a76b297d2ddbfce50152689dc96779a04f3d3b7a17cff926018471790c47f2248b81d6eb77059802cde7bb2a75d54a54a5e0e9ccb532b35b4d18088e1910e6a5f3d0d51b2b63b63b3f09b77b84bcb12cc34668b6db45104866004c418658ebbb81dc652d8044d5de472f698e7e16edfdb809653e640a40b52d08f0fb42aa2", 0xe2}], 0x5, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0xa0, 0x4}, {&(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000001f80)="b23d0323b5", 0x5}, {&(0x7f0000001fc0)="7b7e56bde5374e645f314829a2284301", 0x10}, {&(0x7f0000002000)="1b62bad73b3c5cf57efc116064c48b81f08b280ef2f4bdb798998eeed4c8744ca60660e73262395d05e878f8e2e58e53ee68f5a767ff4ac3bc0b0fda52c912e111a20bebffd10fc2ccd47a3f8d354b2ac8a007bf9698ec44ddc86f19c5b23cb38c6e681a1bac2aaede6dd1883173436c6c499609f5492af8a2a34d39832d575418d33d8ea2ce822b5ded200f0f5ab21de685e5dcd1068d6d582b962d6ea17bfeba1b16dbb547e5f40b37dea764ddc71c80aa53f4cb28f91a3c54023652d8ce2321c96f6bb862f275b4d69a4ef067b0", 0xcf}, {&(0x7f0000002100)="c7150a7c13736bb7d0e601383c2fa6cef10df6ebf6490ed9820ba021362a9c995bf85146ee9024c36dda1b9403db5d3bcf7a6ef65b7162a532558e97afee2c79eabb71a3e506f8c8bf356f9409c2aff24c1ddb8d437b7a84918c58318ef1913289ef7db530411c162bea673c80488dfce5af0208343e8a0b904713510d224124f2b18d9916f5c88e84f55cb47682823014405cc6d5c19b6e19b39d57f8035135ff5572a12614ac889cb0c0f9a27177d06264727a4b43265253e5dace2e7ba6ca7578738ff9f29880ee56fca1464bfd822502576b6f60ac043e03a98b07107669ff53ab770848defd9a1bf9daccf5722e07", 0xf1}, {&(0x7f0000002200)="2f9510ebeb683ddc6d107a3585cbfd9ce952bf50b2513dc58a28d4d973c7efa71e3237c1bd27eb7bb50e02bb319b2baca27beb18f3f2a14ea06db8727d4912f252e65478713afefefd55f613bbb95bc6087007d65c68a90deb8704765a9e37a9bd227fedb22ae9", 0x67}, {&(0x7f0000002280)="bd0194e4523fa11815e78e66f213a79964c53a8fa2bbb853f680fc3b66e5933d2ec44b490f33515ee0b34e92cd1d202984fbfc2dedea8e94f1daeee9b9e836670daa3e0735197d6d5b2a5cee7c11a49e0ab21d31b7acff2bfd25817f964f4d90da6d78c964bc3d074f352ca5aeedb03f1db1b575498351c5c712bf7c8b48cc0eec0442bb9a44b04d291c1e03b6e53e947e", 0x91}, {&(0x7f0000002340)="ffd525e6b6af85cc8f3d46383e0937fc64d460d2395d246e969530", 0x1b}, {&(0x7f0000002380)="c4289a7fc84740e060c2acf0e370aeb9b544cd7d15765dceee2bc9667a6f2a1996e7e210a0adb2c9c058cf696a20170b6748720c0d8e3a56aec312cd221e1f657e731c4d3cbc47a2244cd059cf5c78cc8b651b4b1d29d950d3b3632547f660af0e8ad04988aff297f22f87283e4332bfbd8cd5914bdc16635b17d069c1f078fe3eba3f6ba5b3031309dd297c0b4ca26fb66dd1d3f0875cb1105d7dc2aae6595ac81a957895f8f1ecb7b5200a0335d194a19ae6e7ed1c42", 0xb7}, {&(0x7f0000002440)="bb1698da8dc01d7ad298fbc812e07c40f6bc10f2641063430e5f781a544b071c3102ca4e3e00459e816f054bbb43cfbb5baee98fc97d34f7bc26ead26f526046c531afbe09a06da977af1887248c43ff3dc410d751593038b7937260c72e365d63f23be0f3d3bc0cb03cdec17b9bd297b7d076f1d92a6d415eea597fab4ce5b9329b5edd4e1f2611b0a2a11d7a26bfec9f80dd9d54a4317c10069ffc0df9f362115a82a335eb937b0d397e54ea9777be2f18344ab1914a393672c474c8e689947e2796f6b6af09cf7e2777a054879e5916cdbfb70433b7998147dbad895f7bb2ea150410c2fd0dee", 0xe8}, {&(0x7f0000002540)="70740edcf975cd5468e8ed3f1a593691aae08052a9c9c7a467fb0b2343559f3ae39d3e6575ce4e54c69ed9092cae23f6dc7c61724a5d17e594ed603e512d9cf36af54234c1046869d8f97d087bb8ffdd607518324cccff4df342e6afeca3bb51e8f7f0d2f79512c18a2b826ad166b5b767bc5131f2edee042e8906ce79bb0959397287abc2a52f0028e5358f5650608907dd999f887df664f4d15e456c1784d1102e311974f778d49de6851c8be51174db7b9e945681d007c15518cdcbfcd84ddfdd6dbc9f52f5cb305dea3060f922afdb22d8c34025a9885e6448782d4ad720763d883e58fee948ad021df87bdc8cb6b2f7034bb0", 0xf5}], 0xa, &(0x7f0000002780)=[@rights={{0x20, 0x1, 0x1, [r3, r4, r5, r6]}}], 0x20, 0x44}], 0x3, 0x11) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x27, 0x1}, &(0x7f0000000040)=0x0) fcntl$setpipe(r7, 0x407, 0xfeffffff) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="73a8b5fe5a99ea37acb312f48d7a00"], 0x4) 19:41:36 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x6cfd, 0x8168, 0x1, &(0x7f00000000c0)={[0x5]}, 0x8) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:36 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) syz_io_uring_setup(0x7761, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x7, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x0, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 19:41:36 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x40000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:36 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) close(r0) 19:41:36 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r1 = syz_io_uring_setup(0x7784, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3ca, 0x0, r0}, &(0x7f0000fed000/0x12000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) mmap(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x1000006, 0x20010, r1, 0x85f34000) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000340)=""/65, 0x41}, 0x0) io_uring_enter(r1, 0x1643, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) shutdown(r4, 0x1) 19:41:36 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x80000) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:36 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfffffdfe}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) 19:41:36 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x0) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r6, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_score_adj\x00') writev(r7, &(0x7f0000001380)=[{0x0, 0x2b}, {&(0x7f00000000c0)='-', 0x1}], 0x2) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f00000018c0)=r7, 0x1) r8 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x8, 0x9, &(0x7f00000017c0)=[{&(0x7f00000002c0)="670261efe8241ac31b33c95226434f2834ead524017dd6e7e3389d40ad8166eccf135e22b114f75edf12de83ae4410b092605d3ff0719bee0d213c8e70973458a9d9872a4f18c01f25ec556cfdf0e7eeb2b4c4728734a1f65c746e506fec8b0d098d2b024cf0d465ae6a3090033b951a6b9467b141099c4847aa24dd009e85886036a1490d942b474996ca8fb66eec1f47d4d9730de11ab5027cadc86e0a8e4a15332a2dc8f2742a35cdb2b572d3b226bdd7bd37448876235b8554ea736b2d248826b71d8ede1540ef8505fe3bbaf4a1af6d412d6ea059baeb23f343beda5ba6f436e98b38362c131f664d2424", 0xed}, {&(0x7f00000003c0)="cf6ecfd9aa6a8648bc8f65d060b427c3a30913937b5aec735197917ed2efb024d51e31c7da255c48b498fde415c4c70021fa5aa12ab954b30da776d9caa7be3af1b5168d69058937081d851c19148f43685f748cffb917fc4a6a21b86797cf1e536b14c4b39c95517f346b546c1db2a87d7de7", 0x73, 0x200}, {&(0x7f0000000440)="3b5e348777e08f2376f25c736497a7717fde8b79aad5d3201df874368038762d5996bd26bb0028f200a20adddd5f00bc3fb703b04faa43924b4c3c25d1f6956a309a439c431d987673694585a4b0e0ab2cbc809335c2fe6626bc23244342493bc4a4047c98bc293c202ec8370d506135c602b3ec5d41d233e1e0f8494fc97ce57e5df40ed5e85a", 0x87, 0x8}, {&(0x7f00000001c0)="01", 0x1}, {&(0x7f0000000500)="b310a29f634f1053ba46c0191a05ba29a21a2463ea9f5aed67ff1ee14008b8e61d5747a90de10299486ed5b2692f6120b8002053b689bc81b8dbb6cb1eb3b488bbd95ff26f5608", 0x47, 0xffffffff}, {&(0x7f0000000580)="b88ea781f092e9a15888bbc887b8436e2f2ff87cefbb95ce5ca03e4142b4265465cb3d9aad94b06d3b299b9a81e59c6e3f6e3554760bb7754739d1dd1e7bea45c4e1425a86e5cdb5911f06e0c10d3e7c1f4ede550f08cdc54db27103298be4f1a19f06ba9cac115c039ff85b9d8f8c178247e0a4fa48c039cb4b40946dc19cd20a46104a9a24c3c8cbaa72", 0x8b, 0x46}, {&(0x7f0000000680)="bd7fa6f96fa90aa076c1cd77f6d4af8ea96653dd149218a88abc004a1390c86464924a3e28bf9043654022136a0e95f789d7ba3d77436d7837a8e4cf6a929f296125594e8e166d600fafa811a1087b3aedccbb5e403da5bf3da2668e33d7676e77db3af74dc4cf0c3eed2284616643e53a2be66eeb526f3677a0c4e21e33e893f5412a7b1f2b786bec5cd675350a5454c4a35492b37265064263ae80f58f84914dba3c264605d159d4729ab2fca874bf8c7e283d91614d612087db5fd2c39a5957d050ef6df8b6d5ff14795341d3ea74a78e3d3919b9cf24aba709ccf69e0deee8a3fb6be43ffd2ce314", 0xea, 0x1}, {&(0x7f0000000780)="5fe067ab4a2acb0d189770f3283e84811a5d39f624412f", 0x17, 0x81}, {&(0x7f00000007c0)="9bdfa6b5ae600e50c56c110a4121ecb47a5ce848442d5c44ceda99c087f90ee909432ae9547b10d69b02217991cbb81bcc1904793ce871f5d0640e0c8bc068616f76ba835518214d6cf07a4582e973833d963843bf9a9acd138bc089e68687e503dc3cb0d3f2cba5dc35d5940305a7344b7fa0b5ab6c893c31ca66fc4397d3324f2e917b3e0cb973a543f3cc7db46236c73d9d018924ce36a384668116e23b1a0a3cf501fdd0f00d89fa568b5b9ae31594981af8a0144b1cef1293ee79458aec4172a97729c13d8e4282a8823a4fda303c5d9ada58fb11d8d2fb6e973339bb83991036957fd97f117f83af8a704eaf48cfd428a17d284946f85d5b513582c5694ecfee59fc04023ccb263287955925e695602c5926b28a9935b70db111fcbe98c6d7608740a0caebd1e55de0a12cf457a9420e7629e9e9d2736e0d678adc65ddde95e4aeeba2d68305956881df767ee80868e5638ef58fe21be4e74ff51192d9d61aaaca5c672557ce5d9e50524aeb19304105fb4117570bc7f0a0e429fa8e7eee89f7e42224a431210134f89c6cf8f88b9dbda7e89f1b681cb6e4fc48b7a12ff1257edaa64862719c31b83ee8855a1655028ab9d1090fde2f0d5cbccf40d50ffb03846d68d78bebe1d131c7d60c3acc16bc92d4f095ae9a64b7b8b2d78f147d84cf100c3f5f3d758652f1fe1cc48775bfbf573b66d9aef1ab317f57fe2fda2d710d668aefdf48d022572f1feb8fd995ba3d3de70fd20416b51e6705720a01b323cf7ae6284a5e31a201adacbeffe5629331bc9f856d83df5bec20561adf44533711ee59a1f5f60169e36135a50e5d803a188b08ef1b2f7f963f4c6c97bd3d19c7ae1e94c49c45554e2cee2970e2c50d35bf63eff7b8abf331671e254a6033f45d5b2b5a7752eef30ee86a31afe2165b97f20233cc931975962f0ec0b905ce676e462112c009ec885997fc66e6bb3bdec529693d74411675fc5cba9ec46f6a5ef392b25eac9daeec1305a15fc17674208e9cb82fdaf114bdb647ce745eaa3e89fba837d0e0a90953dd588435673ac5dbba22d099310d95e1f9ecd308e158df92b2b4c1550c57e637ec02bcdbf2e1456fc68c06069e3afb38e3b545a964767c1a0863b567a84d6046995ea1a1544c3a3d11bda9d3e23a23302d1199e1e679827e72cac63b79047e02630b7690a4c927142760b26c82ea3cef5ec53497b86b78ab502871870df158fba6c8c6e2c6bca3d37af40745474e357b0c5cdeff252f7b8be59646a48fc1a47cd88e48bf523eb7dd366cd15543602461611b4ff40d15bff5f07ca1eed6a2171f0afeb0ed3637edd6d054aaaf0850ec086c41e6f177799512f96ff4c6a49998e5d29bad0de8b0899a9ff98df37504a876dcb3e9cb5a50f463a98681db547e2235bfeb406ae157a2c927b8502070fc12250ac155cced0869b70138fc77e2937f3212b12bbc8d3c6f34943d6e935e1b35164448be8b1bc7f041724af96ede2a26dd09147d1cb59e4293d79a37a6fc57e8c5fe5211793169c9bf0c21cae8321fb0a9831f10b6a66eef423eca052d1528f52a33e36375c07ff799218eeaa24bcabb5e468ee42027920032e98d10815a11080e190dce38ecc770c7a2f4db3090a580d87db9099cff0a910ebda135cc1112a10069f8e5629e9691efef25c6734a39618e45c251f5036a95fa0e7c85910a0522ad5e576b48aa7450b485efe96e4c4ea53b345b6a57d33d87cbd15c5feb7f508dc94df0c1f76d1ca4e6f5cb53044563f7b75e46e498ad71ab8c56acba4e6f6df4b864cdabf96fafbf111049cb112a5c846cbc06273b8828e72fe16b7671b9f9087b8fcd4ff02bf79a63c6469b1b300d08481be6a7800290e77fde2b7ad460f2e7dc24d889dcc6f4283e3b0f6b185005aac51d838878b3f64583e1ddbbfbf6c800aa965627f10e8500a2f7ff1f1184fb5fe12cf0be555605eebe25289489dc47039f148c384896a3ad08969ff4b8cfba58a26cbbaf2284270482854cc8bd6bb3d5aeea169aef16828904d884ddafd08f14040be089892cc6aab94fa291485e8629c0537a5a09607c16e5227f0492836200c876243a31054e48cba98d3430bd82c9b197135b90864ec86c611800eead23cc655896b0133524fadb53c72096656ac558d2ae3bf2ae6d679c09f79a90f0868cffb715bbe1315d868f66baf8d3611664f1ada3f89fb51d3be09fd5321a0b51dedb163cda38a0b5923a5c543a101fd984e4fc04b202d0f7f391056007cf538228a7c765426a3369bd50f78b2fdb14622bb486734f75801dad46bcdd559e8f75fa135cc112b42e7eb994df66937e2dba11a42aeb7bd91c474761091f9773b303240cb391a9ede7d93784a3cd46f00fb77f56f47e34e08c4de611a34f34fadd1c5c58cdfacd405e05c4c7cedeb2f2d7c6b948e86e5549092460cb473a44dd131ae46f4f379b829b61af007332005ea38b701ad6445d27f87616eabf84bdc5d53e5a466ba1af5a9b175d860d96e411004f23365e3df84ea9c713e900193a6ad0c6f90b1b24a43e5c446775188e88a4961334eb56225d665682120b7f4f2845210651994c17faccdc3ce80c3dfec0b16a981b2cccd8344754449b8705af5980741690e22be09d60747c83493dc0ae763c473b8d75735fb219f37bce99c29d5a3899cfe7bbaeaed79e684c8eb2324e0e9798f189e1acb13eacc8e180db7a81c38c35032c8bd16b7e6a04c6268d84f4f7669bdf49e43d6d70e1101872940ee596f6ba7c9dd97cf6e8d7d1d1c8ef5f4b2bc2dec6f3aff4ecdcc65ea7bcc7eef037ed37a8e638a6c4ac4ef8e386f4dcc3212416b9f8fc87803225496a45a068ebd019fb2eddd58667e24efdf89b3787422978abed445d0591c5dd241b360aea46b4a115532f16e7c725155381638b926199f1f9864c85762e05ba73298af51c200c0797dbaa0f915363b59e4dbb98b47fe6c7ebb8e9aca7a7801aa5a849253eec6ed437fe73c27ceb6a6c4e1fee4f2646beea396f639167d34bcddb188d41d8519ffcc946f2a23055900fa083e1889296fe709d8a7c8bb34d63f5d948eb64e44d5a5f767308c6bce452f33e033ed5168ba09d101aff313dd43c755e96cc869453477a8e42a7ae27a7a1d99f600ffec4eafaf9216f031029f2770585188ea644fddaa1bdf222b4c2a91a5a80f387225a6c1df1ffdbd2d2b480e1f39659eca58b50772449236d8aa574670b5dcd0e13e659fb879952225b0a67f32f350f9beb6b822045d504ba3f2a46efcba2ebea15bcdd1d7b5b5e3b9d6c30d049751fc89ecf7074b3d569d58420f8c96769749dbdf67ac49877b1b2ef6db84cd9cb890c40567955252231238a5c024298782bb6e0094fedbdf86e5cb1bbcb9431803720088a901685e4448b8836a6308f3551301bca7ce7b231b49d150096ab1221ab0230b1d7b805c237d793857f2aa0dee686e92596b8f27ba23fe0fa0339968fc609ee2f96ffb72df346e0ce9d48b8f9a8d48d340a908eb51bb71a0ed9c194556df9d29b1e2294c8092ab2bf0190df5214cac1f55394729347d3ce660055e33c00cf01a31df853f42c67a43e32eae6babce7719983b612049208aaf815567824cf611df87c4fb504362c9f52f23ec401fdfefb369745fe0bc8b3af2b060c4e735eb2d805f3ca54234296e262187fc82cfb14a561f0958b6cce655d04521e13d2af1405a9c693c0c6558738564f0649d166c0948280f10012678f291b22df67b3af35a126bef1031127854478e0e0e8b3e4c3b36923820f0b30ca01b63c61a3b9bf464c3cd6847f8edcc42e68634b495fdc44b6b0979ea4beabe37e3b069acf48270bc4d6936bf0f0ee64bccb647088b67e162f34ed8138269184adb31a6b24d086e9acded30759d5a8bee8709ee9611836f68b699a8fc01f4494de0023f66a283d78af0f4fb30ae69b0d8fb2b8f494e67bd6e58d44ba086ef35da4787aa7487c86437bc4e1fd4555ab412f5199eff6d833ce2507f376712508475592c9f8c4dc90a343f8103803f02e7d755845608c42fa800c4523e5ca30f5144b62430c162219a19ff5d914deaed9580bd26c5e7be0e0c2fa5ea44d2c13e9b0919f497f3b596d522c17a3c5c704cca6b9700aed82529dc5f27e44394c614dc5f175482a56087b829223ded65779e1b5ebf980a4ca17577d3cc7006efb3040cb31e6b53c17d36c1c9b2f05bcc1d5e13640817e9e13faff081413c351635e4d9f20876096f0bfd686a0c04a72657db119bb53e3a9a07501a1b429c686390d72bebf7f1bb10a0d1a67a76221a051f7f6d81a5d2ac3d450ae279d45c7412ead267c0893ec4f835aef69057c8cfbe8fbb4d32b42c033a0f0501377865470b3610dc64f09122e4464d1056a442a873e7a50ba065623a94bd8a75298968c83cb4ac4fce476ae289d8d11fc242a3d77d9f69799527e4d29c6d3098a3b22abeb1871b683502028e4824a42fdbb77ae5a52633f880284de0e8139576888c35da1d190b87cd1bf7c5961e00576cae648995d8ef82f270af51157521c20e482b8694326de3eba3e1793767a2c5c26025bc13450b8782180edff0d7e93019f1b2106cf28640a516360e552c330a02fd305c7628be3911800684849d48389f0c3425a7e9648b3cff8b4866360bb4ddd8aad451415d1a12622cb6510e652d0173e01c55efddb751421f8fa0cfc5b72fe31b0b7311c12e2486c03740502701f9df3fdc5227a80628745ade50426dafcf24b8eae455c20f536edf273467a5a5d6e05d3eaa7830f2eba2a4d8dd188505761e7499769675753af9d6a420f1863f78969e546e5cd533c12cd2596a54c16854f1c20f140c4b2e6d4ea101fbdb6196805aeed1f7f5aab941acc7da2eb11dc9a6099fc6092ff0e2ed51720099b5b6112bbeecb12c952a244926a160b3370f4bb16bd9796181c7ee910279d9374573c26bbcb5088d41d014a186b0029587ad0bf1842e1e90b9bcf1e7a5c51e338f088231e740d5128b050d507602bbf50c55715adce9a9ad3604c33ac509c7f9ebadef815def8a97654e00288dc5fe2387d03ed001dfbc39b40341bf692bf0bf50c057086c28214167fbc3269a803f434db8911dfe8656343d4943cb66aef4e5a05c88e25b8d1c7bbb81adf75529ffc8161e201bf90a525e19d5b298ce5ee22de80b0ee9c282977458fe35fe79becee9dff8168731564cd429aa17e7ed200c687f6608d0ba48dd3524e8b01f0e71954838ebb83ac2f362b99d014b1eb3d75c87a92637530ed1dc8aa57fcf2a58340be97ac57863cf965a50961ecf5c2e093ddde3dfb2fdec2a8af07ce9fcf0a390c20deb654f79d6a26a2eb13a603cef6798162afe2588375e4b379c318a0ddf7b6b2c33e665209670d6adf21e078e0fc7282116de63b986538ddc0b29e0671c4e312faca1705fb709f2df92ecd018375db6d60cc7ea3092223caeb004b867e577812ce26ac35448b89e59ffa11d433d2f14dc9b76579d42142e4f98b8764346bf153af1653a619d3fde5dc8c59410140b8afe3d332fa40c1560422bc126f4a84dffb1f3af3ae1f4de05a9457722ccceb0ff1f10e1e1f5c71db8748c3fd28c42cb804ed61f252d99a52d22f7243c1efe25b60cfdeeb2a888019deaea9fecfdc39cb4751cbe9c55c7984872f02abab9010c54fd6faa4e0ef223f4a735c9dfec2e876392af4c24b4cfeb3e974bab574ba1a58c9d6f71f59a68b89a6fd96a8c1cf4c9864933e4943f27fd677b388f2edb8fe01510d25502141d57ad7bc826572e2f707a5f30528fc", 0x1000, 0x851a}], 0x1000120, &(0x7f0000001980)=ANY=[@ANYBLOB="9e2c002c402c2c002c6d61736b3d5e4d41595f524541442c736d61636b66737472616e736d7574653d2e2d255d244027b42b0f293a3a3a28242ad8405b2e252c736d61636b6673726f6f743d002c66756e633d4b455845435f494e495452414d46535f434845434b2c666f776e65723cb6f0180aaa610e8a4a52b9148edfdcc1b1dfabba2ea5fb7b0ad28ab4ca5ba9c702ba86ee85f1c917136292467cfe634f5863", @ANYRESDEC, @ANYBLOB=',\x00']) lseek(r8, 0x1, 0x0) close(r0) 19:41:36 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f0000000240)={0x0, 0x0, 0x6}, &(0x7f0000682000/0x1000)=nil, &(0x7f000043f000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x0, 0xddd0, 0x1, 0x0, 0x80040) dup3(r4, r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 19:41:36 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/28, 0x1c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 19:41:36 executing program 2: r0 = syz_io_uring_setup(0x7784, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000ee5000/0x4000)=nil, 0x4000, 0x8, 0x10, r3, 0x5320f000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0xffffffffffffffff, &(0x7f0000000000)=""/69, 0x45}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r8, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r11, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r13 = open_tree(r5, &(0x7f00000008c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000003c0)="485f4f82cd939cf0083e3dfe536ea26d1d5ceda677a7b64d95837299feee4e1c961c4e3beab8ffb1355327788df185e4ea3fe62f59d156b75ccdd68aee323d69218c7932497d850d40dd2a3a65a175f4471ba350275e369ce93acabc6ba72bee2eee538016a817151ef6f396ba8ecf3798eda990d85f0fc3c68b65382a0f0deb66d47e41f77d18344b7bc42f6d875cd034e7d2fd62fa9e3bb42d83d1b4e4c10606c74f2bada3e9c24c56ad5be5883eb9469658eb909f103ba2928341caa69332b927a823bf3c3fcea56da32dd04196da480531a50f88b5118b15b4f18e92d10b058f46c846", 0xe5}, {&(0x7f00000004c0)="5e880f29dc93e258fc262d43e09856fe40699393ae1f6a8e7125f13da3062ca71fb5b9ed92aa253246e41b5c55ec2a06cb235b7cce3042dd6aeb842c8dad0f4e3c204b1ae42c1c23b9995b5d2ef7e6520211d5ec0fbc731d179541cd3041b017634513", 0x63}, {&(0x7f0000000540)="549590d3020ea0a0294f9d8cd1f68cd448171beeada64fd5d3639e8b2bee6508730b066a0013fb7134e938aa66e6f3e71d3d295bf6f841749bf8804ef5ca14d0b51c0793bfa3245d6eba5566bc792b24131614ebca3a8269c9b88aa6ae80c82df359a3b85fbf7cf22adfc1c7c4f010237305e01b2a568d11293ad5bc3642f5c630c50d838e7cc0dfbb88c4f7234792f880ce76890af7bc0c240c1f5a7cedb416eaeaf89d9c704efe5704e72b3c834f4bfb6c0834cf35dc474cfbb90d2a73ba456577d8bab1f2c36ab51c86926bbe70a71012c30920524ae972569b1b0ff7b69950a01b675c6aa1533e1bc1", 0xeb}, {&(0x7f0000000640)="30b55cbf8a9669ac6f3c92aa291ead22981735b695aa12320dc79d495bb65ae8169bd19df5df55d0a23d91318eda8b24652f4266740895254d052269e710242addb424092754a5ebccfa22693c6022f3d878cc087d0f8b50c9982bf8c657d8e3fc513ad6a981c60821a96baf9880a1221aa0195a32b83cf299b806b2f255631a27f31c2148f7387668940748d5b45e7f7fdf5b0bf38aac03b69cd5f0c53af4605202b1979a8bc486fad9130703892791ceefc8b5b648866cf25a47d93aa32c31d1761cf0b247c94a", 0x11a}, {&(0x7f0000000740)="a35a9487220c8e04410360205fd4ed82ee8e3c4ff5194d771f9e81dd712e03395a8929c03bff06825918f4ae30da00fbfd6c4f0d9d8987a5552f6230a3690fb69da4d040455c120e59e5b7da4a44c53bd314bcb15b4203a6a6dc86e7b5393a6ebdff14a4ed933cce1882103baabdcc435c54e9565a54a70dad51f93522d25d545f89332a0957fad8dea283b2d4e3b24d257a124d32b04b95e39ebeddbc917ab08e3eda7a95cf51e6caa9ac8f66a94af9083c69772ef763b83548df5f8bc76d1c", 0xc0}], 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c0000006bdda0000000000100000002000000", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r12, @ANYRES32=r3, @ANYRES32=r13, @ANYRES32=r5, @ANYRES32=r4], 0xe0, 0x24000000}, 0x0)