0x8002c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f0000000180))

07:58:20 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1}}, 0x18)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00'})

07:58:20 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1}}, 0x18)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000440)={0x1d, r7, 0x1, {0xddca6c09bce7a66d, 0x0, 0x3}, 0xff}, 0x18)

07:58:20 executing program 2:
syz_io_uring_setup(0x8002c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f0000000180))

07:58:20 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1}}, 0x18)
socket$can_j1939(0x1d, 0x2, 0x7)

07:58:20 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x8000, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x7a71, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e8d000/0x12000)=nil, &(0x7f0000000240), &(0x7f0000000200))

07:58:20 executing program 0:
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x804, 0x0)
mmap$binder(&(0x7f0000a7d000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x804, 0x0) (async)
mmap$binder(&(0x7f0000a7d000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) (async)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async)

07:58:20 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) (async, rerun: 64)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000080)={0xfe, 0x4, 0x8})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:20 executing program 2:
syz_io_uring_setup(0x8002c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000140), 0x0)

07:58:20 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$qrtrtun(&(0x7f0000f5b000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x1)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x80, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x45}, 0x4)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ce7000/0x3000)=nil, 0x3000}})
mmap$usbfs(&(0x7f00008f7000/0x3000)=nil, 0x3000, 0xb, 0x50, 0xffffffffffffffff, 0x9)
syz_io_uring_setup(0x5d4f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:20 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0xa5d, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:20 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:20 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x8000, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x7a71, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e8d000/0x12000)=nil, &(0x7f0000000240), &(0x7f0000000200))
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x8000, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x7a71, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e8d000/0x12000)=nil, &(0x7f0000000240), &(0x7f0000000200)) (async)

07:58:20 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1}}, 0x18)

07:58:20 executing program 2:
syz_io_uring_setup(0x8002c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000140), 0x0)

07:58:20 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0xa5d, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0xa5d, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)

07:58:20 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:20 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8bf9, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x810, r1, 0x5f1d5000)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18)

07:58:20 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

07:58:20 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x8000, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x7a71, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e8d000/0x12000)=nil, &(0x7f0000000240), &(0x7f0000000200))

07:58:20 executing program 2:
syz_io_uring_setup(0x8002c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000140), 0x0)

07:58:21 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5042, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00009af000/0x11000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0)
io_uring_setup(0x40f4, &(0x7f0000000100)={0x0, 0xcbb2, 0x1, 0x3, 0x385, 0x0, r1})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

07:58:21 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0xa5d, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0xa5d, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)

07:58:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

07:58:21 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:21 executing program 2:
syz_io_uring_setup(0x5048, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1000, 0xfffffffc}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f00001a7000/0xc00000)=nil, &(0x7f0000a15000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:21 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_io_uring_setup(0x687d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:21 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5042, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00009af000/0x11000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0)
io_uring_setup(0x40f4, &(0x7f0000000100)={0x0, 0xcbb2, 0x1, 0x3, 0x385, 0x0, r1})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x5042, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00009af000/0x11000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0) (async)
io_uring_setup(0x40f4, &(0x7f0000000100)={0x0, 0xcbb2, 0x1, 0x3, 0x385, 0x0, r1}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)

07:58:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

07:58:21 executing program 2:
r0 = syz_io_uring_setup(0x5048, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1000, 0xfffffffc}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f00001a7000/0xc00000)=nil, &(0x7f0000a15000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:21 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x29fe, 0x10, 0x2}, &(0x7f0000831000/0x1000)=nil, &(0x7f0000a7d000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:21 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3) (async)
syz_io_uring_setup(0x687d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)

07:58:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

07:58:21 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5042, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00009af000/0x11000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0)
io_uring_setup(0x40f4, &(0x7f0000000100)={0x0, 0xcbb2, 0x1, 0x3, 0x385, 0x0, r1})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x5042, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00009af000/0x11000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0) (async)
io_uring_setup(0x40f4, &(0x7f0000000100)={0x0, 0xcbb2, 0x1, 0x3, 0x385, 0x0, r1}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:21 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r1=>0x0})
r2 = syz_io_uring_setup(0x7a5b, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x3, 0x12a, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340))
syz_io_uring_setup(0x200, &(0x7f0000000380)={0x0, 0xa2a9, 0x8, 0x3, 0x2be, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440))
move_pages(r1, 0x4, &(0x7f00000001c0)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6)

07:58:21 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x29fe, 0x10, 0x2}, &(0x7f0000831000/0x1000)=nil, &(0x7f0000a7d000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x29fe, 0x10, 0x2}, &(0x7f0000831000/0x1000)=nil, &(0x7f0000a7d000/0x2000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:21 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_open_dev$tty1(0xc, 0x4, 0x3) (async)
syz_io_uring_setup(0x687d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)

07:58:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
socket$can_j1939(0x1d, 0x2, 0x7)

07:58:21 executing program 2:
r0 = syz_io_uring_setup(0x5048, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1000, 0xfffffffc}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f00001a7000/0xc00000)=nil, &(0x7f0000a15000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r3, 0x0, 0x0)

07:58:21 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5ece, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:21 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000280)={0x0, 0x4, r0, 0x1, 0x80000})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000faf000/0x4000)=nil, 0x4000, 0x2000004, r1)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0))
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300))
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$usbfs(&(0x7f0000dc9000/0x4000)=nil, 0x4000, 0x2, 0x4010, 0xffffffffffffffff, 0x10000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x7165, &(0x7f00000000c0)={0x0, 0x6f5b, 0x1, 0x40000000, 0x15, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000949000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240))

07:58:21 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x29fe, 0x10, 0x2}, &(0x7f0000831000/0x1000)=nil, &(0x7f0000a7d000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x29fe, 0x10, 0x2}, &(0x7f0000831000/0x1000)=nil, &(0x7f0000a7d000/0x2000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))

07:58:21 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async, rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000280)={0x0, 0x4, r0, 0x1, 0x80000}) (rerun: 64)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r1 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000faf000/0x4000)=nil, 0x4000, 0x2000004, r1) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0)) (async, rerun: 32)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) (async)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$usbfs(&(0x7f0000dc9000/0x4000)=nil, 0x4000, 0x2, 0x4010, 0xffffffffffffffff, 0x10000) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x7165, &(0x7f00000000c0)={0x0, 0x6f5b, 0x1, 0x40000000, 0x15, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000949000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240))

07:58:21 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x2000004, 0x2, 0x40)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000cf4000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))
socket$can_j1939(0x1d, 0x2, 0x7)

07:58:21 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5ece, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:21 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0x8000000000000000, 0x20)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffff7f)

07:58:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)

07:58:21 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x2000004, 0x2, 0x40)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000cf4000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
remap_file_pages(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x2000004, 0x2, 0x40) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x802, 0x0) (async)
mmap$binder(&(0x7f0000cf4000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:21 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000280)={0x0, 0x4, r0, 0x1, 0x80000})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r1 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000faf000/0x4000)=nil, 0x4000, 0x2000004, r1) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0))
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) (async)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$usbfs(&(0x7f0000dc9000/0x4000)=nil, 0x4000, 0x2, 0x4010, 0xffffffffffffffff, 0x10000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x7165, &(0x7f00000000c0)={0x0, 0x6f5b, 0x1, 0x40000000, 0x15, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000949000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240))

07:58:21 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x7}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)

07:58:21 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5ece, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5ece, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)

07:58:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))

07:58:21 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
remap_file_pages(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x2000004, 0x2, 0x40)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x802, 0x0) (rerun: 64)
mmap$binder(&(0x7f0000cf4000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:21 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)

07:58:21 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)

07:58:21 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xebd8, 0x0, 0x0, 0x169}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000480))

07:58:21 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:21 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:21 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
io_uring_setup(0x7885, &(0x7f00000000c0)={0x0, 0xc19f, 0x20, 0x1, 0x170, 0x0, r0})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000cc7000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x10000000)

07:58:21 executing program 4:
socketpair(0xa, 0x3, 0xd4, &(0x7f0000000300))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)

07:58:22 executing program 2:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000001440))
ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pselect6(0x40, &(0x7f0000000040)={0x6, 0x7, 0x401, 0x1, 0x118, 0x7, 0x8, 0x81}, &(0x7f0000000080)={0x7fff, 0x4, 0x10000, 0x800, 0x40, 0x3, 0x2, 0x1}, &(0x7f00000000c0)={0x0, 0x7f, 0xffffffff, 0x0, 0xffffffff, 0xd9, 0x9, 0xcd2}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x800]}, 0x8})
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 4:
socketpair(0xa, 0x3, 0xd4, &(0x7f0000000300)) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 2:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000001440))
ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pselect6(0x40, &(0x7f0000000040)={0x6, 0x7, 0x401, 0x1, 0x118, 0x7, 0x8, 0x81}, &(0x7f0000000080)={0x7fff, 0x4, 0x10000, 0x800, 0x40, 0x3, 0x2, 0x1}, &(0x7f00000000c0)={0x0, 0x7f, 0xffffffff, 0x0, 0xffffffff, 0xd9, 0x9, 0xcd2}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x800]}, 0x8})
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
io_uring_setup(0x7885, &(0x7f00000000c0)={0x0, 0xc19f, 0x20, 0x1, 0x170, 0x0, r0})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000cc7000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x10000000)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x7885, &(0x7f00000000c0)={0x0, 0xc19f, 0x20, 0x1, 0x170, 0x0, r0}) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000cc7000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x10000000) (async)

07:58:22 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 4:
socketpair(0xa, 0x3, 0xd4, &(0x7f0000000300))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
socketpair(0xa, 0x3, 0xd4, &(0x7f0000000300)) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:22 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 2:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000001440))
ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pselect6(0x40, &(0x7f0000000040)={0x6, 0x7, 0x401, 0x1, 0x118, 0x7, 0x8, 0x81}, &(0x7f0000000080)={0x7fff, 0x4, 0x10000, 0x800, 0x40, 0x3, 0x2, 0x1}, &(0x7f00000000c0)={0x0, 0x7f, 0xffffffff, 0x0, 0xffffffff, 0xd9, 0x9, 0xcd2}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0x800]}, 0x8})
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
io_uring_setup(0x7885, &(0x7f00000000c0)={0x0, 0xc19f, 0x20, 0x1, 0x170, 0x0, r0}) (async, rerun: 64)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000cc7000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x10000000)

07:58:22 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 2:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000001440))
ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ed1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3, 0x0, &(0x7f0000000640)=""/42, 0x2a}, &(0x7f00000006c0)=0x40)
syz_io_uring_setup(0x4a1c, &(0x7f0000000400)={0x0, 0x584e, 0x20, 0x1, 0x17, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ee8000/0x11000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000a0a000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r0, 0x0)
r2 = syz_io_uring_setup(0x544, &(0x7f0000000380)={0x0, 0x11b8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000abb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000180))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_setup(0x53c9, &(0x7f00000002c0)={0x0, 0xc75c, 0x0, 0x0, 0xdd, 0x0, r2})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0)
syz_io_uring_setup(0x12cc, &(0x7f0000000100)={0x0, 0x13dc, 0x4, 0x1, 0x1b1, 0x0, r5}, &(0x7f0000f5b000/0x3000)=nil, &(0x7f00009dd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280))
shmget$private(0x0, 0x4000, 0x8, &(0x7f00009f6000/0x4000)=nil)

07:58:22 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xffff5f4a}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ed1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3, 0x0, &(0x7f0000000640)=""/42, 0x2a}, &(0x7f00000006c0)=0x40)
syz_io_uring_setup(0x4a1c, &(0x7f0000000400)={0x0, 0x584e, 0x20, 0x1, 0x17, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ee8000/0x11000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000a0a000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r0, 0x0)
r2 = syz_io_uring_setup(0x544, &(0x7f0000000380)={0x0, 0x11b8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000abb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000180))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_setup(0x53c9, &(0x7f00000002c0)={0x0, 0xc75c, 0x0, 0x0, 0xdd, 0x0, r2})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0)
syz_io_uring_setup(0x12cc, &(0x7f0000000100)={0x0, 0x13dc, 0x4, 0x1, 0x1b1, 0x0, r5}, &(0x7f0000f5b000/0x3000)=nil, &(0x7f00009dd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280))
shmget$private(0x0, 0x4000, 0x8, &(0x7f00009f6000/0x4000)=nil)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ed1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3, 0x0, &(0x7f0000000640)=""/42, 0x2a}, &(0x7f00000006c0)=0x40) (async)
syz_io_uring_setup(0x4a1c, &(0x7f0000000400)={0x0, 0x584e, 0x20, 0x1, 0x17, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ee8000/0x11000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000a0a000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r0, 0x0) (async)
syz_io_uring_setup(0x544, &(0x7f0000000380)={0x0, 0x11b8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000abb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
io_uring_setup(0x53c9, &(0x7f00000002c0)={0x0, 0xc75c, 0x0, 0x0, 0xdd, 0x0, r2}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) (async)
syz_io_uring_setup(0x12cc, &(0x7f0000000100)={0x0, 0x13dc, 0x4, 0x1, 0x1b1, 0x0, r5}, &(0x7f0000f5b000/0x3000)=nil, &(0x7f00009dd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async)
shmget$private(0x0, 0x4000, 0x8, &(0x7f00009f6000/0x4000)=nil) (async)

07:58:22 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 2:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000001440))
ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 1:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ed1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3, 0x0, &(0x7f0000000640)=""/42, 0x2a}, &(0x7f00000006c0)=0x40)
syz_io_uring_setup(0x4a1c, &(0x7f0000000400)={0x0, 0x584e, 0x20, 0x1, 0x17, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ee8000/0x11000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000a0a000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r0, 0x0)
r2 = syz_io_uring_setup(0x544, &(0x7f0000000380)={0x0, 0x11b8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000abb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000180))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_setup(0x53c9, &(0x7f00000002c0)={0x0, 0xc75c, 0x0, 0x0, 0xdd, 0x0, r2})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0)
syz_io_uring_setup(0x12cc, &(0x7f0000000100)={0x0, 0x13dc, 0x4, 0x1, 0x1b1, 0x0, r5}, &(0x7f0000f5b000/0x3000)=nil, &(0x7f00009dd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280))
shmget$private(0x0, 0x4000, 0x8, &(0x7f00009f6000/0x4000)=nil)

07:58:22 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 2:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000001440))
ptrace$getenv(0x4201, r0, 0x2, &(0x7f0000000000))
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xfffffffe}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x6e2, &(0x7f0000000300)={0x0, 0xe40a, 0x20, 0x1, 0x376}, &(0x7f000089a000/0x3000)=nil, &(0x7f0000a1a000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
io_uring_setup(0x1498, &(0x7f0000000280)={0x0, 0x9034, 0x0, 0x3, 0x2c9, 0x0, r0})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x402100, 0x0)
mmap$snddsp_control(&(0x7f0000c32000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r1, 0x83000000)
mmap$binder(&(0x7f0000e4a000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2)
r2 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8f}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$qrtrtun(&(0x7f0000cc3000/0x3000)=nil, 0x3000, 0x6, 0x810, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4090)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x608081, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000480)={0x0, 0x1, 0xffffffffffffffff, 0x101, 0x80000})

07:58:22 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ed1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3, 0x0, &(0x7f0000000640)=""/42, 0x2a}, &(0x7f00000006c0)=0x40)
syz_io_uring_setup(0x4a1c, &(0x7f0000000400)={0x0, 0x584e, 0x20, 0x1, 0x17, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ee8000/0x11000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000a0a000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r0, 0x0)
r2 = syz_io_uring_setup(0x544, &(0x7f0000000380)={0x0, 0x11b8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000abb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000180))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_setup(0x53c9, &(0x7f00000002c0)={0x0, 0xc75c, 0x0, 0x0, 0xdd, 0x0, r2})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0)
syz_io_uring_setup(0x12cc, &(0x7f0000000100)={0x0, 0x13dc, 0x4, 0x1, 0x1b1, 0x0, r5}, &(0x7f0000f5b000/0x3000)=nil, &(0x7f00009dd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280))
shmget$private(0x0, 0x4000, 0x8, &(0x7f00009f6000/0x4000)=nil)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ed1000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3, 0x0, &(0x7f0000000640)=""/42, 0x2a}, &(0x7f00000006c0)=0x40) (async)
syz_io_uring_setup(0x4a1c, &(0x7f0000000400)={0x0, 0x584e, 0x20, 0x1, 0x17, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ee8000/0x11000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000a0a000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r0, 0x0) (async)
syz_io_uring_setup(0x544, &(0x7f0000000380)={0x0, 0x11b8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000abb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000180)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
io_uring_setup(0x53c9, &(0x7f00000002c0)={0x0, 0xc75c, 0x0, 0x0, 0xdd, 0x0, r2}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) (async)
syz_io_uring_setup(0x12cc, &(0x7f0000000100)={0x0, 0x13dc, 0x4, 0x1, 0x1b1, 0x0, r5}, &(0x7f0000f5b000/0x3000)=nil, &(0x7f00009dd000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async)
shmget$private(0x0, 0x4000, 0x8, &(0x7f00009f6000/0x4000)=nil) (async)

07:58:22 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xff0f404a}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:22 executing program 2:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000001440))
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 2:
getpid()
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xfffffffe}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x6e2, &(0x7f0000000300)={0x0, 0xe40a, 0x20, 0x1, 0x376}, &(0x7f000089a000/0x3000)=nil, &(0x7f0000a1a000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
io_uring_setup(0x1498, &(0x7f0000000280)={0x0, 0x9034, 0x0, 0x3, 0x2c9, 0x0, r0})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x402100, 0x0)
mmap$snddsp_control(&(0x7f0000c32000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r1, 0x83000000) (async)
mmap$binder(&(0x7f0000e4a000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2) (async)
r2 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8f}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 32)
mmap$qrtrtun(&(0x7f0000cc3000/0x3000)=nil, 0x3000, 0x6, 0x810, 0xffffffffffffffff, 0x0) (rerun: 32)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0x0) (async)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x608081, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000480)={0x0, 0x1, 0xffffffffffffffff, 0x101, 0x80000})

07:58:22 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 1:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xfffffffe}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x6e2, &(0x7f0000000300)={0x0, 0xe40a, 0x20, 0x1, 0x376}, &(0x7f000089a000/0x3000)=nil, &(0x7f0000a1a000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
io_uring_setup(0x1498, &(0x7f0000000280)={0x0, 0x9034, 0x0, 0x3, 0x2c9, 0x0, r0})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x402100, 0x0)
mmap$snddsp_control(&(0x7f0000c32000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r1, 0x83000000)
mmap$binder(&(0x7f0000e4a000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2)
r2 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8f}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$qrtrtun(&(0x7f0000cc3000/0x3000)=nil, 0x3000, 0x6, 0x810, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4090)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x608081, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000480)={0x0, 0x1, 0xffffffffffffffff, 0x101, 0x80000})

07:58:22 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = io_uring_setup(0x7c8f, &(0x7f0000000240)={0x0, 0x2455, 0x20, 0x1, 0x3d5, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x110, r0, 0x0)
r2 = syz_io_uring_setup(0xb55, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x1, 0x2, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e17000/0x2000)=nil, 0x2000, 0x0, 0x10010, r2, 0x0)
r3 = socket(0xb, 0x1, 0x9)
sendmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xff}, 0x18, &(0x7f0000000380)={&(0x7f0000000300)="2c87688404cab30f8c766bab72ae6b21372782c3965cdd199a3fa87c1cbc0c484e908ed94d3c0958eff1123d87b52b1a4bea2a74afd5163f2122550d3747fa146b28bc2a5a4498ef48f42a33af6090250969067d2285aa05b29516c65a8f5c568ff1f71a694203db320fefebe7", 0x6d}, 0x1, 0x0, 0x0, 0x5}, 0x80)
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r4, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000088b000/0x1000)=nil, 0x1000}, 0x4})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xb1b8, 0x0, 0x0, 0x1}, &(0x7f0000e18000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0)

07:58:22 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 2:
setresgid(0x0, 0xee01, 0xffffffffffffffff)

07:58:22 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x4a400fff}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x8, 0x5, 0x3, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x3de, 0x3}})

07:58:22 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x42000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:22 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0)

07:58:23 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0)

07:58:23 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xfffffffe}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x6e2, &(0x7f0000000300)={0x0, 0xe40a, 0x20, 0x1, 0x376}, &(0x7f000089a000/0x3000)=nil, &(0x7f0000a1a000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) (async)
io_uring_setup(0x1498, &(0x7f0000000280)={0x0, 0x9034, 0x0, 0x3, 0x2c9, 0x0, r0}) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x402100, 0x0)
mmap$snddsp_control(&(0x7f0000c32000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r1, 0x83000000) (async)
mmap$binder(&(0x7f0000e4a000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2)
r2 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8f}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
mmap$qrtrtun(&(0x7f0000cc3000/0x3000)=nil, 0x3000, 0x6, 0x810, 0xffffffffffffffff, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0x0) (async)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x608081, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000480)={0x0, 0x1, 0xffffffffffffffff, 0x101, 0x80000})

07:58:23 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
r1 = io_uring_setup(0x7c8f, &(0x7f0000000240)={0x0, 0x2455, 0x20, 0x1, 0x3d5, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x110, r0, 0x0)
r2 = syz_io_uring_setup(0xb55, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x1, 0x2, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e17000/0x2000)=nil, 0x2000, 0x0, 0x10010, r2, 0x0) (async)
r3 = socket(0xb, 0x1, 0x9)
sendmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xff}, 0x18, &(0x7f0000000380)={&(0x7f0000000300)="2c87688404cab30f8c766bab72ae6b21372782c3965cdd199a3fa87c1cbc0c484e908ed94d3c0958eff1123d87b52b1a4bea2a74afd5163f2122550d3747fa146b28bc2a5a4498ef48f42a33af6090250969067d2285aa05b29516c65a8f5c568ff1f71a694203db320fefebe7", 0x6d}, 0x1, 0x0, 0x0, 0x5}, 0x80) (async)
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r4, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000088b000/0x1000)=nil, 0x1000}, 0x4})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xb1b8, 0x0, 0x0, 0x1}, &(0x7f0000e18000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0)

07:58:23 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = io_uring_setup(0x7c8f, &(0x7f0000000240)={0x0, 0x2455, 0x20, 0x1, 0x3d5, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x110, r0, 0x0)
r2 = syz_io_uring_setup(0xb55, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x1, 0x2, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e17000/0x2000)=nil, 0x2000, 0x0, 0x10010, r2, 0x0)
r3 = socket(0xb, 0x1, 0x9)
sendmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xff}, 0x18, &(0x7f0000000380)={&(0x7f0000000300)="2c87688404cab30f8c766bab72ae6b21372782c3965cdd199a3fa87c1cbc0c484e908ed94d3c0958eff1123d87b52b1a4bea2a74afd5163f2122550d3747fa146b28bc2a5a4498ef48f42a33af6090250969067d2285aa05b29516c65a8f5c568ff1f71a694203db320fefebe7", 0x6d}, 0x1, 0x0, 0x0, 0x5}, 0x80)
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r4, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000088b000/0x1000)=nil, 0x1000}, 0x4})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xb1b8, 0x0, 0x0, 0x1}, &(0x7f0000e18000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x3f000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0)

07:58:23 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', 0x0})

07:58:23 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x3c000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = io_uring_setup(0x7c8f, &(0x7f0000000240)={0x0, 0x2455, 0x20, 0x1, 0x3d5, 0x0, r0}) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x110, r0, 0x0)
r2 = syz_io_uring_setup(0xb55, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x1, 0x2, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e17000/0x2000)=nil, 0x2000, 0x0, 0x10010, r2, 0x0) (async)
r3 = socket(0xb, 0x1, 0x9)
sendmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x1}, 0xff}, 0x18, &(0x7f0000000380)={&(0x7f0000000300)="2c87688404cab30f8c766bab72ae6b21372782c3965cdd199a3fa87c1cbc0c484e908ed94d3c0958eff1123d87b52b1a4bea2a74afd5163f2122550d3747fa146b28bc2a5a4498ef48f42a33af6090250969067d2285aa05b29516c65a8f5c568ff1f71a694203db320fefebe7", 0x6d}, 0x1, 0x0, 0x0, 0x5}, 0x80)
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r4, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000088b000/0x1000)=nil, 0x1000}, 0x4})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xb1b8, 0x0, 0x0, 0x1}, &(0x7f0000e18000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0)

07:58:23 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', 0x0})

07:58:23 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x36}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_io_uring_setup(0x3c36, &(0x7f00000000c0)={0x0, 0xca49, 0x20, 0x3, 0x5a, 0x0, r0}, &(0x7f00009f7000/0x3000)=nil, &(0x7f0000a4d000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:58:23 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5, <r0=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r0}, 0x4)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x320880, 0x0)
rt_sigreturn()
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000180)={0xfffffffd, 0x1c5, 0x10fc, 0x1, 0xc, "785707a528792df8c8a8bb8390769bddda11b2"})
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x5, 0x8, 0x51b})
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x5, 0x5, 0x6})
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16)

07:58:23 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', 0x0})

07:58:23 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:23 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x21010000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000b90000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/193, 0xc1, 0x0, &(0x7f00000000c0)=""/59, 0x3b}, &(0x7f0000000140)=0x40)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x218, &(0x7f0000000000)={0x0, 0xab0b, 0x10, 0x2, 0x275, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x10010, r1, 0x10000000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x8200, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280))

07:58:23 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
r0 = pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x3, 0x261, 0x1, {0x77359400}, {}, {0xfe, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0xd, 0x2, 0x0, 0x0, "53b6d607a35dd14e0df4726d1f8fe0a23401907e48aab26db0df13dff6d6b45aedc6888077d274b628af8ca0024cd0a05b128fcd888856746d052c3b57695ae6"}}, 0x80}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000800)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil)
pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000007, 0x810, 0xffffffffffffffff, 0x0)

07:58:23 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_io_uring_setup(0x3c36, &(0x7f00000000c0)={0x0, 0xca49, 0x20, 0x3, 0x5a, 0x0, r0}, &(0x7f00009f7000/0x3000)=nil, &(0x7f0000a4d000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:58:23 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:23 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000b90000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/193, 0xc1, 0x0, &(0x7f00000000c0)=""/59, 0x3b}, &(0x7f0000000140)=0x40)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_io_uring_setup(0x3c36, &(0x7f00000000c0)={0x0, 0xca49, 0x20, 0x3, 0x5a, 0x0, r0}, &(0x7f00009f7000/0x3000)=nil, &(0x7f0000a4d000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:58:23 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async, rerun: 64)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_io_uring_setup(0x3c36, &(0x7f00000000c0)={0x0, 0xca49, 0x20, 0x3, 0x5a, 0x0, r0}, &(0x7f00009f7000/0x3000)=nil, &(0x7f0000a4d000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:58:23 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
r0 = pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x3, 0x261, 0x1, {0x77359400}, {}, {0xfe, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0xd, 0x2, 0x0, 0x0, "53b6d607a35dd14e0df4726d1f8fe0a23401907e48aab26db0df13dff6d6b45aedc6888077d274b628af8ca0024cd0a05b128fcd888856746d052c3b57695ae6"}}, 0x80}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000800)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil)
pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000007, 0x810, 0xffffffffffffffff, 0x0)

07:58:23 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_io_uring_setup(0x3c36, &(0x7f00000000c0)={0x0, 0xca49, 0x20, 0x3, 0x5a, 0x0, r0}, &(0x7f00009f7000/0x3000)=nil, &(0x7f0000a4d000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:58:23 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
r0 = pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x3, 0x261, 0x1, {0x77359400}, {}, {0xfe, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0xd, 0x2, 0x0, 0x0, "53b6d607a35dd14e0df4726d1f8fe0a23401907e48aab26db0df13dff6d6b45aedc6888077d274b628af8ca0024cd0a05b128fcd888856746d052c3b57695ae6"}}, 0x80}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000800)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil)
pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000007, 0x810, 0xffffffffffffffff, 0x0)

07:58:23 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async, rerun: 64)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000b90000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/193, 0xc1, 0x0, &(0x7f00000000c0)=""/59, 0x3b}, &(0x7f0000000140)=0x40) (async, rerun: 64)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:23 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x20e17000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:23 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
r0 = pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x3, 0x261, 0x1, {0x77359400}, {}, {0xfe, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0xd, 0x2, 0x0, 0x0, "53b6d607a35dd14e0df4726d1f8fe0a23401907e48aab26db0df13dff6d6b45aedc6888077d274b628af8ca0024cd0a05b128fcd888856746d052c3b57695ae6"}}, 0x80}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000800)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil)
pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000005, r0)

07:58:23 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0xffff8f57}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:23 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x3, 0x261, 0x1, {0x77359400}, {}, {0xfe, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0xd, 0x2, 0x0, 0x0, "53b6d607a35dd14e0df4726d1f8fe0a23401907e48aab26db0df13dff6d6b45aedc6888077d274b628af8ca0024cd0a05b128fcd888856746d052c3b57695ae6"}}, 0x80}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000800)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil)

07:58:23 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e77000/0x1000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00009b5000/0x4000)=nil})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x0, 0xae00})

07:58:23 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:23 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:23 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x18000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000863000/0x4000)=nil, 0x4000, 0xf, 0x20010, r0, 0x100000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:23 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x3, 0x261, 0x1, {0x77359400}, {}, {0xfe, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0xd, 0x2, 0x0, 0x0, "53b6d607a35dd14e0df4726d1f8fe0a23401907e48aab26db0df13dff6d6b45aedc6888077d274b628af8ca0024cd0a05b128fcd888856746d052c3b57695ae6"}}, 0x80}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000800)

07:58:23 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xffff8000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000863000/0x4000)=nil, 0x4000, 0xf, 0x20010, r0, 0x100000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (rerun: 64)

07:58:24 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)

07:58:24 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e77000/0x1000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00009b5000/0x4000)=nil})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x0, 0xae00})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e77000/0x1000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00009b5000/0x4000)=nil}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x0, 0xae00}) (async)

07:58:24 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pkey_alloc(0x0, 0x3)

07:58:24 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xffff7f40}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pkey_alloc(0x0, 0x3)

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e77000/0x1000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00009b5000/0x4000)=nil})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x0, 0xae00})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000e77000/0x1000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00009b5000/0x4000)=nil}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) (async)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x1, 0x0, 0xae00}) (async)

07:58:24 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000863000/0x4000)=nil, 0x4000, 0xf, 0x20010, r0, 0x100000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
mmap$xdp(&(0x7f0000863000/0x4000)=nil, 0x4000, 0xf, 0x20010, r0, 0x100000000) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:24 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
pkey_alloc(0x0, 0x3)

07:58:24 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000140)={0x536596f5, 0x2, 0x9, 0x0, 0xa, "1e972976cd3fa47d4e98118a0c0bea4e1d5696"})
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x30, 0xffffffffffffffff, 0x180000000)
socket$caif_stream(0x25, 0x1, 0x1)
madvise(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x12)
r0 = syz_io_uring_setup(0x1967, &(0x7f0000000040)={0x0, 0x3d8a, 0x2a, 0x3, 0x25e}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r0, 0x0)

07:58:24 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000af9000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x8000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x400, 0x0, 0x0, 0x9}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)

07:58:24 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000af9000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x8000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000af9000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x8000000) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:24 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x400, 0x0, 0x0, 0x9}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3798b0f3307ff892, &(0x7f0000fff000/0x1000)=nil)
pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)

07:58:24 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000af9000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x8000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x400, 0x0, 0x0, 0x9}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 5:
pkey_alloc(0x0, 0x1)
pkey_alloc(0x0, 0x3)

07:58:24 executing program 5:
pkey_alloc(0x0, 0x0)
pkey_alloc(0x0, 0x3)

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x1000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x6a7, 0x0)

07:58:24 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00') (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 5:
pkey_alloc(0x0, 0x0)
pkey_alloc(0x0, 0x0)

07:58:24 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x6a7, 0x0)

07:58:24 executing program 4:
r0 = syz_io_uring_setup(0x2e33, &(0x7f0000000040)={0x0, 0x7d, 0x1, 0x0, 0x20}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d72000/0xa000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x74ad, &(0x7f0000000180)={0x0, 0x3992, 0x8, 0x1, 0x3d9, 0x0, r0}, &(0x7f0000c3b000/0x1000)=nil, &(0x7f0000ecf000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280))
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ab2000/0x3000)=nil})
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0)={0x0, 0xbce9, 0x0, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
personality(0x4000000)

07:58:24 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:24 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:24 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
mmap$snddsp_status(&(0x7f0000fd1000/0x3000)=nil, 0x1000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x82000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1b, 0x309640)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000c00000/0x400000)=nil})

07:58:25 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00') (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:25 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x6a7, 0x0)

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
mmap$snddsp_status(&(0x7f0000fd1000/0x3000)=nil, 0x1000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x82000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1b, 0x309640)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000c00000/0x400000)=nil})

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x10001, 0x6a7, 0x0)

07:58:25 executing program 4:
r0 = syz_io_uring_setup(0x2e33, &(0x7f0000000040)={0x0, 0x7d, 0x1, 0x0, 0x20}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d72000/0xa000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 32)
syz_io_uring_setup(0x74ad, &(0x7f0000000180)={0x0, 0x3992, 0x8, 0x1, 0x3d9, 0x0, r0}, &(0x7f0000c3b000/0x1000)=nil, &(0x7f0000ecf000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async, rerun: 32)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ab2000/0x3000)=nil}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0)={0x0, 0xbce9, 0x0, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
personality(0x4000000)

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
mmap$snddsp_status(&(0x7f0000fd1000/0x3000)=nil, 0x1000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x82000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1b, 0x309640)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000c00000/0x400000)=nil})

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x6a7, 0x0)

07:58:25 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040), 0x6a7, 0x0)

07:58:25 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b21000/0x4000)=nil, 0x4000, 0x3000000, 0x10010, r0, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 4:
r0 = syz_io_uring_setup(0x2e33, &(0x7f0000000040)={0x0, 0x7d, 0x1, 0x0, 0x20}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d72000/0xa000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x74ad, &(0x7f0000000180)={0x0, 0x3992, 0x8, 0x1, 0x3d9, 0x0, r0}, &(0x7f0000c3b000/0x1000)=nil, &(0x7f0000ecf000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280))
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ab2000/0x3000)=nil})
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0)={0x0, 0xbce9, 0x0, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
personality(0x4000000)
syz_io_uring_setup(0x2e33, &(0x7f0000000040)={0x0, 0x7d, 0x1, 0x0, 0x20}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000d72000/0xa000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x74ad, &(0x7f0000000180)={0x0, 0x3992, 0x8, 0x1, 0x3d9, 0x0, r0}, &(0x7f0000c3b000/0x1000)=nil, &(0x7f0000ecf000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ab2000/0x3000)=nil}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0)={0x0, 0xbce9, 0x0, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
personality(0x4000000) (async)

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
mmap$snddsp_status(&(0x7f0000fd1000/0x3000)=nil, 0x1000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x82000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
syz_open_dev$dri(&(0x7f0000000040), 0x1b, 0x309640)

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x6a7, 0x0)

07:58:25 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040), 0x6a7, 0x0)

07:58:25 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b21000/0x4000)=nil, 0x4000, 0x3000000, 0x10010, r0, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
mmap$snddsp_status(&(0x7f0000fd1000/0x3000)=nil, 0x1000, 0x3000002, 0x2010, 0xffffffffffffffff, 0x82000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x6a7, 0x0)

07:58:25 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x400}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:25 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b21000/0x4000)=nil, 0x4000, 0x3000000, 0x10010, r0, 0x0) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040), 0x6a7, 0x0)

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040), 0x6a7, 0x0)

07:58:25 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x400}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:25 executing program 0:
syz_io_uring_setup(0xd04a, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x4}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000855000/0x4000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf2502000000080003000000000008000200080000000800030003000000080003000000000008000300060000000800030006000000"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x10)

07:58:25 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x0, 0x0)

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040), 0x6a7, 0x0)

07:58:25 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x0, 0x0)

07:58:25 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x400}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:25 executing program 0:
syz_io_uring_setup(0xd04a, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x4}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000855000/0x4000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf2502000000080003000000000008000200080000000800030003000000080003000000000008000300060000000800030006000000"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x10)

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040), 0x6a7, 0x0)

07:58:25 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x0, 0x0)

07:58:25 executing program 4:
syz_io_uring_setup(0x4c3c, &(0x7f0000000040), &(0x7f0000dc6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x0, 0x0)

07:58:25 executing program 0:
syz_io_uring_setup(0xd04a, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x4}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000855000/0x4000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (rerun: 64)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf2502000000080003000000000008000200080000000800030003000000080003000000000008000300060000000800030006000000"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x10)

07:58:25 executing program 4:
syz_io_uring_setup(0x4c3c, &(0x7f0000000040), &(0x7f0000dc6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x4c3c, &(0x7f0000000040), &(0x7f0000dc6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:25 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:25 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x0, 0x0)

07:58:25 executing program 4:
syz_io_uring_setup(0x4c3c, &(0x7f0000000040), &(0x7f0000dc6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) (async, rerun: 32)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 32)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:25 executing program 1:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040), 0x6a7, 0x0)

07:58:25 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x10001, 0x0, 0x0)

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0))
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:25 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x0, 0x3c2}, &(0x7f0000f70000/0x4000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1}}, 0x18)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0500020000000000060001000a00000014000400ff010000000000000000000000000001040001804800018008000700", @ANYRES32=0x0, @ANYBLOB="060005004e220000050002000000000014000400fc00000000000000000000000000000008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="060005004e2100000400018008000300020000003c00018014000400fe8000000000000000000000000000bb060005004e210000060005004e20000014000400000000000000000000000000000000000800020004000000080002000800000030000180080003000000000014000400fe8000000000000000000000000000aa080003007f000001060005004e220000"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

07:58:25 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x20000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:25 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 3:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 4:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
syz_open_dev$tty1(0xc, 0x4, 0x3)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)

07:58:26 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x0, 0x3c2}, &(0x7f0000f70000/0x4000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xfffffffe}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
r1 = io_uring_setup(0x3916, &(0x7f0000000040)={0x0, 0x3965, 0x0, 0x0, 0x357, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000006, 0x13, r1, 0x10000000)
openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

07:58:26 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 4:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:26 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 3:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x20e17000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x3c00}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0xffffffff, 0x0, 0x0, 0x3c2}, &(0x7f0000f70000/0x4000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 4:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:26 executing program 3:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080))
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)={0x2, 0x2})
r1 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r2 = syz_io_uring_setup(0x4177, &(0x7f00000000c0)={0x0, 0xe7a6, 0x8, 0x3, 0x1b1, 0x0, r1}, &(0x7f0000a84000/0x4000)=nil, &(0x7f0000b90000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 4:
syz_io_uring_setup(0x504c, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil})
r1 = syz_io_uring_setup(0x59bb, &(0x7f0000000100)={0x0, 0x716a, 0x8, 0x0, 0x59, 0x0, r0}, &(0x7f0000b96000/0x2000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280))
mmap$IORING_OFF_CQ_RING(&(0x7f0000a85000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r1, 0x8000000)

07:58:26 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2a00}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080))
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)={0x2, 0x2})
r1 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r2 = syz_io_uring_setup(0x4177, &(0x7f00000000c0)={0x0, 0xe7a6, 0x8, 0x3, 0x1b1, 0x0, r1}, &(0x7f0000a84000/0x4000)=nil, &(0x7f0000b90000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) (async)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)={0x2, 0x2}) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x4177, &(0x7f00000000c0)={0x0, 0xe7a6, 0x8, 0x3, 0x1b1, 0x0, r1}, &(0x7f0000a84000/0x4000)=nil, &(0x7f0000b90000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async)

07:58:26 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080))
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 4:
syz_io_uring_setup(0x504c, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil})
r1 = syz_io_uring_setup(0x59bb, &(0x7f0000000100)={0x0, 0x716a, 0x8, 0x0, 0x59, 0x0, r0}, &(0x7f0000b96000/0x2000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280))
mmap$IORING_OFF_CQ_RING(&(0x7f0000a85000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r1, 0x8000000)
syz_io_uring_setup(0x504c, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil}) (async)
syz_io_uring_setup(0x59bb, &(0x7f0000000100)={0x0, 0x716a, 0x8, 0x0, 0x59, 0x0, r0}, &(0x7f0000b96000/0x2000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000a85000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r1, 0x8000000) (async)

07:58:26 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2101}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)={0x2, 0x2})
r1 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r2 = syz_io_uring_setup(0x4177, &(0x7f00000000c0)={0x0, 0xe7a6, 0x8, 0x3, 0x1b1, 0x0, r1}, &(0x7f0000a84000/0x4000)=nil, &(0x7f0000b90000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) (async)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)={0x2, 0x2}) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x4177, &(0x7f00000000c0)={0x0, 0xe7a6, 0x8, 0x3, 0x1b1, 0x0, r1}, &(0x7f0000a84000/0x4000)=nil, &(0x7f0000b90000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async)

07:58:26 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 3:
syz_io_uring_setup(0x504a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 4:
syz_io_uring_setup(0x504c, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil}) (async, rerun: 32)
r1 = syz_io_uring_setup(0x59bb, &(0x7f0000000100)={0x0, 0x716a, 0x8, 0x0, 0x59, 0x0, r0}, &(0x7f0000b96000/0x2000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (rerun: 32)
mmap$IORING_OFF_CQ_RING(&(0x7f0000a85000/0x4000)=nil, 0x4000, 0x4, 0x4000010, r1, 0x8000000)

07:58:26 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 3:
syz_io_uring_setup(0x504a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x4200}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:26 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$qrtrtun(&(0x7f0000897000/0x2000)=nil, 0x2000, 0x300000e, 0x2010, 0xffffffffffffffff, 0x9)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
pkey_mprotect(&(0x7f0000e1b000/0x3000)=nil, 0x3000, 0x1000008, 0xffffffffffffffff)

07:58:26 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x8000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:26 executing program 3:
syz_io_uring_setup(0x504a, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:26 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:26 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$qrtrtun(&(0x7f0000897000/0x2000)=nil, 0x2000, 0x300000e, 0x2010, 0xffffffffffffffff, 0x9)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
pkey_mprotect(&(0x7f0000e1b000/0x3000)=nil, 0x3000, 0x1000008, 0xffffffffffffffff)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$qrtrtun(&(0x7f0000897000/0x2000)=nil, 0x2000, 0x300000e, 0x2010, 0xffffffffffffffff, 0x9) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
pkey_mprotect(&(0x7f0000e1b000/0x3000)=nil, 0x3000, 0x1000008, 0xffffffffffffffff) (async)

07:58:26 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)=0xff)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000003dacddf35ef655a919e93adeff03a2a4d26cf5955aaafb0cad021e065771f9c081c244b66abf89a7d6d37384e5a01592a4cd38ad75da8c0dac142cddec115ffe30af6fe760f215229ff18f6fab139df696990676178f737d918dde98eda8729451190367297aa66a34b1c1588e3c5d419e9399ad654ca9fdb40ae6528c5053f3fc6236f213dc2237ad2d3bf2fc05f09766bd878edff8cfb603a328e2fba704c5751068876eecfec1e3f738f0888b899573e6c68539f22074d7bfe1d7427031fc4586630918"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1)

07:58:26 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000fad000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:27 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$qrtrtun(&(0x7f0000897000/0x2000)=nil, 0x2000, 0x300000e, 0x2010, 0xffffffffffffffff, 0x9)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
pkey_mprotect(&(0x7f0000e1b000/0x3000)=nil, 0x3000, 0x1000008, 0xffffffffffffffff)

07:58:27 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:27 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)=0xff)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000003dacddf35ef655a919e93adeff03a2a4d26cf5955aaafb0cad021e065771f9c081c244b66abf89a7d6d37384e5a01592a4cd38ad75da8c0dac142cddec115ffe30af6fe760f215229ff18f6fab139df696990676178f737d918dde98eda8729451190367297aa66a34b1c1588e3c5d419e9399ad654ca9fdb40ae6528c5053f3fc6236f213dc2237ad2d3bf2fc05f09766bd878edff8cfb603a328e2fba704c5751068876eecfec1e3f738f0888b899573e6c68539f22074d7bfe1d7427031fc4586630918"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)=0xff) (async)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000003dacddf35ef655a919e93adeff03a2a4d26cf5955aaafb0cad021e065771f9c081c244b66abf89a7d6d37384e5a01592a4cd38ad75da8c0dac142cddec115ffe30af6fe760f215229ff18f6fab139df696990676178f737d918dde98eda8729451190367297aa66a34b1c1588e3c5d419e9399ad654ca9fdb40ae6528c5053f3fc6236f213dc2237ad2d3bf2fc05f09766bd878edff8cfb603a328e2fba704c5751068876eecfec1e3f738f0888b899573e6c68539f22074d7bfe1d7427031fc4586630918"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) (async)

07:58:27 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$qrtrtun(&(0x7f0000897000/0x2000)=nil, 0x2000, 0x300000e, 0x2010, 0xffffffffffffffff, 0x9)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
pkey_mprotect(&(0x7f0000e1b000/0x3000)=nil, 0x3000, 0x1000008, 0xffffffffffffffff)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$qrtrtun(&(0x7f0000897000/0x2000)=nil, 0x2000, 0x300000e, 0x2010, 0xffffffffffffffff, 0x9) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
pkey_mprotect(&(0x7f0000e1b000/0x3000)=nil, 0x3000, 0x1000008, 0xffffffffffffffff) (async)

07:58:27 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x42c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:27 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:27 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x7000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:27 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x42c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:27 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async, rerun: 32)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (rerun: 32)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000100)=0xff)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000003dacddf35ef655a919e93adeff03a2a4d26cf5955aaafb0cad021e065771f9c081c244b66abf89a7d6d37384e5a01592a4cd38ad75da8c0dac142cddec115ffe30af6fe760f215229ff18f6fab139df696990676178f737d918dde98eda8729451190367297aa66a34b1c1588e3c5d419e9399ad654ca9fdb40ae6528c5053f3fc6236f213dc2237ad2d3bf2fc05f09766bd878edff8cfb603a328e2fba704c5751068876eecfec1e3f738f0888b899573e6c68539f22074d7bfe1d7427031fc4586630918"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1)

07:58:27 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b67000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000240))
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

07:58:27 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:27 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x42c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:27 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:27 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b67000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r0, 0x0) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000240))
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) (async)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

07:58:27 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x42c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)

07:58:27 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:27 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b67000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000240))
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000b67000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r0, 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0) (async)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000240)) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) (async)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async)

07:58:27 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:27 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x42c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:27 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 4:
r0 = io_uring_setup(0x65ee, &(0x7f0000000240)={0x0, 0xda63, 0x8, 0xffffffff, 0x68})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x6ff2, 0x20, 0x0, 0x177, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r1, 0x10000000)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_setup(0x2d80, &(0x7f0000000300)={0x0, 0xbfda, 0x3, 0x2, 0x1e8, 0x0, r2})
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
r5 = syz_io_uring_setup(0x2c67, &(0x7f0000000400)={0x0, 0x1a11, 0x11, 0x1, 0x254, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000380), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00008a8000/0x3000)=nil})

07:58:28 executing program 1:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x42c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, 0x0, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c11000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='\x00')
mmap$usbfs(&(0x7f0000977000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r0, 0x100000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x270, 0x0, r0}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f00009a3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 1:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 4:
r0 = io_uring_setup(0x65ee, &(0x7f0000000240)={0x0, 0xda63, 0x8, 0xffffffff, 0x68})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x6ff2, 0x20, 0x0, 0x177, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r1, 0x10000000)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_setup(0x2d80, &(0x7f0000000300)={0x0, 0xbfda, 0x3, 0x2, 0x1e8, 0x0, r2})
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
r5 = syz_io_uring_setup(0x2c67, &(0x7f0000000400)={0x0, 0x1a11, 0x11, 0x1, 0x254, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000380), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00008a8000/0x3000)=nil})
io_uring_setup(0x65ee, &(0x7f0000000240)={0x0, 0xda63, 0x8, 0xffffffff, 0x68}) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x6ff2, 0x20, 0x0, 0x177, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r1, 0x10000000) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
io_uring_setup(0x2d80, &(0x7f0000000300)={0x0, 0xbfda, 0x3, 0x2, 0x1e8, 0x0, r2}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f0000000400)={0x0, 0x1a11, 0x11, 0x1, 0x254, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000380), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00008a8000/0x3000)=nil}) (async)

07:58:28 executing program 5:
syz_io_uring_setup(0x42c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, 0x0, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c11000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='\x00') (async)
mmap$usbfs(&(0x7f0000977000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r0, 0x100000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x270, 0x0, r0}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f00009a3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 2:
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 1:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 2:
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, 0x0, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 4:
r0 = io_uring_setup(0x65ee, &(0x7f0000000240)={0x0, 0xda63, 0x8, 0xffffffff, 0x68})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x6ff2, 0x20, 0x0, 0x177, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r1, 0x10000000)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
io_uring_setup(0x2d80, &(0x7f0000000300)={0x0, 0xbfda, 0x3, 0x2, 0x1e8, 0x0, r2})
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
r5 = syz_io_uring_setup(0x2c67, &(0x7f0000000400)={0x0, 0x1a11, 0x11, 0x1, 0x254, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000380), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00008a8000/0x3000)=nil})
io_uring_setup(0x65ee, &(0x7f0000000240)={0x0, 0xda63, 0x8, 0xffffffff, 0x68}) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x6ff2, 0x20, 0x0, 0x177, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x10, r1, 0x10000000) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
io_uring_setup(0x2d80, &(0x7f0000000300)={0x0, 0xbfda, 0x3, 0x2, 0x1e8, 0x0, r2}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f0000000400)={0x0, 0x1a11, 0x11, 0x1, 0x254, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000380), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00008a8000/0x3000)=nil}) (async)

07:58:28 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c11000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='\x00') (async, rerun: 64)
mmap$usbfs(&(0x7f0000977000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r0, 0x100000000) (rerun: 64)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x270, 0x0, r0}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f00009a3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, 0x0, &(0x7f0000000200))

07:58:28 executing program 2:
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = io_uring_setup(0x17d3, &(0x7f0000000180)={0x0, 0x7ea, 0x2, 0x1, 0x1d3, 0x0, r0})
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200))
syz_io_uring_setup(0x2734, &(0x7f0000000240)={0x0, 0x76da, 0x4, 0x0, 0x138, 0x0, r1}, &(0x7f0000f95000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000002c0))

07:58:28 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 5:
syz_io_uring_setup(0x42c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, 0x0, &(0x7f0000000200))

07:58:28 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3141, &(0x7f00000000c0)={0x0, 0xa161, 0x8, 0x2, 0xdc, 0x0, r0}, &(0x7f0000f54000/0x1000)=nil, &(0x7f0000d0a000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240))
mmap$IORING_OFF_SQES(&(0x7f0000c94000/0x1000)=nil, 0x1000, 0x200000d, 0x10, r1, 0x10000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r1 = io_uring_setup(0x17d3, &(0x7f0000000180)={0x0, 0x7ea, 0x2, 0x1, 0x1d3, 0x0, r0})
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x2734, &(0x7f0000000240)={0x0, 0x76da, 0x4, 0x0, 0x138, 0x0, r1}, &(0x7f0000f95000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000002c0))

07:58:28 executing program 5:
syz_io_uring_setup(0x42c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x0, 0x80})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 5:
syz_io_uring_setup(0x42c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, 0x0, &(0x7f0000000200))

07:58:28 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3141, &(0x7f00000000c0)={0x0, 0xa161, 0x8, 0x2, 0xdc, 0x0, r0}, &(0x7f0000f54000/0x1000)=nil, &(0x7f0000d0a000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240))
mmap$IORING_OFF_SQES(&(0x7f0000c94000/0x1000)=nil, 0x1000, 0x200000d, 0x10, r1, 0x10000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x3141, &(0x7f00000000c0)={0x0, 0xa161, 0x8, 0x2, 0xdc, 0x0, r0}, &(0x7f0000f54000/0x1000)=nil, &(0x7f0000d0a000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000c94000/0x1000)=nil, 0x1000, 0x200000d, 0x10, r1, 0x10000000) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:28 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = io_uring_setup(0x17d3, &(0x7f0000000180)={0x0, 0x7ea, 0x2, 0x1, 0x1d3, 0x0, r0})
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x2734, &(0x7f0000000240)={0x0, 0x76da, 0x4, 0x0, 0x138, 0x0, r1}, &(0x7f0000f95000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000002c0))

07:58:28 executing program 5:
syz_io_uring_setup(0x42c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000040))

07:58:28 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), 0x0)

07:58:28 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x3141, &(0x7f00000000c0)={0x0, 0xa161, 0x8, 0x2, 0xdc, 0x0, r0}, &(0x7f0000f54000/0x1000)=nil, &(0x7f0000d0a000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240))
mmap$IORING_OFF_SQES(&(0x7f0000c94000/0x1000)=nil, 0x1000, 0x200000d, 0x10, r1, 0x10000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 5:
syz_io_uring_setup(0x42c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000040))

07:58:28 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x200, 0x13, "47035abd1259f4df3b26193372f01cd4934395"})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:28 executing program 5:
syz_io_uring_setup(0x42c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000040))

07:58:28 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:28 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), 0x0)

07:58:28 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x200, 0x13, "47035abd1259f4df3b26193372f01cd4934395"}) (async, rerun: 32)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 32)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:29 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:29 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 5:
syz_io_uring_setup(0x42c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000040))

07:58:29 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:29 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:29 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x200, 0x13, "47035abd1259f4df3b26193372f01cd4934395"}) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), 0x0)

07:58:29 executing program 5:
syz_io_uring_setup(0x42c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)

07:58:29 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:29 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:29 executing program 3:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0xe000)=nil, 0xe000, &(0x7f0000000000)='\x00')
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:29 executing program 5:
syz_io_uring_setup(0x42c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)

07:58:29 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:29 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000d98000/0x3000)=nil, &(0x7f0000b48000/0x11000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xfffffff5, 0x8, 0xffffffff}, &(0x7f0000800000/0x800000)=nil, &(0x7f000090f000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
munmap(&(0x7f0000d6b000/0x7000)=nil, 0x7000)

07:58:29 executing program 2:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x0, 0x80})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:29 executing program 5:
syz_io_uring_setup(0x42c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)

07:58:29 executing program 3:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = io_uring_setup(0x17d3, &(0x7f0000000180)={0x0, 0x7ea, 0x2, 0x1, 0x1d3, 0x0, r0})
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200))
syz_io_uring_setup(0x2734, &(0x7f0000000240)={0x0, 0x76da, 0x4, 0x0, 0x138, 0x0, r1}, &(0x7f0000f95000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000002c0))

07:58:29 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:29 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000d98000/0x3000)=nil, &(0x7f0000b48000/0x11000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, 0x0, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xfffffff5, 0x8, 0xffffffff}, &(0x7f0000800000/0x800000)=nil, &(0x7f000090f000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 32)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 32)
munmap(&(0x7f0000d6b000/0x7000)=nil, 0x7000)

07:58:29 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x2e, 0x80})
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0xe2c, 0x6, 0x2, 0x3, 0x17, "412892abc30526eee325784d0dc9394eaa20a2"})
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:29 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2000000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000300)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:29 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x600}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000d98000/0x3000)=nil, &(0x7f0000b48000/0x11000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x60}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000b72000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=':\x00')
syz_io_uring_setup(0x5d4d, 0x0, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000300)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:29 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$binder(&(0x7f0000dae000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x70)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:29 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x121000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xfffffff5, 0x8, 0xffffffff}, &(0x7f0000800000/0x800000)=nil, &(0x7f000090f000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
munmap(&(0x7f0000d6b000/0x7000)=nil, 0x7000)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xfffffff5, 0x8, 0xffffffff}, &(0x7f0000800000/0x800000)=nil, &(0x7f000090f000/0x2000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
munmap(&(0x7f0000d6b000/0x7000)=nil, 0x7000) (async)

07:58:29 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:29 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000300)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:29 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:29 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$binder(&(0x7f0000dae000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x70)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$binder(&(0x7f0000dae000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x70) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:29 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0xfffffffc], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:29 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:29 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:29 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:29 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$binder(&(0x7f0000dae000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x70) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:29 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0xfffffffc], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:29 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
remap_file_pages(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0, 0xa6ac, 0x800)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r0)

07:58:29 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:29 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)

07:58:29 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:29 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0xfffffffc], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:29 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
remap_file_pages(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0, 0xa6ac, 0x800)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
remap_file_pages(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0, 0xa6ac, 0x800) (async)
pkey_alloc(0x0, 0x0) (async)
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r0) (async)

07:58:29 executing program 1:
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)

07:58:29 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x1000}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000f37000/0x3000)=nil, 0x3000, 0x1000009, 0x10, r0, 0x10000000)
r1 = io_uring_setup(0x3a93, &(0x7f00000000c0)={0x0, 0xedff, 0x2, 0x1, 0x1f4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000f3c000/0x4000)=nil, 0x4000, 0x2000008, 0x8010, r1, 0x0)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000b9e000/0x3000)=nil, 0x3000, 0x4, 0x8010, r2, 0x10000000)

07:58:30 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0xfffffffc], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, 0xffffffffffffffff, 0x8000000)

07:58:30 executing program 1:
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async, rerun: 64)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
remap_file_pages(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0, 0xa6ac, 0x800)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r0)

07:58:30 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x1000}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000f37000/0x3000)=nil, 0x3000, 0x1000009, 0x10, r0, 0x10000000)
r1 = io_uring_setup(0x3a93, &(0x7f00000000c0)={0x0, 0xedff, 0x2, 0x1, 0x1f4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000f3c000/0x4000)=nil, 0x4000, 0x2000008, 0x8010, r1, 0x0)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000b9e000/0x3000)=nil, 0x3000, 0x4, 0x8010, r2, 0x10000000)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x1000}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000f37000/0x3000)=nil, 0x3000, 0x1000009, 0x10, r0, 0x10000000) (async)
io_uring_setup(0x3a93, &(0x7f00000000c0)={0x0, 0xedff, 0x2, 0x1, 0x1f4}) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000f3c000/0x4000)=nil, 0x4000, 0x2000008, 0x8010, r1, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000b9e000/0x3000)=nil, 0x3000, 0x4, 0x8010, r2, 0x10000000) (async)

07:58:30 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000001000/0x1000)=nil)

07:58:30 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0xfffffffc], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, 0xffffffffffffffff, 0x8000000)

07:58:30 executing program 1:
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)

07:58:30 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000001000/0x1000)=nil)

07:58:30 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0xfffffffc], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, 0xffffffffffffffff, 0x8000000)

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:30 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x1000}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x10000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000f37000/0x3000)=nil, 0x3000, 0x1000009, 0x10, r0, 0x10000000) (async)
r1 = io_uring_setup(0x3a93, &(0x7f00000000c0)={0x0, 0xedff, 0x2, 0x1, 0x1f4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000f3c000/0x4000)=nil, 0x4000, 0x2000008, 0x8010, r1, 0x0) (async)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000b9e000/0x3000)=nil, 0x3000, 0x4, 0x8010, r2, 0x10000000)

07:58:30 executing program 5:
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000001000/0x1000)=nil)

07:58:30 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:30 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
io_uring_setup(0x9f7, &(0x7f00000000c0)={0x0, 0x9ab6, 0x0, 0x2, 0x137})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:30 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0xfffffffc], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 0:
mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@stats}, {@max={'max', 0x3d, 0xfffffffffffffe00}}, {@stats}, {@max={'max', 0x3d, 0xe3}}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x6}}], [{@dont_appraise}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@dont_appraise}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000d84000/0x1000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000a7d000/0x1000)=nil})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, 0xffffffffffffffff, 0x10000000)
move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0xfffffffc], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
io_uring_setup(0x9f7, &(0x7f00000000c0)={0x0, 0x9ab6, 0x0, 0x2, 0x137})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x9f7, &(0x7f00000000c0)={0x0, 0x9ab6, 0x0, 0x2, 0x137}) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:30 executing program 2:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 0:
mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@stats}, {@max={'max', 0x3d, 0xfffffffffffffe00}}, {@stats}, {@max={'max', 0x3d, 0xe3}}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x6}}], [{@dont_appraise}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@dont_appraise}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) (async, rerun: 32)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000d84000/0x1000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async, rerun: 32)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000a7d000/0x1000)=nil})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:30 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 5:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
io_uring_setup(0x9f7, &(0x7f00000000c0)={0x0, 0x9ab6, 0x0, 0x2, 0x137})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x9f7, &(0x7f00000000c0)={0x0, 0x9ab6, 0x0, 0x2, 0x137}) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:30 executing program 1:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:30 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 1:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:30 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x80000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 1:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:30 executing program 0:
mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@stats}, {@max={'max', 0x3d, 0xfffffffffffffe00}}, {@stats}, {@max={'max', 0x3d, 0xe3}}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x6}}], [{@dont_appraise}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@dont_appraise}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000d84000/0x1000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async, rerun: 32)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000a7d000/0x1000)=nil}) (async, rerun: 32)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 32)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:30 executing program 4:
r0 = io_uring_setup(0x3f78, &(0x7f00000000c0)={0x0, 0x866b, 0x10, 0x3, 0x27a})
mmap$IORING_OFF_SQES(&(0x7f0000e2d000/0x2000)=nil, 0x2000, 0x8, 0x20010, r0, 0x10000000)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3)
socketpair(0x5, 0x4, 0x5, &(0x7f0000000140))
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000240)={0xffffffffffffd495, 0x9})

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x8000000)

07:58:30 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:30 executing program 3:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x35}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x10)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:30 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, 0x0, &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:30 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:30 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x8000000)

07:58:30 executing program 4:
r0 = io_uring_setup(0x3f78, &(0x7f00000000c0)={0x0, 0x866b, 0x10, 0x3, 0x27a})
mmap$IORING_OFF_SQES(&(0x7f0000e2d000/0x2000)=nil, 0x2000, 0x8, 0x20010, r0, 0x10000000) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) (async)
socketpair(0x5, 0x4, 0x5, &(0x7f0000000140))
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000240)={0xffffffffffffd495, 0x9})

07:58:31 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x20000000)

07:58:31 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:31 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, 0x0, &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x8000000)

07:58:31 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, 0x0, &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:31 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 32)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x20000000)

07:58:31 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x8000000)

07:58:31 executing program 4:
r0 = io_uring_setup(0x3f78, &(0x7f00000000c0)={0x0, 0x866b, 0x10, 0x3, 0x27a})
mmap$IORING_OFF_SQES(&(0x7f0000e2d000/0x2000)=nil, 0x2000, 0x8, 0x20010, r0, 0x10000000) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r1 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) (async)
socketpair(0x5, 0x4, 0x5, &(0x7f0000000140)) (async)
ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000240)={0xffffffffffffd495, 0x9})

07:58:31 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:31 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x8000000)

07:58:31 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x8000000)

07:58:31 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:31 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:31 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x20000000)

07:58:31 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, 0xffffffffffffffff, 0x8000000)

07:58:31 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:31 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, 0xffffffffffffffff, 0x8000000)

07:58:31 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000)

07:58:31 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1000008, 0x8c990338ad101111, r0, 0x10000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x114}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0))

07:58:31 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:31 executing program 2:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)

07:58:31 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, 0xffffffffffffffff, 0x8000000)

07:58:31 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000)

07:58:31 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1000008, 0x8c990338ad101111, r0, 0x10000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x114}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0))
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1000008, 0x8c990338ad101111, r0, 0x10000000) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x114}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) (async)

07:58:31 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x846)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r2 = syz_io_uring_setup(0x242b, &(0x7f00000000c0)={0x0, 0x89d, 0x4, 0x1, 0x8, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000140), &(0x7f0000000240))
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000400)=0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000b2e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/110, 0x6e, 0x0, &(0x7f0000000300)=""/47, 0x2f}, &(0x7f0000000380)=0x40)
mmap$IORING_OFF_CQ_RING(&(0x7f0000cc9000/0x3000)=nil, 0x3000, 0x1000001, 0x10010, r2, 0x8000000)

07:58:31 executing program 2:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x8000000)

07:58:31 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)

07:58:31 executing program 2:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)

07:58:31 executing program 5:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:31 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:31 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x846) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r2 = syz_io_uring_setup(0x242b, &(0x7f00000000c0)={0x0, 0x89d, 0x4, 0x1, 0x8, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000140), &(0x7f0000000240)) (async, rerun: 32)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (rerun: 32)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000400)=0x1) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000b2e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/110, 0x6e, 0x0, &(0x7f0000000300)=""/47, 0x2f}, &(0x7f0000000380)=0x40) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000cc9000/0x3000)=nil, 0x3000, 0x1000001, 0x10010, r2, 0x8000000)

07:58:31 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)

07:58:31 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1000008, 0x8c990338ad101111, r0, 0x10000000) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x114}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0))

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000)

07:58:32 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)

07:58:32 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000cf8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000)

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x846)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r2 = syz_io_uring_setup(0x242b, &(0x7f00000000c0)={0x0, 0x89d, 0x4, 0x1, 0x8, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000140), &(0x7f0000000240))
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000400)=0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000b2e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/110, 0x6e, 0x0, &(0x7f0000000300)=""/47, 0x2f}, &(0x7f0000000380)=0x40)
mmap$IORING_OFF_CQ_RING(&(0x7f0000cc9000/0x3000)=nil, 0x3000, 0x1000001, 0x10010, r2, 0x8000000)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) (async)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x846) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x242b, &(0x7f00000000c0)={0x0, 0x89d, 0x4, 0x1, 0x8, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000140), &(0x7f0000000240)) (async)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000400)=0x1) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000b2e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/110, 0x6e, 0x0, &(0x7f0000000300)=""/47, 0x2f}, &(0x7f0000000380)=0x40) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000cc9000/0x3000)=nil, 0x3000, 0x1000001, 0x10010, r2, 0x8000000) (async)

07:58:32 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, 0xffffffffffffffff, 0x8000000)

07:58:32 executing program 0:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
getpid()
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x2f, 0x1, 0x5})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r1, 0x8000000)

07:58:32 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 0:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
getpid()
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
getpid() (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
getpid()
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 1:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
getpid()
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5049, &(0x7f0000000280)={0x0, 0x48a7, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x2c}}, 0x20000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x4a2, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5049, &(0x7f0000000280)={0x0, 0x48a7, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x2c}}, 0x20000000)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x5049, &(0x7f0000000280)={0x0, 0x48a7, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, 0x0, 0x0) (async)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x2c}}, 0x20000000) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:32 executing program 0:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)) (async)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
getpid()
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
getpid()
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080000}, 0x20000000)

07:58:32 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 4:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5049, &(0x7f0000000280)={0x0, 0x48a7, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, 0x0, 0x0) (async)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x2c}}, 0x20000000) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = io_uring_setup(0x6d5e, &(0x7f00000000c0)={0x0, 0x1d69, 0x10, 0x0, 0x16e})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
getpid()
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
r0 = io_uring_setup(0x6d5e, &(0x7f00000000c0)={0x0, 0x1d69, 0x10, 0x0, 0x16e})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 1:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = io_uring_setup(0x6d5e, &(0x7f00000000c0)={0x0, 0x1d69, 0x10, 0x0, 0x16e})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
getpid()

07:58:32 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
r0 = io_uring_setup(0x6d5e, &(0x7f00000000c0)={0x0, 0x1d69, 0x10, 0x0, 0x16e})
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async, rerun: 64)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:32 executing program 1:
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x16)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x61)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x6, 0x1ff, 0x2)

07:58:32 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:32 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:32 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0x8, 0x1})

07:58:32 executing program 1:
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x16)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x61)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x6, 0x1ff, 0x2)

07:58:32 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:33 executing program 1:
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x16)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x61)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x6, 0x1ff, 0x2)

07:58:33 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:33 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0x8, 0x1})

07:58:33 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)

07:58:33 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:33 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x8000000)

07:58:33 executing program 1:
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x16)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x61)

07:58:33 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:33 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)

07:58:33 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0x8, 0x1})

07:58:33 executing program 1:
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x16)

07:58:33 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000)

07:58:33 executing program 1:
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)

07:58:33 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:33 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:33 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = io_uring_setup(0x6b2c, &(0x7f00000000c0)={0x0, 0x59e8, 0x2, 0x3, 0x1ec})
syz_io_uring_setup(0x7a0e, &(0x7f0000000240)={0x0, 0xad7b, 0x8, 0x0, 0x112, 0x0, r0}, &(0x7f00008a5000/0x2000)=nil, &(0x7f0000cf4000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000002c0))
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:33 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:33 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000)

07:58:33 executing program 1:
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)

07:58:33 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:33 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = io_uring_setup(0x6b2c, &(0x7f00000000c0)={0x0, 0x59e8, 0x2, 0x3, 0x1ec})
syz_io_uring_setup(0x7a0e, &(0x7f0000000240)={0x0, 0xad7b, 0x8, 0x0, 0x112, 0x0, r0}, &(0x7f00008a5000/0x2000)=nil, &(0x7f0000cf4000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000002c0))
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (rerun: 64)

07:58:33 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:33 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000)

07:58:33 executing program 1:
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)

07:58:33 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:33 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:33 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:33 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:33 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000)

07:58:33 executing program 1:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:33 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000002c0))

07:58:33 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async, rerun: 64)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (rerun: 64)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:33 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = io_uring_setup(0x6b2c, &(0x7f00000000c0)={0x0, 0x59e8, 0x2, 0x3, 0x1ec})
syz_io_uring_setup(0x7a0e, &(0x7f0000000240)={0x0, 0xad7b, 0x8, 0x0, 0x112, 0x0, r0}, &(0x7f00008a5000/0x2000)=nil, &(0x7f0000cf4000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000002c0)) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:33 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000)

07:58:33 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:33 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000002c0))

07:58:33 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000)

07:58:33 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:33 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000)

07:58:33 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000)

07:58:33 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000002c0))

07:58:34 executing program 4:
syz_io_uring_setup(0x225c, &(0x7f00000000c0)={0x0, 0x3bf, 0x8}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000)

07:58:34 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x10000000)

07:58:34 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 5:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xd8e, 0x10, 0x4, 0x3}, &(0x7f0000c7f000/0x4000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280))
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)

07:58:34 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), 0x0)

07:58:34 executing program 4:
syz_io_uring_setup(0x225c, &(0x7f00000000c0)={0x0, 0x3bf, 0x8}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x225c, &(0x7f00000000c0)={0x0, 0x3bf, 0x8}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:34 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x10000000)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x10000000) (async)

07:58:34 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r2}, 0x10)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), 0x0)

07:58:34 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0x0, 0x3})
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:34 executing program 4:
syz_io_uring_setup(0x225c, &(0x7f00000000c0)={0x0, 0x3bf, 0x8}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x10000000)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x10000000) (async)

07:58:34 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), 0x0)

07:58:34 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000e3b000/0x1000)=nil, 0x1000}})

07:58:34 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x4200}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x1e}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r1, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000922000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000e3b000/0x1000)=nil, 0x1000}})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000e3b000/0x1000)=nil, 0x1000}}) (async)

07:58:34 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000e3b000/0x1000)=nil, 0x1000}})

07:58:34 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x200000a, 0x80010, 0xffffffffffffffff, 0x83000000)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)

07:58:34 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r1, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000922000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000922000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:34 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000e3b000/0x1000)=nil, 0x1000}})

07:58:34 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x3, 0x140)
ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffffe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:34 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000922000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000922000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:34 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000de1000/0x3000)=nil)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$qrtrtun(&(0x7f0000f6f000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, 0xffffffffffffffff, 0xe27)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

07:58:34 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x3000}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 1:
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 2:
connect$caif(0xffffffffffffffff, &(0x7f0000000240)=@util={0x25, "3028f63c4f428b3177fc682df0160c31"}, 0x18)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000de1000/0x3000)=nil) (async, rerun: 32)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 32)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 32)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (rerun: 32)
mmap$qrtrtun(&(0x7f0000f6f000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, 0xffffffffffffffff, 0xe27) (async, rerun: 64)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async, rerun: 64)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

07:58:34 executing program 0:
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000e81000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000de1000/0x3000)=nil)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$qrtrtun(&(0x7f0000f6f000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, 0xffffffffffffffff, 0xe27)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

07:58:34 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 1:
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 0:
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000e81000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:34 executing program 3:
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000e81000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:34 executing program 1:
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:34 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000040)={0x1, 0xfd, 0x8003})
syz_open_pts(0xffffffffffffffff, 0x82001)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)
shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil)
socket(0x1f, 0x1, 0x20)

07:58:35 executing program 0:
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000e81000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000e81000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:35 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000de1000/0x3000)=nil)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$qrtrtun(&(0x7f0000f6f000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, 0xffffffffffffffff, 0xe27)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000de1000/0x3000)=nil) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
mmap$qrtrtun(&(0x7f0000f6f000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, 0xffffffffffffffff, 0xe27) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)

07:58:35 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:35 executing program 3:
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000e81000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2400}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xc3b0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x6}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, 0x0, 0x43)

07:58:35 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:35 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xc3b0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$snddsp_control(&(0x7f0000f98000/0x1000)=nil, 0x1000, 0x8, 0x8010, 0xffffffffffffffff, 0x83000000)
syz_io_uring_setup(0x47b9, &(0x7f0000000040)={0x0, 0x8ecf, 0x12, 0x3, 0x3b6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f00000002c0)={0x0, 0x1099, 0x10, 0x3, 0x4, 0x0, r0}, &(0x7f0000f99000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xc3b0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, 0x0, 0x43)

07:58:35 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xc3b0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xc3b0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:35 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, 0x0, 0x43)

07:58:35 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$snddsp_control(&(0x7f0000f98000/0x1000)=nil, 0x1000, 0x8, 0x8010, 0xffffffffffffffff, 0x83000000)
syz_io_uring_setup(0x47b9, &(0x7f0000000040)={0x0, 0x8ecf, 0x12, 0x3, 0x3b6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5d4d, &(0x7f00000002c0)={0x0, 0x1099, 0x10, 0x3, 0x4, 0x0, r0}, &(0x7f0000f99000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200))
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$snddsp_control(&(0x7f0000f98000/0x1000)=nil, 0x1000, 0x8, 0x8010, 0xffffffffffffffff, 0x83000000) (async)
syz_io_uring_setup(0x47b9, &(0x7f0000000040)={0x0, 0x8ecf, 0x12, 0x3, 0x3b6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x5d4d, &(0x7f00000002c0)={0x0, 0x1099, 0x10, 0x3, 0x4, 0x0, r0}, &(0x7f0000f99000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:35 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100))
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = io_uring_setup(0x7ad6, &(0x7f0000000240)={0x0, 0x7dc8, 0x11, 0x3, 0x32c, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f00008cb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x10000000)

07:58:35 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
io_uring_setup(0x526a, &(0x7f0000000080)={0x0, 0xe94a, 0x10, 0x2, 0x138, 0x0, r0})
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:35 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/25, 0x19}], 0x4, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xffff8000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:35 executing program 4:
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$snddsp_control(&(0x7f0000f98000/0x1000)=nil, 0x1000, 0x8, 0x8010, 0xffffffffffffffff, 0x83000000) (async)
syz_io_uring_setup(0x47b9, &(0x7f0000000040)={0x0, 0x8ecf, 0x12, 0x3, 0x3b6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x5d4d, &(0x7f00000002c0)={0x0, 0x1099, 0x10, 0x3, 0x4, 0x0, r0}, &(0x7f0000f99000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100)) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = io_uring_setup(0x7ad6, &(0x7f0000000240)={0x0, 0x7dc8, 0x11, 0x3, 0x32c, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f00008cb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x10000000)

07:58:35 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xff0f206d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:35 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x60}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x43)

07:58:35 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100)) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = io_uring_setup(0x7ad6, &(0x7f0000000240)={0x0, 0x7dc8, 0x11, 0x3, 0x32c, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f00008cb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x10000000)

07:58:35 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/160, 0xa0}, 0x43)

07:58:35 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap(&(0x7f00009b8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r0, 0xbb9ad000)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0))
syz_open_dev$media(&(0x7f0000000100), 0x180000000000, 0x7000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 5:
r0 = syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x6d290fff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:35 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r1 = syz_io_uring_setup(0x6d2e, &(0x7f00000000c0)={0x0, 0x5240, 0x20, 0x3, 0x26c, 0x0, r0}, &(0x7f0000d98000/0x3000)=nil, &(0x7f0000bc4000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x8000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap(&(0x7f00009b8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r0, 0xbb9ad000) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)) (async)
syz_open_dev$media(&(0x7f0000000100), 0x180000000000, 0x7000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
syz_open_pts(r0, 0x442003)
madvise(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x9)
madvise(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x14)
syz_open_dev$media(&(0x7f0000000040), 0xac54, 0x781000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

07:58:35 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x36}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap(&(0x7f00009b8000/0x4000)=nil, 0x4000, 0x5, 0x20010, r0, 0xbb9ad000)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0))
syz_open_dev$media(&(0x7f0000000100), 0x180000000000, 0x7000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:35 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:35 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r1 = syz_io_uring_setup(0x6d2e, &(0x7f00000000c0)={0x0, 0x5240, 0x20, 0x3, 0x26c, 0x0, r0}, &(0x7f0000d98000/0x3000)=nil, &(0x7f0000bc4000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x8000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:36 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)

07:58:36 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x57800fff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:36 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x20ffa000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:36 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xbe5f, 0x0, 0x3}, &(0x7f0000800000/0x800000)=nil, &(0x7f00008ba000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)

07:58:36 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:36 executing program 0:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r1 = syz_io_uring_setup(0x6d2e, &(0x7f00000000c0)={0x0, 0x5240, 0x20, 0x3, 0x26c, 0x0, r0}, &(0x7f0000d98000/0x3000)=nil, &(0x7f0000bc4000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x10, r1, 0x8000000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:36 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000bf5000/0x4000)=nil, 0x4000}})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:36 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
socketpair(0x2c, 0x1, 0x100, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080), &(0x7f00000001c0)=0x10)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:36 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xbe5f, 0x0, 0x3}, &(0x7f0000800000/0x800000)=nil, &(0x7f00008ba000/0x2000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 64)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (rerun: 64)

07:58:36 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:36 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:36 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:37 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)

07:58:37 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:37 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000bf5000/0x4000)=nil, 0x4000}})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000bf5000/0x4000)=nil, 0x4000}}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:37 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x7}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:37 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:37 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0xbe5f, 0x0, 0x3}, &(0x7f0000800000/0x800000)=nil, &(0x7f00008ba000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)

07:58:37 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x2000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:37 executing program 3:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x18000000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:37 executing program 4:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = socket(0xb, 0xa, 0xffffffff)
mmap$xdp(&(0x7f0000c41000/0x4000)=nil, 0x4000, 0xb, 0x1010, r0, 0x180000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000f85000/0x3000)=nil, 0x3000, 0xe, 0x4000010, r1, 0x10000000)

07:58:37 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:37 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000bf5000/0x4000)=nil, 0x4000}})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000bf5000/0x4000)=nil, 0x4000}}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:37 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x2000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:38 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x2000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:38 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:38 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:38 executing program 4:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = socket(0xb, 0xa, 0xffffffff)
mmap$xdp(&(0x7f0000c41000/0x4000)=nil, 0x4000, 0xb, 0x1010, r0, 0x180000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000f85000/0x3000)=nil, 0x3000, 0xe, 0x4000010, r1, 0x10000000)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
socket(0xb, 0xa, 0xffffffff) (async)
mmap$xdp(&(0x7f0000c41000/0x4000)=nil, 0x4000, 0xb, 0x1010, r0, 0x180000000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000f85000/0x3000)=nil, 0x3000, 0xe, 0x4000010, r1, 0x10000000) (async)

07:58:38 executing program 0:
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_io_uring_setup(0x52ef, &(0x7f0000000340)={0x0, 0xdc25, 0x8, 0x0, 0x27, 0x0, r0}, &(0x7f0000c2a000/0x1000)=nil, &(0x7f0000836000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400))
syz_io_uring_setup(0x229e, &(0x7f0000000240)={0x0, 0x8df4, 0x2, 0x3, 0x28f, 0x0, r1}, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000300))
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ac1000/0x2000)=nil, 0x2000}})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:38 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:38 executing program 5:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x2000)

07:58:38 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

07:58:38 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:38 executing program 0:
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async, rerun: 64)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64)
r1 = syz_io_uring_setup(0x52ef, &(0x7f0000000340)={0x0, 0xdc25, 0x8, 0x0, 0x27, 0x0, r0}, &(0x7f0000c2a000/0x1000)=nil, &(0x7f0000836000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400))
syz_io_uring_setup(0x229e, &(0x7f0000000240)={0x0, 0x8df4, 0x2, 0x3, 0x28f, 0x0, r1}, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000300))
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ac1000/0x2000)=nil, 0x2000}}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:38 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0xfd6, 0x80000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/175, 0xaf, 0x0, &(0x7f0000000280)=""/197, 0xc5}, &(0x7f0000000380)=0x40)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:38 executing program 4:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (rerun: 64)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async, rerun: 64)
r0 = socket(0xb, 0xa, 0xffffffff) (rerun: 64)
mmap$xdp(&(0x7f0000c41000/0x4000)=nil, 0x4000, 0xb, 0x1010, r0, 0x180000000) (async, rerun: 32)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 32)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000f85000/0x3000)=nil, 0x3000, 0xe, 0x4000010, r1, 0x10000000)

07:58:38 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x2000)

07:58:38 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:38 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000002c0))

07:58:38 executing program 5:
syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x2000)

07:58:38 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0xfd6, 0x80000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/175, 0xaf, 0x0, &(0x7f0000000280)=""/197, 0xc5}, &(0x7f0000000380)=0x40)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:38 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:38 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000002c0))

07:58:38 executing program 5:
syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x2000)

07:58:38 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0xfd6, 0x80000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/175, 0xaf, 0x0, &(0x7f0000000280)=""/197, 0xc5}, &(0x7f0000000380)=0x40)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:38 executing program 0:
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_io_uring_setup(0x52ef, &(0x7f0000000340)={0x0, 0xdc25, 0x8, 0x0, 0x27, 0x0, r0}, &(0x7f0000c2a000/0x1000)=nil, &(0x7f0000836000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400))
syz_io_uring_setup(0x229e, &(0x7f0000000240)={0x0, 0x8df4, 0x2, 0x3, 0x28f, 0x0, r1}, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000300))
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ac1000/0x2000)=nil, 0x2000}})
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504e, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
syz_io_uring_setup(0x52ef, &(0x7f0000000340)={0x0, 0xdc25, 0x8, 0x0, 0x27, 0x0, r0}, &(0x7f0000c2a000/0x1000)=nil, &(0x7f0000836000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) (async)
syz_io_uring_setup(0x229e, &(0x7f0000000240)={0x0, 0x8df4, 0x2, 0x3, 0x28f, 0x0, r1}, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000300)) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ac1000/0x2000)=nil, 0x2000}}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:38 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

[ 2028.204185][T29114] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[ 2028.244393][T29114] CPU: 0 PID: 29114 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2028.254934][T29114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2028.265086][T29114] Call Trace:
[ 2028.268371][T29114]  <TASK>
[ 2028.271309][T29114]  dump_stack_lvl+0xcd/0x134
[ 2028.275904][T29114]  warn_alloc.cold+0x9b/0x189
[ 2028.280587][T29114]  ? zone_watermark_ok_safe+0x290/0x290
[ 2028.286139][T29114]  ? __kmalloc_node+0x62/0x4a0
[ 2028.290921][T29114]  ? __vmalloc_node_range+0x7bf/0x1060
[ 2028.296477][T29114]  __vmalloc_node_range+0xe18/0x1060
[ 2028.301774][T29114]  ? vfree_atomic+0xe0/0xe0
[ 2028.306282][T29114]  ? rcu_read_lock_sched_held+0x3a/0x70
[ 2028.311929][T29114]  ? kernel_clone+0xe7/0xab0
[ 2028.316521][T29114]  copy_process+0x926/0x7300
[ 2028.321112][T29114]  ? kernel_clone+0xe7/0xab0
[ 2028.325702][T29114]  ? try_to_wake_up+0xf2/0x1510
[ 2028.330559][T29114]  ? lock_downgrade+0x6e0/0x6e0
[ 2028.335420][T29114]  ? __cleanup_sighand+0xb0/0xb0
[ 2028.340359][T29114]  ? __lock_acquire+0x1666/0x56c0
[ 2028.345414][T29114]  ? kernel_clone+0x314/0xab0
[ 2028.350184][T29114]  kernel_clone+0xe7/0xab0
[ 2028.354602][T29114]  ? create_io_thread+0xf0/0xf0
[ 2028.359461][T29114]  ? find_held_lock+0x2d/0x110
[ 2028.364230][T29114]  __do_sys_clone+0xc8/0x110
[ 2028.368820][T29114]  ? kernel_clone+0xab0/0xab0
[ 2028.373506][T29114]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2028.379410][T29114]  do_syscall_64+0x35/0xb0
[ 2028.383829][T29114]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2028.389724][T29114] RIP: 0033:0x7fc0c8502481
[ 2028.394143][T29114] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2028.413758][T29114] RSP: 002b:00007ffd4b671ef8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2028.422187][T29114] RAX: ffffffffffffffda RBX: 00007fc0c6d6e700 RCX: 00007fc0c8502481
[ 2028.430170][T29114] RDX: 00007fc0c6d6e9d0 RSI: 00007fc0c6d6e2f0 RDI: 00000000003d0f00
[ 2028.438153][T29114] RBP: 00007ffd4b672140 R08: 00007fc0c6d6e700 R09: 00007fc0c6d6e700
[ 2028.446137][T29114] R10: 00007fc0c6d6e9d0 R11: 0000000000000206 R12: 00007ffd4b671fae
[ 2028.454122][T29114] R13: 00007ffd4b671faf R14: 00007fc0c6d6e300 R15: 0000000000022000
[ 2028.462122][T29114]  </TASK>
[ 2028.467151][T29114] Mem-Info:
[ 2028.470280][T29114] active_anon:531 inactive_anon:34924 isolated_anon:0
[ 2028.470280][T29114]  active_file:4967 inactive_file:7659 isolated_file:0
[ 2028.470280][T29114]  unevictable:768 dirty:30 writeback:0
[ 2028.470280][T29114]  slab_reclaimable:30581 slab_unreclaimable:95749
[ 2028.470280][T29114]  mapped:27322 shmem:1998 pagetables:499 bounce:0
07:58:39 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:39 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0, &(0x7f00000002c0))

07:58:39 executing program 5:
syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x2000)

07:58:39 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0xfd6, 0x80000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/175, 0xaf, 0x0, &(0x7f0000000280)=""/197, 0xc5}, &(0x7f0000000380)=0x40)
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040))

07:58:39 executing program 2:
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

[ 2028.470280][T29114]  kernel_misc_reclaimable:0
[ 2028.470280][T29114]  free:1353530 free_pcp:2740 free_cma:0
07:58:39 executing program 2:
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

[ 2028.553328][T29114] Node 0 active_anon:2116kB inactive_anon:140972kB active_file:19792kB inactive_file:30636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109288kB dirty:116kB writeback:0kB shmem:5516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 67584kB writeback_tmp:0kB kernel_stack:12240kB pagetables:2192kB all_unreclaimable? no
07:58:39 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2000)

[ 2028.632246][T29114] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no
07:58:39 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2000)

07:58:39 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), 0x0)

07:58:39 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

[ 2028.680295][T29114] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2028.736056][T29114] lowmem_reserve[]: 0 2645 2645 2645 2645
[ 2028.750027][T29114] Node 0 DMA32 free:1719908kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2116kB inactive_anon:136716kB active_file:19792kB inactive_file:30636kB unevictable:1536kB writepending:116kB present:3129332kB managed:2716648kB mlocked:0kB bounce:0kB free_pcp:41256kB local_pcp:20340kB free_cma:0kB
[ 2028.806250][T29114] lowmem_reserve[]: 0 0 0 0 0
[ 2028.824924][T29114] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2028.859952][T29114] lowmem_reserve[]: 0 0 0 0 0
[ 2028.864673][T29114] Node 1 Normal free:3951892kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2028.893962][T29114] lowmem_reserve[]: 0 0 0 0 0
[ 2028.900187][T29114] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2028.913478][T29114] Node 0 DMA32: 283*4kB (UME) 1075*8kB (UME) 467*16kB (UM) 405*32kB (UME) 948*64kB (UME) 489*128kB (UME) 158*256kB (UM) 29*512kB (UME) 8*1024kB (UM) 13*2048kB (UM) 363*4096kB (UM) = 1730388kB
[ 2028.932636][T29114] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2028.944158][T29114] Node 1 Normal: 177*4kB (UME) 48*8kB (UME) 31*16kB (UME) 111*32kB (UME) 78*64kB (UME) 27*128kB (UE) 12*256kB (U) 4*512kB (U) 1*1024kB (U) 4*2048kB (UME) 958*4096kB (M) = 3951892kB
[ 2028.962670][T29114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2028.972489][T29114] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB
[ 2028.982313][T29114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2028.992140][T29114] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2029.001494][T29114] 14624 total pagecache pages
[ 2029.006217][T29114] 0 pages in swap cache
07:58:39 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x9, 0xd1, 0x1ff, 0x8, "c9031334507f7d02b22864144e40f89095bac6"})
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:39 executing program 2:
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:39 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
syz_open_dev$loop(&(0x7f0000000000), 0xfd6, 0x80000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/175, 0xaf, 0x0, &(0x7f0000000280)=""/197, 0xc5}, &(0x7f0000000380)=0x40)

07:58:39 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:39 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), 0x0)

07:58:39 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2000)

[ 2029.010362][T29114] Swap cache stats: add 0, delete 0, find 0/0
[ 2029.016475][T29114] Free swap  = 0kB
[ 2029.020180][T29114] Total swap = 0kB
[ 2029.023879][T29114] 2097051 pages RAM
[ 2029.027936][T29114] 0 pages HighMem/MovableOnly
[ 2029.032689][T29114] 384544 pages reserved
[ 2029.037816][T29114] 0 pages cma reserved
07:58:39 executing program 2:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:39 executing program 5:
syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x0)

07:58:40 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
syz_open_dev$loop(&(0x7f0000000000), 0xfd6, 0x80000)

07:58:40 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x9, 0xd1, 0x1ff, 0x8, "c9031334507f7d02b22864144e40f89095bac6"})
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x9, 0xd1, 0x1ff, 0x8, "c9031334507f7d02b22864144e40f89095bac6"}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:40 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = io_uring_setup(0x123d, &(0x7f00000000c0)={0x0, 0x367e, 0x8, 0x0, 0x3b0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000006, 0x2010, r1, 0x0)
io_uring_setup(0x2990, &(0x7f0000000240)={0x0, 0xd903, 0x8, 0x3, 0x1a3, 0x0, r0})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000e72000/0x3000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
munmap(&(0x7f0000e1b000/0x3000)=nil, 0x3000)

07:58:40 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x9a5, &(0x7f0000000200), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000280), 0x0)

07:58:40 executing program 2:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)

07:58:40 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
syz_open_dev$loop(&(0x7f0000000000), 0xfd6, 0x80000)

07:58:40 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x9, 0xd1, 0x1ff, 0x8, "c9031334507f7d02b22864144e40f89095bac6"})
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:40 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = io_uring_setup(0x123d, &(0x7f00000000c0)={0x0, 0x367e, 0x8, 0x0, 0x3b0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000006, 0x2010, r1, 0x0)
io_uring_setup(0x2990, &(0x7f0000000240)={0x0, 0xd903, 0x8, 0x3, 0x1a3, 0x0, r0})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000e72000/0x3000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
munmap(&(0x7f0000e1b000/0x3000)=nil, 0x3000)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x123d, &(0x7f00000000c0)={0x0, 0x367e, 0x8, 0x0, 0x3b0}) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000006, 0x2010, r1, 0x0) (async)
io_uring_setup(0x2990, &(0x7f0000000240)={0x0, 0xd903, 0x8, 0x3, 0x1a3, 0x0, r0}) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000e72000/0x3000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
munmap(&(0x7f0000e1b000/0x3000)=nil, 0x3000) (async)

07:58:40 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x9, 0xd1, 0x1ff, 0x8, "c9031334507f7d02b22864144e40f89095bac6"}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:40 executing program 2:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 5:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:40 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 2:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fec000/0x14000)=nil)

07:58:40 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 5:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x40180, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000000))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x40010, r1, 0x10000000)

07:58:40 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
r1 = io_uring_setup(0x123d, &(0x7f00000000c0)={0x0, 0x367e, 0x8, 0x0, 0x3b0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000006, 0x2010, r1, 0x0)
io_uring_setup(0x2990, &(0x7f0000000240)={0x0, 0xd903, 0x8, 0x3, 0x1a3, 0x0, r0})
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000e72000/0x3000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
munmap(&(0x7f0000e1b000/0x3000)=nil, 0x3000)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x123d, &(0x7f00000000c0)={0x0, 0x367e, 0x8, 0x0, 0x3b0}) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000006, 0x2010, r1, 0x0) (async)
io_uring_setup(0x2990, &(0x7f0000000240)={0x0, 0xd903, 0x8, 0x3, 0x1a3, 0x0, r0}) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000e72000/0x3000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
munmap(&(0x7f0000e1b000/0x3000)=nil, 0x3000) (async)

07:58:40 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fec000/0x14000)=nil)

07:58:40 executing program 2:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x80ffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 2:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x600000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 5:
r0 = syz_io_uring_setup(0xe8a, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x3c9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000040))
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_setup(0x1c03, &(0x7f0000000180)={0x0, 0xa2e0, 0x20, 0x1, 0x2f9, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:40 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mbind(&(0x7f0000a87000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000000c0)=0xe9, 0xffff, 0x4)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000dad000/0x4000)=nil, &(0x7f00008ce000/0x3000)=nil, 0x4000, 0x2})
prctl$PR_SET_MM(0x23, 0xb, &(0x7f00009d2000/0x4000)=nil)

07:58:40 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fec000/0x14000)=nil)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fec000/0x14000)=nil) (async)

07:58:40 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x80010, r1, 0x10000000)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:40 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ecc000/0x4000)=nil, 0x4000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000b74000/0x2000)=nil, 0x8, 0x4, 0x4})
syz_io_uring_setup(0x5d4d, &(0x7f0000000100), &(0x7f0000bfd000/0x1000)=nil, &(0x7f0000d5e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200))
shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)

07:58:40 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
mbind(&(0x7f0000a87000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000000c0)=0xe9, 0xffff, 0x4) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000dad000/0x4000)=nil, &(0x7f00008ce000/0x3000)=nil, 0x4000, 0x2}) (async)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f00009d2000/0x4000)=nil)

07:58:40 executing program 1:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x2000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

07:58:40 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

07:58:40 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:40 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000ecc000/0x4000)=nil, 0x4000) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000b74000/0x2000)=nil, 0x8, 0x4, 0x4}) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000100), &(0x7f0000bfd000/0x1000)=nil, &(0x7f0000d5e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async, rerun: 64)
shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) (rerun: 64)

07:58:40 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
mbind(&(0x7f0000a87000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000000c0)=0xe9, 0xffff, 0x4) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000dad000/0x4000)=nil, &(0x7f00008ce000/0x3000)=nil, 0x4000, 0x2}) (async)
prctl$PR_SET_MM(0x23, 0xb, &(0x7f00009d2000/0x4000)=nil)

07:58:40 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:40 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:40 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x100000)

07:58:40 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:40 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:40 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:40 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240)
mmap$usbfs(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x3)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:40 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:40 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 0:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ecc000/0x4000)=nil, 0x4000)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000b74000/0x2000)=nil, 0x8, 0x4, 0x4})
syz_io_uring_setup(0x5d4d, &(0x7f0000000100), &(0x7f0000bfd000/0x1000)=nil, &(0x7f0000d5e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:41 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3) (async)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240)
mmap$usbfs(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x3) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:41 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x0)

07:58:41 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:41 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 2:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240)
mmap$usbfs(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x3)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:41 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240)
mmap$usbfs(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x3)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3) (async)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240) (async)
mmap$usbfs(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x3) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:41 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 0:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:41 executing program 5:
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 2:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240)
mmap$usbfs(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x3)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:41 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x40000}, &(0x7f0000862000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:41 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x20, 0xffffffff, 0x19c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x2c63, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:41 executing program 5:
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:41 executing program 2:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240)
mmap$usbfs(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x3)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:41 executing program 1:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:41 executing program 5:
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x40000}, &(0x7f0000862000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000180))

07:58:41 executing program 1:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 2:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240)
mmap$usbfs(&(0x7f0000ec6000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x3)

07:58:41 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x40000}, &(0x7f0000862000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x40000}, &(0x7f0000862000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:41 executing program 2:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x100000001, 0x40240)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000180))

07:58:41 executing program 1:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:41 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000180))

07:58:41 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0xa7}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:41 executing program 1:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 2:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)
mmap$snddsp_status(&(0x7f0000bf6000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x82000000)

07:58:41 executing program 5:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:41 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0xa7}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:41 executing program 1:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 2:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:41 executing program 5:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 1:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 0:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:41 executing program 5:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100000)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:41 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0xa7}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0xa7}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:41 executing program 2:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000e03000/0x1000)=nil, 0x1000, 0xa, 0x30, r0, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)

07:58:41 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

07:58:41 executing program 3:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:41 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:41 executing program 0:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:41 executing program 2:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)

07:58:41 executing program 0:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:58:42 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:42 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13)

07:58:42 executing program 2:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0xfffffffffffffffc, 0x9, 0x3)

07:58:42 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)

07:58:42 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:42 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:42 executing program 0:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 2:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffc, 0x9, 0x3)

07:58:42 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 0:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 2:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffc, 0x0, 0x3)

07:58:42 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:42 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)

07:58:42 executing program 3:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:58:42 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 0:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 2:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffc, 0x0, 0x3)

07:58:42 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:42 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x0)
socketpair(0x1d, 0x80000, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r1, 0x0)

07:58:42 executing program 5:
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 2:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffc, 0x0, 0x3)

07:58:42 executing program 0:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:42 executing program 1:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8, 0x3ff, 0x7f, 0x100, 0xc5, 0x49}, &(0x7f0000000040)={0x2c3, 0x4, 0xedc, 0x0, 0xab, 0xfffffffffffffffe, 0x800000000008, 0xff}, &(0x7f0000000080)={0x0, 0x465, 0x3, 0xff, 0x7, 0x80, 0x49ad, 0x178d}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10011, r2, 0x0)
prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffd000/0x3000)=nil)

07:58:42 executing program 2:
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffc, 0x9, 0x0)

07:58:42 executing program 0:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 5:
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:42 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:42 executing program 0:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x0) (async)
socketpair(0x1d, 0x80000, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r1, 0x0)

07:58:42 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf)

[ 2031.594893][T29497] can: request_module (can-proto-0) failed.
07:58:42 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:42 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 5:
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:42 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:42 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:42 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:42 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 4:
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
r0 = syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x0) (async)
socketpair(0x1d, 0x80000, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r1, 0x0)

[ 2031.746804][T29525] can: request_module (can-proto-0) failed.
07:58:42 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:42 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:42 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:42 executing program 3:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:42 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:42 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:42 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 3:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:42 executing program 4:
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@none, 0x5})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

[ 2031.894889][T29544] can: request_module (can-proto-0) failed.
07:58:42 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:42 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:42 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:42 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 4:
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@none, 0x5})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:42 executing program 3:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:42 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:42 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:42 executing program 3:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:42 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:42 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:42 executing program 4:
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@none, 0x5})
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@none, 0x5}) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:43 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:43 executing program 3:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:43 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:43 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:43 executing program 4:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000b25000/0x1000)=nil)
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$IORING_OFF_SQES(&(0x7f0000c2f000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:43 executing program 3:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:43 executing program 1:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0)

07:58:43 executing program 0:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:43 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 3:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:43 executing program 1:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 5:
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x2c63, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)

07:58:43 executing program 4:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000b25000/0x1000)=nil)
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$IORING_OFF_SQES(&(0x7f0000c2f000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r0, 0x10000000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:43 executing program 0:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:43 executing program 3:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:43 executing program 1:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 2:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 4:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000b25000/0x1000)=nil)
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$IORING_OFF_SQES(&(0x7f0000c2f000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r0, 0x10000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000b25000/0x1000)=nil) (async)
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$IORING_OFF_SQES(&(0x7f0000c2f000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r0, 0x10000000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:43 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:43 executing program 2:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 0:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:43 executing program 3:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:43 executing program 1:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:43 executing program 1:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000c93000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:43 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:43 executing program 2:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 1:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:43 executing program 2:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:43 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000c93000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))

07:58:43 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:43 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:43 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:43 executing program 2:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:43 executing program 4:
r0 = syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000c93000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200))
syz_io_uring_setup(0x504a, &(0x7f0000000040), &(0x7f0000800000/0x800000)=nil, &(0x7f0000b27000/0x3000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000c93000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000) (async)
syz_io_uring_setup(0x5d4d, &(0x7f0000000180), &(0x7f0000a7d000/0x2000)=nil, &(0x7f0000e17000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) (async)

07:58:43 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:43 executing program 2:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:43 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:43 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:43 executing program 4:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:43 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:43 executing program 2:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

07:58:43 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:43 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:43 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:43 executing program 4:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa)
munmap(&(0x7f0000f98000/0x1000)=nil, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))

07:58:43 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:43 executing program 0:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8)

07:58:43 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:43 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:43 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)

07:58:43 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (fail_nth: 1)

07:58:43 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:44 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (fail_nth: 1)

07:58:44 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:44 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:44 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (fail_nth: 1)

[ 2033.160170][T29737] FAULT_INJECTION: forcing a failure.
[ 2033.160170][T29737] name failslab, interval 1, probability 0, space 0, times 0
[ 2033.180622][T29739] FAULT_INJECTION: forcing a failure.
[ 2033.180622][T29739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2033.211954][T29737] CPU: 0 PID: 29737 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2033.222507][T29737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2033.232572][T29737] Call Trace:
[ 2033.235864][T29737]  <TASK>
[ 2033.238801][T29737]  dump_stack_lvl+0xcd/0x134
[ 2033.243407][T29737]  should_fail.cold+0x5/0xa
[ 2033.248014][T29737]  ? vm_area_dup+0x88/0x2b0
[ 2033.252525][T29737]  should_failslab+0x5/0x10
[ 2033.257035][T29737]  kmem_cache_alloc+0x5e/0x4b0
[ 2033.261809][T29737]  vm_area_dup+0x88/0x2b0
[ 2033.266142][T29737]  ? mark_lock.part.0+0xee/0x1910
[ 2033.271203][T29737]  ? mark_lock.part.0+0xee/0x1910
[ 2033.276226][T29737]  ? mark_lock.part.0+0xee/0x1910
[ 2033.281246][T29737]  ? lock_chain_count+0x20/0x20
[ 2033.286095][T29737]  ? lock_chain_count+0x20/0x20
[ 2033.290946][T29737]  ? mark_lock.part.0+0xee/0x1910
[ 2033.295978][T29737]  ? lock_chain_count+0x20/0x20
[ 2033.300839][T29737]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[ 2033.307078][T29737]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2033.312799][T29737]  ? __set_page_owner+0x242/0x2d0
[ 2033.317827][T29737]  ? lock_chain_count+0x20/0x20
[ 2033.322685][T29737]  ? mark_lock.part.0+0xee/0x1910
[ 2033.327803][T29737]  ? __lock_acquire+0xbc4/0x56c0
[ 2033.332750][T29737]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2033.339008][T29737]  ? can_vma_merge_before+0xec/0x3b0
[ 2033.344300][T29737]  ? vm_area_alloc+0x110/0x110
[ 2033.349158][T29737]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2033.355487][T29737]  ? vma_merge+0x33f/0xeb0
[ 2033.359898][T29737]  ? vma_merge+0x47a/0xeb0
[ 2033.364317][T29737]  ? __vma_adjust+0x24a0/0x24a0
[ 2033.369172][T29737]  __split_vma+0xa5/0x550
[ 2033.373523][T29737]  madvise_update_vma+0x322/0x7f0
[ 2033.378568][T29737]  ? __sanitizer_cov_trace_switch+0x63/0xf0
[ 2033.384553][T29737]  madvise_vma_behavior+0x116/0x1910
[ 2033.389844][T29737]  ? madvise_vma_anon_name+0xc0/0xc0
[ 2033.395129][T29737]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2033.401366][T29737]  ? vmacache_find+0x62/0x330
[ 2033.406130][T29737]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2033.412369][T29737]  ? vmacache_update+0xce/0x140
[ 2033.417214][T29737]  ? find_vma+0xbd/0x270
[ 2033.421466][T29737]  madvise_walk_vmas+0x1d5/0x2d0
[ 2033.426422][T29737]  ? madvise_vma_anon_name+0xc0/0xc0
[ 2033.431721][T29737]  ? __remove_memory+0x40/0x40
[ 2033.436481][T29737]  ? __down_timeout+0x10/0x10
[ 2033.441168][T29737]  do_madvise+0x249/0x3c0
[ 2033.445507][T29737]  ? madvise_set_anon_name+0xe0/0xe0
[ 2033.450807][T29737]  __x64_sys_madvise+0xa6/0x110
[ 2033.455667][T29737]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2033.461577][T29737]  do_syscall_64+0x35/0xb0
[ 2033.465992][T29737]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2033.471880][T29737] RIP: 0033:0x7fdd199a6059
[ 2033.476287][T29737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2033.495890][T29737] RSP: 002b:00007fdd1831b168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 2033.504308][T29737] RAX: ffffffffffffffda RBX: 00007fdd19ab8f60 RCX: 00007fdd199a6059
[ 2033.512278][T29737] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000000020ffd000
[ 2033.520717][T29737] RBP: 00007fdd1831b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2033.528778][T29737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2033.537102][T29737] R13: 00007ffe668dc06f R14: 00007fdd1831b300 R15: 0000000000022000
[ 2033.545168][T29737]  </TASK>
[ 2033.548179][T29739] CPU: 1 PID: 29739 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2033.558694][T29739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2033.568762][T29739] Call Trace:
[ 2033.572057][T29739]  <TASK>
[ 2033.574991][T29739]  dump_stack_lvl+0xcd/0x134
[ 2033.576070][T29744] FAULT_INJECTION: forcing a failure.
[ 2033.576070][T29744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2033.579592][T29739]  should_fail.cold+0x5/0xa
[ 2033.597066][T29739]  _copy_to_user+0x2c/0x150
[ 2033.601585][T29739]  simple_read_from_buffer+0xcc/0x160
[ 2033.606967][T29739]  proc_fail_nth_read+0x187/0x220
07:58:44 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:44 executing program 5:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:44 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (fail_nth: 2)

[ 2033.612005][T29739]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2033.617731][T29739]  ? security_file_permission+0xab/0xd0
[ 2033.623298][T29739]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2033.629016][T29739]  vfs_read+0x1b5/0x600
[ 2033.633207][T29739]  ksys_read+0x12d/0x250
[ 2033.637457][T29739]  ? vfs_write+0xae0/0xae0
[ 2033.641906][T29739]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2033.647819][T29739]  do_syscall_64+0x35/0xb0
[ 2033.652246][T29739]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2033.658176][T29739] RIP: 0033:0x7fa7723f0c0c
[ 2033.662591][T29739] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2033.682234][T29739] RSP: 002b:00007fa770db3160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2033.690661][T29739] RAX: ffffffffffffffda RBX: 00007fa772550f60 RCX: 00007fa7723f0c0c
[ 2033.698725][T29739] RDX: 000000000000000f RSI: 00007fa770db31e0 RDI: 0000000000000004
[ 2033.706726][T29739] RBP: 00007fa770db31d0 R08: 0000000000000000 R09: 0000000000000000
[ 2033.714701][T29739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2033.722666][T29739] R13: 00007fff4a5661bf R14: 00007fa770db3300 R15: 0000000000022000
[ 2033.730646][T29739]  </TASK>
[ 2033.733700][T29744] CPU: 0 PID: 29744 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2033.737935][T29751] FAULT_INJECTION: forcing a failure.
[ 2033.737935][T29751] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2033.744213][T29744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2033.767301][T29744] Call Trace:
[ 2033.770575][T29744]  <TASK>
[ 2033.773513][T29744]  dump_stack_lvl+0xcd/0x134
[ 2033.778098][T29744]  should_fail.cold+0x5/0xa
[ 2033.782594][T29744]  _copy_to_user+0x2c/0x150
[ 2033.787090][T29744]  simple_read_from_buffer+0xcc/0x160
[ 2033.792459][T29744]  proc_fail_nth_read+0x187/0x220
[ 2033.797478][T29744]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2033.803191][T29744]  ? security_file_permission+0xab/0xd0
[ 2033.808733][T29744]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2033.814450][T29744]  vfs_read+0x1b5/0x600
[ 2033.818931][T29744]  ksys_read+0x12d/0x250
[ 2033.823188][T29744]  ? vfs_write+0xae0/0xae0
[ 2033.827617][T29744]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2033.833528][T29744]  do_syscall_64+0x35/0xb0
[ 2033.837935][T29744]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2033.843821][T29744] RIP: 0033:0x7fc0c84b3c0c
[ 2033.848234][T29744] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2033.867836][T29744] RSP: 002b:00007fc0c6e76160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2033.876245][T29744] RAX: ffffffffffffffda RBX: 00007fc0c8613f60 RCX: 00007fc0c84b3c0c
[ 2033.884211][T29744] RDX: 000000000000000f RSI: 00007fc0c6e761e0 RDI: 0000000000000004
[ 2033.892172][T29744] RBP: 00007fc0c6e761d0 R08: 0000000000000000 R09: 0000000000000000
[ 2033.900133][T29744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2033.908098][T29744] R13: 00007ffd4b671faf R14: 00007fc0c6e76300 R15: 0000000000022000
[ 2033.916249][T29744]  </TASK>
[ 2033.926716][T29751] CPU: 0 PID: 29751 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2033.937281][T29751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2033.947361][T29751] Call Trace:
[ 2033.950654][T29751]  <TASK>
[ 2033.953582][T29751]  dump_stack_lvl+0xcd/0x134
[ 2033.958182][T29751]  should_fail.cold+0x5/0xa
07:58:44 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:44 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:44 executing program 5:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:44 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:44 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

[ 2033.962718][T29751]  _copy_to_user+0x2c/0x150
[ 2033.967232][T29751]  simple_read_from_buffer+0xcc/0x160
[ 2033.972626][T29751]  proc_fail_nth_read+0x187/0x220
[ 2033.977662][T29751]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2033.983393][T29751]  ? security_file_permission+0xab/0xd0
[ 2033.988980][T29751]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2033.994709][T29751]  vfs_read+0x1b5/0x600
[ 2033.998877][T29751]  ksys_read+0x12d/0x250
[ 2034.003131][T29751]  ? vfs_write+0xae0/0xae0
[ 2034.007562][T29751]  ? syscall_enter_from_user_mode+0x21/0x70
07:58:44 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)

07:58:44 executing program 5:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

[ 2034.013473][T29751]  do_syscall_64+0x35/0xb0
[ 2034.017894][T29751]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2034.023795][T29751] RIP: 0033:0x7fdd19958c0c
[ 2034.028210][T29751] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2034.047831][T29751] RSP: 002b:00007fdd182fa160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2034.056256][T29751] RAX: ffffffffffffffda RBX: 00007fdd19ab9030 RCX: 00007fdd19958c0c
07:58:44 executing program 5:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:44 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:44 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

[ 2034.064232][T29751] RDX: 000000000000000f RSI: 00007fdd182fa1e0 RDI: 0000000000000003
[ 2034.072207][T29751] RBP: 00007fdd182fa1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.080185][T29751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2034.088251][T29751] R13: 00007ffe668dc06f R14: 00007fdd182fa300 R15: 0000000000022000
[ 2034.096246][T29751]  </TASK>
07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:45 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (fail_nth: 1)

07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0xf)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2002, 0x12)

07:58:45 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

[ 2034.230587][T29783] FAULT_INJECTION: forcing a failure.
[ 2034.230587][T29783] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2034.260636][T29783] CPU: 0 PID: 29783 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2034.271179][T29783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2034.281248][T29783] Call Trace:
[ 2034.284529][T29783]  <TASK>
[ 2034.287466][T29783]  dump_stack_lvl+0xcd/0x134
[ 2034.292075][T29783]  should_fail.cold+0x5/0xa
[ 2034.296591][T29783]  _copy_to_user+0x2c/0x150
[ 2034.301137][T29783]  simple_read_from_buffer+0xcc/0x160
[ 2034.306521][T29783]  proc_fail_nth_read+0x187/0x220
[ 2034.311560][T29783]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2034.317290][T29783]  ? security_file_permission+0xab/0xd0
[ 2034.323027][T29783]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2034.328764][T29783]  vfs_read+0x1b5/0x600
[ 2034.332939][T29783]  ksys_read+0x12d/0x250
[ 2034.337190][T29783]  ? vfs_write+0xae0/0xae0
[ 2034.341619][T29783]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2034.347530][T29783]  do_syscall_64+0x35/0xb0
[ 2034.351959][T29783]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2034.357857][T29783] RIP: 0033:0x7f296c1dac0c
07:58:45 executing program 3:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x201a, 0x12)

07:58:45 executing program 3:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x201b, 0x12)

07:58:45 executing program 3:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)

07:58:45 executing program 3:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

[ 2034.362278][T29783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2034.381891][T29783] RSP: 002b:00007f296ab9d160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2034.390313][T29783] RAX: ffffffffffffffda RBX: 00007f296c33af60 RCX: 00007f296c1dac0c
[ 2034.398293][T29783] RDX: 000000000000000f RSI: 00007f296ab9d1e0 RDI: 0000000000000004
[ 2034.406447][T29783] RBP: 00007f296ab9d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.414436][T29783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2034.422415][T29783] R13: 00007fff44c8e0ef R14: 00007f296ab9d300 R15: 0000000000022000
07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:45 executing program 3:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

[ 2034.430403][T29783]  </TASK>
07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3f00, 0xf)

07:58:45 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 3:
syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2007, 0xc)

07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa)

07:58:45 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

07:58:45 executing program 3:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)

07:58:45 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)

07:58:45 executing program 3:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)

07:58:45 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:45 executing program 3:
syz_io_uring_setup(0x2c67, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:45 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)

07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8)

07:58:45 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

07:58:45 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9)

07:58:45 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa)

07:58:45 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (fail_nth: 1)

07:58:45 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:45 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf)

07:58:45 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa)

07:58:45 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd)

07:58:45 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb)

[ 2035.102216][T29886] FAULT_INJECTION: forcing a failure.
[ 2035.102216][T29886] name fail_usercopy, interval 1, probability 0, space 0, times 0
07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc)

[ 2035.143217][T29886] CPU: 0 PID: 29886 Comm: syz-executor.5 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2035.153761][T29886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2035.163828][T29886] Call Trace:
[ 2035.167114][T29886]  <TASK>
[ 2035.170044][T29886]  dump_stack_lvl+0xcd/0x134
[ 2035.174676][T29886]  should_fail.cold+0x5/0xa
[ 2035.179191][T29886]  _copy_to_user+0x2c/0x150
[ 2035.183706][T29886]  simple_read_from_buffer+0xcc/0x160
07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd)

[ 2035.189127][T29886]  proc_fail_nth_read+0x187/0x220
[ 2035.194169][T29886]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2035.199901][T29886]  ? security_file_permission+0xab/0xd0
[ 2035.205459][T29886]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2035.211188][T29886]  vfs_read+0x1b5/0x600
[ 2035.215357][T29886]  ksys_read+0x12d/0x250
[ 2035.219609][T29886]  ? vfs_write+0xae0/0xae0
[ 2035.224062][T29886]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2035.229980][T29886]  do_syscall_64+0x35/0xb0
[ 2035.234406][T29886]  entry_SYSCALL_64_after_hwframe+0x44/0xae
07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe)

07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13)

[ 2035.240316][T29886] RIP: 0033:0x7f918a1a5c0c
[ 2035.244750][T29886] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2035.264588][T29886] RSP: 002b:00007f9188b68160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2035.273043][T29886] RAX: ffffffffffffffda RBX: 00007f918a305f60 RCX: 00007f918a1a5c0c
[ 2035.281040][T29886] RDX: 000000000000000f RSI: 00007f9188b681e0 RDI: 0000000000000004
[ 2035.289025][T29886] RBP: 00007f9188b681d0 R08: 0000000000000000 R09: 0000000000000000
[ 2035.297030][T29886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2035.305012][T29886] R13: 00007ffea41b4f7f R14: 00007f9188b68300 R15: 0000000000022000
[ 2035.313009][T29886]  </TASK>
07:58:46 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:46 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10)

07:58:46 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:46 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11)

07:58:46 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:46 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2007, 0xb)

07:58:46 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd)

07:58:46 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12)

07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16)

07:58:46 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe)

07:58:46 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (fail_nth: 1)

07:58:46 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)

07:58:46 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10)

07:58:46 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17)

07:58:46 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf)

[ 2035.612162][T29947] FAULT_INJECTION: forcing a failure.
[ 2035.612162][T29947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2035.655365][T29947] CPU: 1 PID: 29947 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2035.665904][T29947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2035.675956][T29947] Call Trace:
[ 2035.679224][T29947]  <TASK>
[ 2035.682142][T29947]  dump_stack_lvl+0xcd/0x134
[ 2035.686745][T29947]  should_fail.cold+0x5/0xa
[ 2035.691242][T29947]  _copy_to_user+0x2c/0x150
[ 2035.695765][T29947]  simple_read_from_buffer+0xcc/0x160
[ 2035.701136][T29947]  proc_fail_nth_read+0x187/0x220
[ 2035.706176][T29947]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2035.711888][T29947]  ? security_file_permission+0xab/0xd0
[ 2035.717513][T29947]  ? proc_tid_comm_permission+0x1b0/0x1b0
[ 2035.723220][T29947]  vfs_read+0x1b5/0x600
[ 2035.727368][T29947]  ksys_read+0x12d/0x250
[ 2035.731599][T29947]  ? vfs_write+0xae0/0xae0
[ 2035.736092][T29947]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2035.742158][T29947]  do_syscall_64+0x35/0xb0
[ 2035.746561][T29947]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2035.752445][T29947] RIP: 0033:0x7f31cff99c0c
[ 2035.756848][T29947] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2035.776469][T29947] RSP: 002b:00007f31ce95c160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2035.784978][T29947] RAX: ffffffffffffffda RBX: 00007f31d00f9f60 RCX: 00007f31cff99c0c
[ 2035.792937][T29947] RDX: 000000000000000f RSI: 00007f31ce95c1e0 RDI: 0000000000000004
07:58:46 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14)

[ 2035.800919][T29947] RBP: 00007f31ce95c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2035.808879][T29947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2035.816836][T29947] R13: 00007ffe0b1e5b0f R14: 00007f31ce95c300 R15: 0000000000022000
[ 2035.824829][T29947]  </TASK>
07:58:46 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)

07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:46 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13)

07:58:46 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:46 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15)

07:58:46 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:46 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:46 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16)

07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:46 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2007, 0x9)

07:58:46 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:46 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:46 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:46 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:46 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x17)

07:58:46 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16)

07:58:47 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13)

07:58:47 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa)

07:58:47 executing program 4:
rt_sigreturn()
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
rt_sigreturn()

07:58:47 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/83, 0x53, 0x0, &(0x7f0000000140)=""/253, 0xfd}, &(0x7f0000000240)=0x40)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x8be49000)

07:58:47 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17)

07:58:47 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)

07:58:47 executing program 4:
rt_sigreturn() (async, rerun: 32)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async, rerun: 32)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
rt_sigreturn()

07:58:47 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:47 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/83, 0x53, 0x0, &(0x7f0000000140)=""/253, 0xfd}, &(0x7f0000000240)=0x40)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x8be49000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/83, 0x53, 0x0, &(0x7f0000000140)=""/253, 0xfd}, &(0x7f0000000240)=0x40) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x8be49000) (async)

07:58:47 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:47 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
userfaultfd(0x80000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:47 executing program 4:
rt_sigreturn() (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
rt_sigreturn()

07:58:47 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/83, 0x53, 0x0, &(0x7f0000000140)=""/253, 0xfd}, &(0x7f0000000240)=0x40) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x8be49000)

07:58:47 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
userfaultfd(0x80000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:47 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:47 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd)

07:58:47 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)

07:58:47 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4)

07:58:47 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16)

07:58:47 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe)

07:58:47 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
userfaultfd(0x80000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:47 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xba}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a00, 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000200))
syz_io_uring_setup(0x61af, &(0x7f0000000000)={0x0, 0xe497, 0x0, 0x3, 0x270, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7b)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil})

07:58:47 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8)

[ 2036.716951][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[ 2036.723567][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x40010, 0xffffffffffffffff, 0x10000000)

07:58:48 executing program 0:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x222400, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x8, 0x40, 0x0, 0x7680, 0x15, "0685760ba927eff5fb3f3f1856b6d96d81b10b"})
syz_io_uring_setup(0x2c67, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x343100, 0x0)

07:58:48 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17)

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf)

07:58:48 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xba}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a00, 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000200))
syz_io_uring_setup(0x61af, &(0x7f0000000000)={0x0, 0xe497, 0x0, 0x3, 0x270, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7b)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xba}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a00, 0x0) (async)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000200)) (async)
syz_io_uring_setup(0x61af, &(0x7f0000000000)={0x0, 0xe497, 0x0, 0x3, 0x270, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7b) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil}) (async)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa)

07:58:48 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21040}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x4004000)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12b000, 0x0)
mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x0)
shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffa000/0x1000)=nil)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:48 executing program 0:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x222400, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x8, 0x40, 0x0, 0x7680, 0x15, "0685760ba927eff5fb3f3f1856b6d96d81b10b"})
syz_io_uring_setup(0x2c67, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x343100, 0x0)

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10)

07:58:48 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xba}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a00, 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000200))
syz_io_uring_setup(0x61af, &(0x7f0000000000)={0x0, 0xe497, 0x0, 0x3, 0x270, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7b)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xba}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a00, 0x0) (async)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000200)) (async)
syz_io_uring_setup(0x61af, &(0x7f0000000000)={0x0, 0xe497, 0x0, 0x3, 0x270, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7b) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil}) (async)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x40010, 0xffffffffffffffff, 0x10000000)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x40010, 0xffffffffffffffff, 0x10000000) (async)

07:58:48 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21040}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x4004000) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12b000, 0x0) (async)
mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x0)
shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffa000/0x1000)=nil)

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x40010, 0xffffffffffffffff, 0x10000000)

07:58:48 executing program 0:
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x222400, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x8, 0x40, 0x0, 0x7680, 0x15, "0685760ba927eff5fb3f3f1856b6d96d81b10b"})
syz_io_uring_setup(0x2c67, &(0x7f0000000140), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x343100, 0x0)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:48 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r0=>0x0, 0x27, 0x5, 0x4, 0x8, 0x50, @loopback, @empty, 0x0, 0x8000, 0x90000000, 0x5}})
unshare(0x14000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x1, {0x0, 0x1, 0x1}, 0x2}, 0x18)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd)

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:48 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21040}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x4004000) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x12b000, 0x0) (async)
mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x0) (async)
shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffa000/0x1000)=nil)

07:58:48 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1})
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0xc1, 0x3, {0x77359400}, {r3, r4/1000+10000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "487880b56dd9d528"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x800)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2, 0x50, 0xffffffffffffffff, 0x82000000)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)

07:58:48 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r0=>0x0, 0x27, 0x5, 0x4, 0x8, 0x50, @loopback, @empty, 0x0, 0x8000, 0x90000000, 0x5}}) (async)
unshare(0x14000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x1, {0x0, 0x1, 0x1}, 0x2}, 0x18)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13)

07:58:48 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1})
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0xc1, 0x3, {0x77359400}, {r3, r4/1000+10000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "487880b56dd9d528"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x800)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2, 0x50, 0xffffffffffffffff, 0x82000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
clock_gettime(0x0, &(0x7f0000000080)) (async)
sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0xc1, 0x3, {0x77359400}, {r3, r4/1000+10000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "487880b56dd9d528"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2, 0x50, 0xffffffffffffffff, 0x82000000) (async)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe)

07:58:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000000}]}, 0x1c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48}, 0x800)
syz_io_uring_setup(0x60f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:48 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r0=>0x0, 0x27, 0x5, 0x4, 0x8, 0x50, @loopback, @empty, 0x0, 0x8000, 0x90000000, 0x5}})
unshare(0x14000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x1, {0x0, 0x1, 0x1}, 0x2}, 0x18)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x27, 0x5, 0x4, 0x8, 0x50, @loopback, @empty, 0x0, 0x8000, 0x90000000, 0x5}}) (async)
unshare(0x14000000) (async)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0, 0x1, {0x0, 0x1, 0x1}, 0x2}, 0x18) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) (async)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf)

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000000}]}, 0x1c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48}, 0x800)
syz_io_uring_setup(0x60f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000000}]}, 0x1c}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48}, 0x800) (async)
syz_io_uring_setup(0x60f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='##\x00')

07:58:48 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1})
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0xc1, 0x3, {0x77359400}, {r3, r4/1000+10000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "487880b56dd9d528"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x800)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2, 0x50, 0xffffffffffffffff, 0x82000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1}}, 0x18) (async)
clock_gettime(0x0, &(0x7f0000000080)) (async)
sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0xc1, 0x3, {0x77359400}, {r3, r4/1000+10000}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "487880b56dd9d528"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2, 0x50, 0xffffffffffffffff, 0x82000000) (async)

07:58:48 executing program 1:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='##\x00')

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:48 executing program 1:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (rerun: 32)

07:58:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000000}]}, 0x1c}}, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48}, 0x800) (async)
syz_io_uring_setup(0x60f3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (rerun: 32)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:48 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='##\x00')

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:48 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:48 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17)

07:58:48 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)

07:58:48 executing program 1:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000))
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)

07:58:48 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13)

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x83000000)

07:58:49 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:49 executing program 5:
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)={0x3})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x100000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14)

07:58:49 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15)

07:58:49 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil)

07:58:49 executing program 1:
r0 = syz_io_uring_setup(0x47dd, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x8800)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',\x9a\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x94)
r4 = syz_io_uring_setup(0x232e, &(0x7f0000000000)={0x0, 0xe126, 0x20, 0x3, 0x333, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, r4, 0x10000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000, 0x12, r0, 0x8000000)

07:58:49 executing program 5:
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)={0x3}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x100000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x83000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x83000000) (async)

07:58:49 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

07:58:49 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil)

07:58:49 executing program 5:
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)={0x3}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x100000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x16)

07:58:49 executing program 1:
r0 = syz_io_uring_setup(0x47dd, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x8800) (async)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',\x9a\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x94)
r4 = syz_io_uring_setup(0x232e, &(0x7f0000000000)={0x0, 0xe126, 0x20, 0x3, 0x333, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, r4, 0x10000000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000, 0x12, r0, 0x8000000)

07:58:49 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x83000000)

07:58:49 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) (async)

07:58:49 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) (async)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17)

07:58:49 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xbeee}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:49 executing program 1:
r0 = syz_io_uring_setup(0x47dd, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x8800) (async)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',\x9a\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x94) (async)
r4 = syz_io_uring_setup(0x232e, &(0x7f0000000000)={0x0, 0xe126, 0x20, 0x3, 0x333, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, r4, 0x10000000) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000, 0x12, r0, 0x8000000)

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xcf}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x1a080)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:49 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x1785}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r1 = syz_io_uring_setup(0x24de, &(0x7f0000000040)={0x0, 0xdef4, 0x4, 0x1, 0x33f, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000004, 0x810, r1, 0x10000000)

07:58:49 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000440)=r1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={r1, 0x0, 0xffffffffffffffff, 0x1})
r2 = syz_open_dev$dri(&(0x7f00000003c0), 0xffffffffffffff81, 0x101000)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x6c5e, &(0x7f0000000300)={0x0, 0x75e5, 0x1, 0x1, 0x338, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000000c0))
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x65)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x3239, &(0x7f0000000200)={0x0, 0x7bcb, 0x10, 0x3, 0x38f, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000002c0))
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})

07:58:49 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xbeee}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f0000000140)={0x0, 0xe882}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0xffffffffffffffff)
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x44f)

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xcf}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x1a080)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:49 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})

07:58:49 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x1785}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r1 = syz_io_uring_setup(0x24de, &(0x7f0000000040)={0x0, 0xdef4, 0x4, 0x1, 0x33f, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000004, 0x810, r1, 0x10000000)

07:58:49 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xbeee}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (rerun: 64)

07:58:49 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})

07:58:49 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000440)=r1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={r1, 0x0, 0xffffffffffffffff, 0x1}) (async)
r2 = syz_open_dev$dri(&(0x7f00000003c0), 0xffffffffffffff81, 0x101000)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) (async)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x6c5e, &(0x7f0000000300)={0x0, 0x75e5, 0x1, 0x1, 0x338, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000000c0))
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x65) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x3239, &(0x7f0000000200)={0x0, 0x7bcb, 0x10, 0x3, 0x38f, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000002c0)) (async)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xcf}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x1a080)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f0000000140)={0x0, 0xe882}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0xffffffffffffffff) (async)
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x44f)

07:58:49 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x1785}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r1 = syz_io_uring_setup(0x24de, &(0x7f0000000040)={0x0, 0xdef4, 0x4, 0x1, 0x33f, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000004, 0x810, r1, 0x10000000)

07:58:49 executing program 1:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f0000000140)={0x0, 0xe882}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0xffffffffffffffff)
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x44f)
syz_io_uring_setup(0x2c67, &(0x7f0000000140)={0x0, 0xe882}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002, 0xffffffffffffffff) (async)
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x44f) (async)

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:49 executing program 0:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004081}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00008059eec5c3e1cf5af600", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250400000005ea000000000000050001000000000014000600fe8000000000000000000000000000400800040002000000080004000300000005000100000000001400050020010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x10)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
rt_sigreturn()
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:49 executing program 4:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0}) (rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000440)=r1) (async, rerun: 32)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={r1, 0x0, 0xffffffffffffffff, 0x1}) (async, rerun: 32)
r2 = syz_open_dev$dri(&(0x7f00000003c0), 0xffffffffffffff81, 0x101000)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) (async, rerun: 64)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (rerun: 64)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x6c5e, &(0x7f0000000300)={0x0, 0x75e5, 0x1, 0x1, 0x338, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000000c0)) (async)
r4 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x65)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x3239, &(0x7f0000000200)={0x0, 0x7bcb, 0x10, 0x3, 0x38f, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000002c0)) (async, rerun: 64)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})

07:58:49 executing program 1:
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0xb8, &(0x7f0000000000)="c824958711379d83fea3600ba55c21b61e792f27c3edf1ee6a82cb498eef163b6516c65b6db1b94aab8e1c13c24bcd1a3708d9587964d7ef1929e5140c103af38a5363bb3cec351a09ed1932a7bbd1841daad793802ae74e9d1ad666fd26642e4e7dc961d944ba3e60230885aa974ec0e08449cf408b2b2e02f6ede99894dbbd3ed8ec5088bcfc8665d30a7c26a4e1c69cd93a84a2c36d333ee556d6c1987cc72de17f2fbc209aa070b70eb58265149e2f3c7bf1a3b38827", 0x8, 0x0, 0x7, 0x127b, 0x7fff, 0x2, 0x1, 'syz1\x00'})
syz_io_uring_setup(0x618f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x279}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11)

07:58:49 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_setup(0x21fd, &(0x7f0000000000)={0x0, 0x7fb0, 0x10, 0x0, 0x73}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:49 executing program 0:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004081}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00008059eec5c3e1cf5af600", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250400000005ea000000000000050001000000000014000600fe8000000000000000000000000000400800040002000000080004000300000005000100000000001400050020010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x10)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
rt_sigreturn() (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:49 executing program 1:
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0xb8, &(0x7f0000000000)="c824958711379d83fea3600ba55c21b61e792f27c3edf1ee6a82cb498eef163b6516c65b6db1b94aab8e1c13c24bcd1a3708d9587964d7ef1929e5140c103af38a5363bb3cec351a09ed1932a7bbd1841daad793802ae74e9d1ad666fd26642e4e7dc961d944ba3e60230885aa974ec0e08449cf408b2b2e02f6ede99894dbbd3ed8ec5088bcfc8665d30a7c26a4e1c69cd93a84a2c36d333ee556d6c1987cc72de17f2fbc209aa070b70eb58265149e2f3c7bf1a3b38827", 0x8, 0x0, 0x7, 0x127b, 0x7fff, 0x2, 0x1, 'syz1\x00'})
syz_io_uring_setup(0x618f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x279}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0xb8, &(0x7f0000000000)="c824958711379d83fea3600ba55c21b61e792f27c3edf1ee6a82cb498eef163b6516c65b6db1b94aab8e1c13c24bcd1a3708d9587964d7ef1929e5140c103af38a5363bb3cec351a09ed1932a7bbd1841daad793802ae74e9d1ad666fd26642e4e7dc961d944ba3e60230885aa974ec0e08449cf408b2b2e02f6ede99894dbbd3ed8ec5088bcfc8665d30a7c26a4e1c69cd93a84a2c36d333ee556d6c1987cc72de17f2fbc209aa070b70eb58265149e2f3c7bf1a3b38827", 0x8, 0x0, 0x7, 0x127b, 0x7fff, 0x2, 0x1, 'syz1\x00'}) (async)
syz_io_uring_setup(0x618f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x279}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) (async)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:49 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:49 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:49 executing program 1:
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff, 0xb8, &(0x7f0000000000)="c824958711379d83fea3600ba55c21b61e792f27c3edf1ee6a82cb498eef163b6516c65b6db1b94aab8e1c13c24bcd1a3708d9587964d7ef1929e5140c103af38a5363bb3cec351a09ed1932a7bbd1841daad793802ae74e9d1ad666fd26642e4e7dc961d944ba3e60230885aa974ec0e08449cf408b2b2e02f6ede99894dbbd3ed8ec5088bcfc8665d30a7c26a4e1c69cd93a84a2c36d333ee556d6c1987cc72de17f2fbc209aa070b70eb58265149e2f3c7bf1a3b38827", 0x8, 0x0, 0x7, 0x127b, 0x7fff, 0x2, 0x1, 'syz1\x00'})
syz_io_uring_setup(0x618f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x279}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11)

07:58:49 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
syz_io_uring_setup(0x21fd, &(0x7f0000000000)={0x0, 0x7fb0, 0x10, 0x0, 0x73}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))

07:58:50 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})

07:58:50 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x80108906, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r2 = syz_io_uring_setup(0x600a, &(0x7f0000000040)={0x0, 0xcbda, 0x0, 0x3, 0x42, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
syz_io_uring_setup(0x1cd8, &(0x7f00000000c0)={0x0, 0xae49, 0x2, 0x1, 0x4000, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
clock_gettime(0x3, &(0x7f0000000000))

07:58:50 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x0, 0x1000)

07:58:50 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x2300)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/34, 0x22, 0x1, &(0x7f0000002180)=""/4112, 0x1010}, &(0x7f0000000080)=0x40)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:50 executing program 0:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004081}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00008059eec5c3e1cf5af600", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250400000005ea000000000000050001000000000014000600fe8000000000000000000000000000400800040002000000080004000300000005000100000000001400050020010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
rt_sigreturn() (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:50 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_setup(0x21fd, &(0x7f0000000000)={0x0, 0x7fb0, 0x10, 0x0, 0x73}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))

07:58:50 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffe000/0x1000)=nil) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})

07:58:50 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 64)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x2300) (rerun: 64)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (rerun: 32)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/34, 0x22, 0x1, &(0x7f0000002180)=""/4112, 0x1010}, &(0x7f0000000080)=0x40)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:50 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x80108906, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r2 = syz_io_uring_setup(0x600a, &(0x7f0000000040)={0x0, 0xcbda, 0x0, 0x3, 0x42, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
syz_io_uring_setup(0x1cd8, &(0x7f00000000c0)={0x0, 0xae49, 0x2, 0x1, 0x4000, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
clock_gettime(0x3, &(0x7f0000000000))

07:58:50 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x0, 0x1000)

07:58:50 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffe000/0x1000)=nil) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})

07:58:50 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ptrace$getenv(0x4201, 0xffffffffffffffff, 0x0, &(0x7f0000000000))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:50 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x0, 0x1000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x0, 0x1000) (async)

07:58:50 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x80108906, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r2 = syz_io_uring_setup(0x600a, &(0x7f0000000040)={0x0, 0xcbda, 0x0, 0x3, 0x42, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
syz_io_uring_setup(0x1cd8, &(0x7f00000000c0)={0x0, 0xae49, 0x2, 0x1, 0x4000, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
clock_gettime(0x3, &(0x7f0000000000))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x80108906, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x600a, &(0x7f0000000040)={0x0, 0xcbda, 0x0, 0x3, 0x42, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async)
syz_io_uring_setup(0x1cd8, &(0x7f00000000c0)={0x0, 0xae49, 0x2, 0x1, 0x4000, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
clock_gettime(0x3, &(0x7f0000000000)) (async)

07:58:50 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:50 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x2300)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/34, 0x22, 0x1, &(0x7f0000002180)=""/4112, 0x1010}, &(0x7f0000000080)=0x40) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:51 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12)

07:58:51 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ptrace$getenv(0x4201, 0xffffffffffffffff, 0x0, &(0x7f0000000000))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:51 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0x10, r0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:51 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) (async, rerun: 32)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) (async, rerun: 32)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x29, 0x800, 0x7f, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800240}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="100029bd7000e0dbdf250100000014000200776731000000000000008c6124cf5aae6b00000000000008000100", @ANYRES32=0x0, @ANYBLOB="24000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784314000200776731000000000000000000000000000800070009000000140002007767310000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e"], 0xa8}, 0x1, 0x0, 0x0, 0x913a1e78df1b72e4}, 0x20000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:51 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r0, 0x100000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x891}, 0x800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'})
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r1, 0xe3680000)

07:58:51 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:51 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r0, 0x100000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x891}, 0x800) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r1, 0xe3680000)

07:58:51 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ptrace$getenv(0x4201, 0xffffffffffffffff, 0x0, &(0x7f0000000000))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
ptrace$getenv(0x4201, 0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)

07:58:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair(0x29, 0x800, 0x7f, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800240}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) (async)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="100029bd7000e0dbdf250100000014000200776731000000000000008c6124cf5aae6b00000000000008000100", @ANYRES32=0x0, @ANYBLOB="24000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784314000200776731000000000000000000000000000800070009000000140002007767310000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e"], 0xa8}, 0x1, 0x0, 0x0, 0x913a1e78df1b72e4}, 0x20000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:51 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0x10, r0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:51 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12)

07:58:51 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x29, 0x800, 0x7f, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800240}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="100029bd7000e0dbdf250100000014000200776731000000000000008c6124cf5aae6b00000000000008000100", @ANYRES32=0x0, @ANYBLOB="24000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784314000200776731000000000000000000000000000800070009000000140002007767310000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e"], 0xa8}, 0x1, 0x0, 0x0, 0x913a1e78df1b72e4}, 0x20000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:51 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12)

07:58:51 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x7bdb, &(0x7f0000000000)={0x0, 0x9500, 0x1, 0x1, 0x1ba, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:51 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0x10, r0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:51 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x1010, r0, 0x100000000) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x891}, 0x800) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r1, 0xe3680000)

07:58:51 executing program 2:
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:51 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)

07:58:51 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:51 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x440400)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff5000/0xb000)=nil})

07:58:51 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0xfffffffffffffffb, 0x4000)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x80010, r0, 0x0)

07:58:51 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x7bdb, &(0x7f0000000000)={0x0, 0x9500, 0x1, 0x1, 0x1ba, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x7bdb, &(0x7f0000000000)={0x0, 0x9500, 0x1, 0x1, 0x1ba, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)

07:58:51 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x440400)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff5000/0xb000)=nil})

07:58:51 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:51 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)

07:58:51 executing program 2:
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:51 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0xfffffffffffffffb, 0x4000)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x80010, r0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0xfffffffffffffffb, 0x4000) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x80010, r0, 0x0) (async)

07:58:51 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async, rerun: 32)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x440400) (rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff5000/0xb000)=nil})

07:58:51 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x7bdb, &(0x7f0000000000)={0x0, 0x9500, 0x1, 0x1, 0x1ba, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:51 executing program 3:
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:51 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x50, r0, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000003c0)=0x6, 0x72f9, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r0, 0x10000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg1\x00'})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x8, 0x200d02)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x10, r5, 0x83000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg1\x00'})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x54, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}]}, 0x54}}, 0x20011810)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/134, 0x86, 0x1, &(0x7f00000000c0)=""/189, 0xbd}, &(0x7f00000001c0)=0x40)

07:58:51 executing program 2:
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:52 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x420800, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x8010, r0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:52 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) (async)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0xfffffffffffffffb, 0x4000) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x80010, r0, 0x0)

07:58:52 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080))
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400600, 0x0)
r1 = syz_io_uring_setup(0x65ef, &(0x7f00000000c0), &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x3})
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x3, 0xe0, 0x9})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1}}, 0x18)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r4, 0x1, {0x1, 0x0, 0x3}, 0x2}, 0x18)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000000, 0x110, r1, 0x4)

07:58:52 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x50, r0, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000003c0)=0x6, 0x72f9, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r0, 0x10000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg1\x00'})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x8, 0x200d02)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x10, r5, 0x83000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg1\x00'})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x54, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}]}, 0x54}}, 0x20011810)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/134, 0x86, 0x1, &(0x7f00000000c0)=""/189, 0xbd}, &(0x7f00000001c0)=0x40)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x50, r0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000003c0)=0x6, 0x72f9, 0x7) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r0, 0x10000000) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$sndpcmc(&(0x7f0000000440), 0x8, 0x200d02) (async)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x10, r5, 0x83000000) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x54, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}]}, 0x54}}, 0x20011810) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/134, 0x86, 0x1, &(0x7f00000000c0)=""/189, 0xbd}, &(0x7f00000001c0)=0x40) (async)

07:58:52 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x420800, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x8010, r0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:52 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:52 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, r0)

07:58:52 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:52 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:52 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, r0)

07:58:52 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x420800, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x8010, r0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:52 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400600, 0x0) (async)
r1 = syz_io_uring_setup(0x65ef, &(0x7f00000000c0), &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x3})
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x3, 0xe0, 0x9}) (async, rerun: 64)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1}}, 0x18) (async, rerun: 32)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r4, 0x1, {0x1, 0x0, 0x3}, 0x2}, 0x18) (async, rerun: 32)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000000, 0x110, r1, 0x4)

07:58:52 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x50, r0, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000003c0)=0x6, 0x72f9, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r0, 0x10000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg1\x00'})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000440), 0x8, 0x200d02)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x10, r5, 0x83000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg1\x00'})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x54, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}]}, 0x54}}, 0x20011810)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/134, 0x86, 0x1, &(0x7f00000000c0)=""/189, 0xbd}, &(0x7f00000001c0)=0x40)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x50, r0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000003c0)=0x6, 0x72f9, 0x7) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r0, 0x10000000) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$sndpcmc(&(0x7f0000000440), 0x8, 0x200d02) (async)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x10, r5, 0x83000000) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x54, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}]}, 0x54}}, 0x20011810) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/134, 0x86, 0x1, &(0x7f00000000c0)=""/189, 0xbd}, &(0x7f00000001c0)=0x40) (async)

07:58:52 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (rerun: 32)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, r0)

07:58:52 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:52 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
getrusage(0x1, &(0x7f0000000000))

07:58:52 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:52 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000180)=0x3, 0x6, 0x2)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil})
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0xffffffffffffff59)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
socketpair(0x11, 0x1, 0x904, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x1}}, 0x18)
connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x1, {0x1, 0xf0}}, 0x18)
syz_open_dev$dri(&(0x7f0000000100), 0xdd0, 0x2bcc82)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x83000000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})

07:58:52 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)

07:58:52 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
getrusage(0x1, &(0x7f0000000000))

07:58:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x84}}, 0x20000080)
getuid()
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x3, 0x1)
socket$bt_hidp(0x1f, 0x3, 0x6)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil})

07:58:52 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) (async, rerun: 32)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) (rerun: 32)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400600, 0x0)
r1 = syz_io_uring_setup(0x65ef, &(0x7f00000000c0), &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x3}) (async)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000140)={0x3, 0xe0, 0x9}) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1}}, 0x18) (async)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r4, 0x1, {0x1, 0x0, 0x3}, 0x2}, 0x18)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000000, 0x110, r1, 0x4)

07:58:52 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000180)=0x3, 0x6, 0x2) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil}) (async)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0xffffffffffffff59) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0}) (async)
socketpair(0x11, 0x1, 0x904, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x1}}, 0x18) (async)
connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x1, {0x1, 0xf0}}, 0x18) (async)
syz_open_dev$dri(&(0x7f0000000100), 0xdd0, 0x2bcc82) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x83000000) (async)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})

07:58:52 executing program 1:
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000))
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socketpair(0x2a, 0x81d, 0x8000, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4000000000000001)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x12, 0xa1, 0x80000000}, {0x1, 0x9, 0x8c, 0x80000000}, {0x29, 0x1, 0x9, 0x47}]})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r2)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:52 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async, rerun: 64)
getrusage(0x1, &(0x7f0000000000))

07:58:52 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x80000000, 0x10000)
prctl$PR_PAC_RESET_KEYS(0x36, 0x2)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0xf8e, 0x4)

07:58:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x84}}, 0x20000080) (async)
getuid() (async)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x3, 0x1)
socket$bt_hidp(0x1f, 0x3, 0x6)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil})

07:58:52 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000140)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="020004000002000000000000f680009a38ce65ac61ad67654c7ef451f8b49a51d8bcd83a01000000000000009259a2693c55172470f46005e993e766582f8b73c5e5bde6edd786f604ff15b94ff5b7f21c542cc892d2a5dc2a1549827e2769f02a4359ded9bf5f719645478e0bdfd29d2462936c5d33304a7a48bcf5d18006b9df6c5955687586614e3c5221954b4ca65fac4f38f45f922b7c34e63e356ff78760", @ANYRES64=r2, @ANYRES64=r3/1000+60000, @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYBLOB="04000000010000000000008020020000e1c6edef2b92ceba0bc2661360af56063a00b2708975a0aee44de7736f9bd7bf320de97610f16f37a1c57c1bbf33d2364f5daa975e60a5154824e6ca33ff0464"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x46000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000280))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_POLL(r6, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, r7, {0x9}}, 0x18)

07:58:52 executing program 1:
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000))
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socketpair(0x2a, 0x81d, 0x8000, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4000000000000001)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x12, 0xa1, 0x80000000}, {0x1, 0x9, 0x8c, 0x80000000}, {0x29, 0x1, 0x9, 0x47}]})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r2)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
socketpair(0x2a, 0x81d, 0x8000, &(0x7f0000000140)) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$binder(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4000000000000001) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x12, 0xa1, 0x80000000}, {0x1, 0x9, 0x8c, 0x80000000}, {0x29, 0x1, 0x9, 0x47}]}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r2) (async)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)

07:58:52 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000180)=0x3, 0x6, 0x2) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil}) (async)
mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0xffffffffffffff59) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32)
r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0}) (async)
socketpair(0x11, 0x1, 0x904, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x1}}, 0x18) (async)
connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x1, {0x1, 0xf0}}, 0x18) (async)
syz_open_dev$dri(&(0x7f0000000100), 0xdd0, 0x2bcc82) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x83000000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})

07:58:52 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x80000000, 0x10000)
prctl$PR_PAC_RESET_KEYS(0x36, 0x2)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0xf8e, 0x4)

07:58:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x84}}, 0x20000080)
getuid()
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x3, 0x1) (async)
socket$bt_hidp(0x1f, 0x3, 0x6) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil})

07:58:52 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0}) (async)
clock_gettime(0x0, &(0x7f0000000140)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="020004000002000000000000f680009a38ce65ac61ad67654c7ef451f8b49a51d8bcd83a01000000000000009259a2693c55172470f46005e993e766582f8b73c5e5bde6edd786f604ff15b94ff5b7f21c542cc892d2a5dc2a1549827e2769f02a4359ded9bf5f719645478e0bdfd29d2462936c5d33304a7a48bcf5d18006b9df6c5955687586614e3c5221954b4ca65fac4f38f45f922b7c34e63e356ff78760", @ANYRES64=r2, @ANYRES64=r3/1000+60000, @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYBLOB="04000000010000000000008020020000e1c6edef2b92ceba0bc2661360af56063a00b2708975a0aee44de7736f9bd7bf320de97610f16f37a1c57c1bbf33d2364f5daa975e60a5154824e6ca33ff0464"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x46000) (async, rerun: 64)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000280))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async, rerun: 64)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64)
read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_POLL(r6, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, r7, {0x9}}, 0x18)

07:58:52 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x80000000, 0x10000)
prctl$PR_PAC_RESET_KEYS(0x36, 0x2)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0xf8e, 0x4)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x80000000, 0x10000) (async)
prctl$PR_PAC_RESET_KEYS(0x36, 0x2) (async)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0xf8e, 0x4) (async)

07:58:52 executing program 1:
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socketpair(0x2a, 0x81d, 0x8000, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4000000000000001) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4, 0x12, 0xa1, 0x80000000}, {0x1, 0x9, 0x8c, 0x80000000}, {0x29, 0x1, 0x9, 0x47}]}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r2)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:52 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x1001)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x5, 0x0, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:52 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = userfaultfd(0x80800)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ff9000/0x3000)=nil})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4e44, @null, @netrom={'nr', 0x0}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]})
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x2})

07:58:52 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1b)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x894a9a4fa59660ac})

07:58:52 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x2)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffffff)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:52 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$snddsp_status(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6, 0x40010, r0, 0x82000000)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x3)

07:58:52 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x1001)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x5, 0x0, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:52 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1b) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x894a9a4fa59660ac})

07:58:52 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = userfaultfd(0x80800)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ff9000/0x3000)=nil})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4e44, @null, @netrom={'nr', 0x0}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]})
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x2})
syz_io_uring_setup(0x2c67, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
userfaultfd(0x80800) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ff9000/0x3000)=nil}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4e44, @null, @netrom={'nr', 0x0}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0) (async)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) (async)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x2}) (async)

07:58:52 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x2) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffffff) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:53 executing program 0:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0}) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f0000000140)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="020004000002000000000000f680009a38ce65ac61ad67654c7ef451f8b49a51d8bcd83a01000000000000009259a2693c55172470f46005e993e766582f8b73c5e5bde6edd786f604ff15b94ff5b7f21c542cc892d2a5dc2a1549827e2769f02a4359ded9bf5f719645478e0bdfd29d2462936c5d33304a7a48bcf5d18006b9df6c5955687586614e3c5221954b4ca65fac4f38f45f922b7c34e63e356ff78760", @ANYRES64=r2, @ANYRES64=r3/1000+60000, @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYBLOB="04000000010000000000008020020000e1c6edef2b92ceba0bc2661360af56063a00b2708975a0aee44de7736f9bd7bf320de97610f16f37a1c57c1bbf33d2364f5daa975e60a5154824e6ca33ff0464"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x46000) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000280)) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async, rerun: 32)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_POLL(r6, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, r7, {0x9}}, 0x18)

07:58:53 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x1001)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x5, 0x0, 0x1}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:53 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async, rerun: 64)
mmap$snddsp_status(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6, 0x40010, r0, 0x82000000) (async, rerun: 64)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x3)

07:58:53 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1b)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x894a9a4fa59660ac})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1b) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x894a9a4fa59660ac}) (async)

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = userfaultfd(0x80800)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ff9000/0x3000)=nil})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4e44, @null, @netrom={'nr', 0x0}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]})
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x2})
syz_io_uring_setup(0x2c67, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
userfaultfd(0x80800) (async)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ff9000/0x3000)=nil}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4e44, @null, @netrom={'nr', 0x0}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0) (async)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) (async)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x2}) (async)

07:58:53 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x2) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffffff) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:53 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = io_uring_setup(0x1618, &(0x7f0000000140)={0x0, 0x5ffd, 0x10, 0x3, 0x1b9, 0x0, r0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r1, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:53 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8000, 0x2000)
mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2000002, 0x10, r0, 0x82000000)

07:58:53 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$snddsp_status(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6, 0x40010, r0, 0x82000000)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x3)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$snddsp_status(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6, 0x40010, r0, 0x82000000) (async)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x3) (async)

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
ioprio_set$pid(0x0, r0, 0x2007)
mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

07:58:53 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8ee6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000})

07:58:53 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = io_uring_setup(0x1618, &(0x7f0000000140)={0x0, 0x5ffd, 0x10, 0x3, 0x1b9, 0x0, r0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r1, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x1618, &(0x7f0000000140)={0x0, 0x5ffd, 0x10, 0x3, 0x1b9, 0x0, r0}) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r1, 0x8000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:53 executing program 3:
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:53 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8000, 0x2000)
mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2000002, 0x10, r0, 0x82000000)

07:58:53 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8ee6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000})

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
ioprio_set$pid(0x0, r0, 0x2007)
mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) (async)
ioprio_set$pid(0x0, r0, 0x2007) (async)
mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) (async)

07:58:53 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r2 = syz_open_dev$dri(&(0x7f0000000200), 0x5d1cd295, 0x2000)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
r3 = syz_io_uring_setup(0x547a, &(0x7f0000000000)={0x0, 0x4a6, 0x1, 0x0, 0x2c4, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x6, 0x20010, r3, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

07:58:53 executing program 3:
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:58:53 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = io_uring_setup(0x1618, &(0x7f0000000140)={0x0, 0x5ffd, 0x10, 0x3, 0x1b9, 0x0, r0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r1, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x1618, &(0x7f0000000140)={0x0, 0x5ffd, 0x10, 0x3, 0x1b9, 0x0, r0}) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r1, 0x8000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:53 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8000, 0x2000)
mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2000002, 0x10, r0, 0x82000000)

07:58:53 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8ee6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000})

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
ioprio_set$pid(0x0, r0, 0x2007)
mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)

07:58:53 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})

07:58:53 executing program 3:
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:53 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
r2 = syz_open_dev$dri(&(0x7f0000000200), 0x5d1cd295, 0x2000)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil}) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
r3 = syz_io_uring_setup(0x547a, &(0x7f0000000000)={0x0, 0x4a6, 0x1, 0x0, 0x2c4, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x6, 0x20010, r3, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

07:58:53 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040)=[0x8, 0x1ff, 0x3, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4)

07:58:53 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async)

07:58:53 executing program 0:
syz_io_uring_setup(0x6f2d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x40}, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2bea, &(0x7f0000000040)={0x0, 0x42c7, 0x8, 0x2, 0xfd, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x10000000)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x67)

07:58:53 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x200)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x100)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x83000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:53 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async, rerun: 64)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (rerun: 64)
r2 = syz_open_dev$dri(&(0x7f0000000200), 0x5d1cd295, 0x2000)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil}) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
r3 = syz_io_uring_setup(0x547a, &(0x7f0000000000)={0x0, 0x4a6, 0x1, 0x0, 0x2c4, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x6, 0x20010, r3, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

07:58:53 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040)=[0x8, 0x1ff, 0x3, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4)

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x67)

07:58:53 executing program 0:
syz_io_uring_setup(0x6f2d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x40}, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2bea, &(0x7f0000000040)={0x0, 0x42c7, 0x8, 0x2, 0xfd, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x10000000)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
syz_io_uring_setup(0x6f2d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000000)={0x40}, 0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2bea, &(0x7f0000000040)={0x0, 0x42c7, 0x8, 0x2, 0xfd, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x10000000) (async)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)

07:58:53 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x200)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x100)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x83000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) (async)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x200) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x100) (async)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x83000000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:58:53 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async, rerun: 32)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (rerun: 32)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x67)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x67) (async)

07:58:53 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async, rerun: 32)
move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040)=[0x8, 0x1ff, 0x3, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x4) (rerun: 32)

07:58:53 executing program 0:
syz_io_uring_setup(0x6f2d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0xffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000000)={0x40}, 0x0, 0x0, 0x0) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2bea, &(0x7f0000000040)={0x0, 0x42c7, 0x8, 0x2, 0xfd, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x10000000)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:53 executing program 2:
syz_io_uring_setup(0x566d, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:53 executing program 3:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x200)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x100)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x83000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) (async)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000140)=0x200) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x100) (async)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x83000000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:53 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x7, 0x3})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r2 = io_uring_setup(0x3b52, &(0x7f0000000000)={0x0, 0x1324, 0x0, 0x2, 0x14f, 0x0, r1})
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc)

07:58:53 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil})

07:58:53 executing program 2:
syz_io_uring_setup(0x566d, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x566d, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:53 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:53 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

07:58:53 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async, rerun: 64)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil})

07:58:53 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
syz_io_uring_setup(0x2c67, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:58:53 executing program 2:
syz_io_uring_setup(0x566d, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:53 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)

07:58:53 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})

07:58:54 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:54 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) (async)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x7, 0x3}) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r2 = io_uring_setup(0x3b52, &(0x7f0000000000)={0x0, 0x1324, 0x0, 0x2, 0x14f, 0x0, r1})
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc)

07:58:54 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async, rerun: 32)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil})

07:58:54 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) (async)

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x5000)=nil})
syz_open_dev$sg(&(0x7f0000000040), 0x5, 0xc40)

07:58:54 executing program 2:
syz_io_uring_setup(0x4e55, &(0x7f0000000080)={0x0, 0x2, 0x8, 0x3, 0xfffffffe}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:54 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil)

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x5000)=nil}) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x5, 0xc40)

07:58:54 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) (async)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x7, 0x3}) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r2 = io_uring_setup(0x3b52, &(0x7f0000000000)={0x0, 0x1324, 0x0, 0x2, 0x14f, 0x0, r1})
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc)

07:58:54 executing program 4:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x254541, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf2508080000897545607bb7946ae288ab45bed9b14fa4f6fbe4623d57730afbba139b7c3de1a0a4ffe12b3a5c202dc08b5d0c7b98cc1b6209da0fbb0e63d6f501cbf3c0d6d73ffe8bebaeee5fbdc01f8f7833d358cdc502c7024f85"], 0x14}}, 0x4004)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

07:58:54 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
io_uring_setup(0x5a3f, &(0x7f0000000000)={0x0, 0xa389, 0x1, 0x3, 0x266, 0x0, r0})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r1 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, r1)

07:58:54 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil)

07:58:54 executing program 2:
syz_io_uring_setup(0x4e55, &(0x7f0000000080)={0x0, 0x2, 0x8, 0x3, 0xfffffffe}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:54 executing program 1:
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7fffffff, 0x1)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xa0b, 0x20, 0x1, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000b, 0x810, r0, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x3000)=nil)

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x5000)=nil}) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x5, 0xc40)

07:58:54 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
io_uring_setup(0x5a3f, &(0x7f0000000000)={0x0, 0xa389, 0x1, 0x3, 0x266, 0x0, r0})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r1 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, r1)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x5a3f, &(0x7f0000000000)={0x0, 0xa389, 0x1, 0x3, 0x266, 0x0, r0}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
pkey_alloc(0x0, 0x2) (async)
pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, r1) (async)

07:58:54 executing program 4:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x254541, 0x0) (async)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf2508080000897545607bb7946ae288ab45bed9b14fa4f6fbe4623d57730afbba139b7c3de1a0a4ffe12b3a5c202dc08b5d0c7b98cc1b6209da0fbb0e63d6f501cbf3c0d6d73ffe8bebaeee5fbdc01f8f7833d358cdc502c7024f85"], 0x14}}, 0x4004) (async, rerun: 64)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async, rerun: 64)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

07:58:54 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async, rerun: 64)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff9000/0x2000)=nil)

07:58:54 executing program 2:
syz_io_uring_setup(0x4e55, &(0x7f0000000080)={0x0, 0x2, 0x8, 0x3, 0xfffffffe}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x4e55, &(0x7f0000000080)={0x0, 0x2, 0x8, 0x3, 0xfffffffe}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:54 executing program 1:
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7fffffff, 0x1)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xa0b, 0x20, 0x1, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000b, 0x810, r0, 0x8000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) (async)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x3000)=nil)

07:58:54 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
io_uring_setup(0x5a3f, &(0x7f0000000000)={0x0, 0xa389, 0x1, 0x3, 0x266, 0x0, r0}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
r1 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, r1)

07:58:54 executing program 4:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x254541, 0x0) (async)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf2508080000897545607bb7946ae288ab45bed9b14fa4f6fbe4623d57730afbba139b7c3de1a0a4ffe12b3a5c202dc08b5d0c7b98cc1b6209da0fbb0e63d6f501cbf3c0d6d73ffe8bebaeee5fbdc01f8f7833d358cdc502c7024f85"], 0x14}}, 0x4004)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0xfffffffffffffffe, 0x0)
rt_sigreturn()
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x41)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
connect$can_bcm(r2, &(0x7f0000000080), 0x10)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040))
mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x59)

07:58:54 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x100)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0xfffffffffffffffe, 0x0)
rt_sigreturn() (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x41) (async)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) (async)
mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x59)

07:58:54 executing program 1:
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7fffffff, 0x1)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xa0b, 0x20, 0x1, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000b, 0x810, r0, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x2, 0x7fffffff, 0x1) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xa0b, 0x20, 0x1, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000b, 0x810, r0, 0x8000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) (async)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x3000)=nil) (async)

07:58:54 executing program 4:
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0xb6d, 0xa, 0x4, 0x100, 0x3f, {r0, r1/1000+60000}, {0x1, 0x8, 0x6, 0x2, 0x7, 0x80, "e6ffcb4f"}, 0xffff, 0x4, {}, 0x7ff})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x8, 0x2})
syz_open_dev$video(&(0x7f0000000140), 0x6, 0x40c801)

07:58:54 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x100)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (rerun: 64)

07:58:54 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r1 = syz_io_uring_setup(0x2d99, &(0x7f0000000000)={0x0, 0x5164, 0x20, 0x0, 0x2cd, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffa)

07:58:54 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='max=00000000000000000000007,stats=global,max=00000000000000000007412,max=00000000000000000001777,max=00000000000000000003637,max=00000000000000000000004,max=00000000000000000101200,max=00000000000000000132327,uid=', @ANYRESDEC=0xee00, @ANYBLOB="2c7834b42c65", @ANYRESDEC=0xee00, @ANYBLOB="2c6d6561737572652c6f626a5f747970653d2a5e4a152c00"])
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3})

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0xfffffffffffffffe, 0x0) (async)
rt_sigreturn()
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
r1 = syz_open_dev$media(&(0x7f0000000000), 0x9, 0x41)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040))
mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x59)

07:58:54 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x100)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:54 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil)

07:58:54 executing program 4:
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0xb6d, 0xa, 0x4, 0x100, 0x3f, {r0, r1/1000+60000}, {0x1, 0x8, 0x6, 0x2, 0x7, 0x80, "e6ffcb4f"}, 0xffff, 0x4, {}, 0x7ff}) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x8, 0x2}) (async)
syz_open_dev$video(&(0x7f0000000140), 0x6, 0x40c801)

07:58:54 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
r1 = syz_io_uring_setup(0x2d99, &(0x7f0000000000)={0x0, 0x5164, 0x20, 0x0, 0x2cd, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) (async)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffa)

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0xe97, 0x428000)
io_uring_setup(0x5d36, &(0x7f0000000000)={0x0, 0x728e, 0x0, 0x0, 0x3b2, 0x0, r0})
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x1000, 0x2})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:54 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:54 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async, rerun: 64)
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='max=00000000000000000000007,stats=global,max=00000000000000000007412,max=00000000000000000001777,max=00000000000000000003637,max=00000000000000000000004,max=00000000000000000101200,max=00000000000000000132327,uid=', @ANYRESDEC=0xee00, @ANYBLOB="2c7834b42c65", @ANYRESDEC=0xee00, @ANYBLOB="2c6d6561737572652c6f626a5f747970653d2a5e4a152c00"]) (async, rerun: 64)
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3})

07:58:54 executing program 4:
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0xb6d, 0xa, 0x4, 0x100, 0x3f, {r0, r1/1000+60000}, {0x1, 0x8, 0x6, 0x2, 0x7, 0x80, "e6ffcb4f"}, 0xffff, 0x4, {}, 0x7ff})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x8, 0x2})
syz_open_dev$video(&(0x7f0000000140), 0x6, 0x40c801)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd) (async)
clock_gettime(0x0, &(0x7f0000000040)) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0xb6d, 0xa, 0x4, 0x100, 0x3f, {r0, r1/1000+60000}, {0x1, 0x8, 0x6, 0x2, 0x7, 0x80, "e6ffcb4f"}, 0xffff, 0x4, {}, 0x7ff}) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x8, 0x2}) (async)
syz_open_dev$video(&(0x7f0000000140), 0x6, 0x40c801) (async)

07:58:54 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) (async)

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0xe97, 0x428000)
io_uring_setup(0x5d36, &(0x7f0000000000)={0x0, 0x728e, 0x0, 0x0, 0x3b2, 0x0, r0})
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x1000, 0x2}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:54 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r1 = syz_io_uring_setup(0x2d99, &(0x7f0000000000)={0x0, 0x5164, 0x20, 0x0, 0x2cd, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffa)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
syz_io_uring_setup(0x2d99, &(0x7f0000000000)={0x0, 0x5164, 0x20, 0x0, 0x2cd, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) (async)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffa) (async)

07:58:54 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x9, 0x1010, r1, 0x0)
munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x1000)=nil, 0x1000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
r4 = io_uring_setup(0x684d, &(0x7f0000000080)={0x0, 0x323, 0x4, 0x1, 0x27c})
syz_io_uring_setup(0x7b6a, &(0x7f0000000100)={0x0, 0xff3d, 0x0, 0x0, 0x84, 0x0, r4}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
mmap$binder(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1, 0x11, r3, 0x1)

07:58:54 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:54 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='max=00000000000000000000007,stats=global,max=00000000000000000007412,max=00000000000000000001777,max=00000000000000000003637,max=00000000000000000000004,max=00000000000000000101200,max=00000000000000000132327,uid=', @ANYRESDEC=0xee00, @ANYBLOB="2c7834b42c65", @ANYRESDEC=0xee00, @ANYBLOB="2c6d6561737572652c6f626a5f747970653d2a5e4a152c00"])
r0 = userfaultfd(0x80000)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3})

07:58:54 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil)

07:58:54 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (rerun: 64)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async, rerun: 64)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0xe97, 0x428000) (async, rerun: 64)
io_uring_setup(0x5d36, &(0x7f0000000000)={0x0, 0x728e, 0x0, 0x0, 0x3b2, 0x0, r0})
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x1000, 0x2}) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (rerun: 32)

07:58:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4001050)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x880)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1}}, 0x18)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x70, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040010}, 0x1)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xee5f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:54 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:55 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7)

07:58:55 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x9, 0x1010, r1, 0x0) (async)
munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) (async, rerun: 32)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x1000)=nil, 0x1000}, 0x1}) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0) (async)
r4 = io_uring_setup(0x684d, &(0x7f0000000080)={0x0, 0x323, 0x4, 0x1, 0x27c})
syz_io_uring_setup(0x7b6a, &(0x7f0000000100)={0x0, 0xff3d, 0x0, 0x0, 0x84, 0x0, r4}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async)
mmap$binder(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1, 0x11, r3, 0x1)

07:58:55 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x4010, r0, 0x83000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4001050)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x880)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1}}, 0x18)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x70, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040010}, 0x1)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xee5f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4001050) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x880) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1}}, 0x18) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x70, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xee5f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:58:55 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x2000)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil})

07:58:55 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7)

07:58:55 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x4010, r0, 0x83000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (rerun: 64)

07:58:55 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x9, 0x1010, r1, 0x0)
munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x1000)=nil, 0x1000}, 0x1})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
r4 = io_uring_setup(0x684d, &(0x7f0000000080)={0x0, 0x323, 0x4, 0x1, 0x27c})
syz_io_uring_setup(0x7b6a, &(0x7f0000000100)={0x0, 0xff3d, 0x0, 0x0, 0x84, 0x0, r4}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
mmap$binder(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1, 0x11, r3, 0x1)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
mmap$xdp(&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x9, 0x1010, r1, 0x0) (async)
munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x1000)=nil, 0x1000}, 0x1}) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0) (async)
io_uring_setup(0x684d, &(0x7f0000000080)={0x0, 0x323, 0x4, 0x1, 0x27c}) (async)
syz_io_uring_setup(0x7b6a, &(0x7f0000000100)={0x0, 0xff3d, 0x0, 0x0, 0x84, 0x0, r4}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async)
mmap$binder(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1, 0x11, r3, 0x1) (async)

07:58:55 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x2000)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x2000) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async)

07:58:55 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x10000000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x60030, r2, 0x10000000)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000001c0)={0x3, 0xfffffffffffffffc, 0xe681, 0x101})
syz_io_uring_setup(0xabb, &(0x7f0000000000)={0x0, 0x54a9, 0x4, 0x2, 0x166}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x3c, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4001050) (async, rerun: 32)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0) (async, rerun: 32)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x880) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', <r4=>0x0}) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1}}, 0x18) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x70, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xee5f}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:55 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7)

07:58:55 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x2000)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x2000) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async)

07:58:55 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:55 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x4010, r0, 0x83000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (rerun: 32)

07:58:55 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:55 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:55 executing program 2:
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x3})
syz_io_uring_setup(0x2c66, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:55 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r1, 0x10000000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x4ba, &(0x7f0000000000)={0x0, 0x7fb8, 0x2, 0x3, 0x137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x1b97, &(0x7f0000000200)={0x0, 0xfffffffc, 0x4, 0x7, 0x10000000, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x8010, r2, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:55 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x10000000) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x60030, r2, 0x10000000)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000001c0)={0x3, 0xfffffffffffffffc, 0xe681, 0x101}) (async)
syz_io_uring_setup(0xabb, &(0x7f0000000000)={0x0, 0x54a9, 0x4, 0x2, 0x166}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:55 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:55 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)

07:58:55 executing program 2:
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x3})
syz_io_uring_setup(0x2c66, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x3}) (async)
syz_io_uring_setup(0x2c66, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:55 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r0 = io_uring_setup(0x664a, &(0x7f0000000080)={0x0, 0xdb17, 0x0, 0x2, 0x219})
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x81)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r2 = getpid()
sched_rr_get_interval(r2, &(0x7f0000001440))
move_pages(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180)=[0xfffffe01, 0x1, 0x2605, 0x9, 0x0, 0x10000], &(0x7f00000001c0)=[0x0], 0x2)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}})

07:58:55 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x30, r0, 0x10000000) (async, rerun: 64)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async, rerun: 64)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x60030, r2, 0x10000000)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f00000001c0)={0x3, 0xfffffffffffffffc, 0xe681, 0x101})
syz_io_uring_setup(0xabb, &(0x7f0000000000)={0x0, 0x54a9, 0x4, 0x2, 0x166}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:55 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000001840)={&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x6}, 0x10000)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000001a00)={&(0x7f0000ffa000/0x1000)=nil, 0x5, 0x3, 0x20})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/163, 0xa3, 0x0, &(0x7f0000000140)=""/237, 0xed}, &(0x7f0000000280)=0x40)
recvmsg$can_bcm(r0, &(0x7f00000019c0)={&(0x7f0000001880), 0x80, &(0x7f0000001980)=[{&(0x7f0000001900)=""/105, 0x69}], 0x1}, 0x6143)

07:58:55 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 32)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r1, 0x10000000) (async, rerun: 32)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x4ba, &(0x7f0000000000)={0x0, 0x7fb8, 0x2, 0x3, 0x137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async)
r2 = syz_io_uring_setup(0x1b97, &(0x7f0000000200)={0x0, 0xfffffffc, 0x4, 0x7, 0x10000000, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x8010, r2, 0x10000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:55 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:55 executing program 2:
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x3}) (async)
syz_io_uring_setup(0x2c66, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:55 executing program 5:
syz_io_uring_setup(0x2c65, &(0x7f00000000c0)={0x0, 0x316e, 0x10, 0x0, 0x261}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0xffffffffffffffff)
remap_file_pages(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000009, 0x100000001, 0x8a102)

07:58:55 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r0 = io_uring_setup(0x664a, &(0x7f0000000080)={0x0, 0xdb17, 0x0, 0x2, 0x219})
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x81)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r2 = getpid()
sched_rr_get_interval(r2, &(0x7f0000001440))
move_pages(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180)=[0xfffffe01, 0x1, 0x2605, 0x9, 0x0, 0x10000], &(0x7f00000001c0)=[0x0], 0x2)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
io_uring_setup(0x664a, &(0x7f0000000080)={0x0, 0xdb17, 0x0, 0x2, 0x219}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x81) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6) (async)
getpid() (async)
sched_rr_get_interval(r2, &(0x7f0000001440)) (async)
move_pages(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180)=[0xfffffe01, 0x1, 0x2605, 0x9, 0x0, 0x10000], &(0x7f00000001c0)=[0x0], 0x2) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) (async)

07:58:55 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300001b, 0xffffffffffffffff)

07:58:55 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r1, 0x10000000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x4ba, &(0x7f0000000000)={0x0, 0x7fb8, 0x2, 0x3, 0x137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x1b97, &(0x7f0000000200)={0x0, 0xfffffffc, 0x4, 0x7, 0x10000000, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x8010, r2, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r1, 0x10000000) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x4ba, &(0x7f0000000000)={0x0, 0x7fb8, 0x2, 0x3, 0x137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x1b97, &(0x7f0000000200)={0x0, 0xfffffffc, 0x4, 0x7, 0x10000000, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x8010, r2, 0x10000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:58:55 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14)
syz_open_dev$usbfs(&(0x7f0000000080), 0x9adc, 0x450202)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1})
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, 0x0, {0xfffffff7}}, 0x18)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
userfaultfd(0x80801)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x40e202, 0x0)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x161300, 0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

07:58:55 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000001840)={&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x6}, 0x10000)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000001a00)={&(0x7f0000ffa000/0x1000)=nil, 0x5, 0x3, 0x20}) (rerun: 32)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (rerun: 64)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/163, 0xa3, 0x0, &(0x7f0000000140)=""/237, 0xed}, &(0x7f0000000280)=0x40) (async, rerun: 64)
recvmsg$can_bcm(r0, &(0x7f00000019c0)={&(0x7f0000001880), 0x80, &(0x7f0000001980)=[{&(0x7f0000001900)=""/105, 0x69}], 0x1}, 0x6143) (rerun: 64)

07:58:55 executing program 5:
syz_io_uring_setup(0x2c65, &(0x7f00000000c0)={0x0, 0x316e, 0x10, 0x0, 0x261}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0xffffffffffffffff) (async)
remap_file_pages(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000009, 0x100000001, 0x8a102)

07:58:55 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300001b, 0xffffffffffffffff)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300001b, 0xffffffffffffffff) (async)

07:58:55 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14)
syz_open_dev$usbfs(&(0x7f0000000080), 0x9adc, 0x450202) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) (async)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, 0x0, {0xfffffff7}}, 0x18) (async)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0) (async)
userfaultfd(0x80801)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x40e202, 0x0) (async)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x161300, 0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

07:58:55 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
r0 = io_uring_setup(0x664a, &(0x7f0000000080)={0x0, 0xdb17, 0x0, 0x2, 0x219}) (async)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x81) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6) (async)
r2 = getpid()
sched_rr_get_interval(r2, &(0x7f0000001440)) (async)
move_pages(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180)=[0xfffffe01, 0x1, 0x2605, 0x9, 0x0, 0x10000], &(0x7f00000001c0)=[0x0], 0x2) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}})

07:58:56 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r2 = io_uring_setup(0x6718, &(0x7f0000000000)={0x0, 0x882c, 0x4, 0x1, 0x203, 0x0, r0})
r3 = io_uring_setup(0x1d05, &(0x7f00000001c0)={0x0, 0x4e81, 0x1, 0x0, 0x357, 0x0, r2})
syz_io_uring_setup(0x1e96, &(0x7f0000000240)={0x0, 0xdf46, 0x1, 0x800003, 0x352, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000300))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x8001)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r1, 0x0)

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300001b, 0xffffffffffffffff)

07:58:56 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0x10000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:56 executing program 5:
syz_io_uring_setup(0x2c65, &(0x7f00000000c0)={0x0, 0x316e, 0x10, 0x0, 0x261}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0xffffffffffffffff)
remap_file_pages(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000009, 0x100000001, 0x8a102)
syz_io_uring_setup(0x2c65, &(0x7f00000000c0)={0x0, 0x316e, 0x10, 0x0, 0x261}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0xffffffffffffffff) (async)
remap_file_pages(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2000009, 0x100000001, 0x8a102) (async)

07:58:56 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14)
syz_open_dev$usbfs(&(0x7f0000000080), 0x9adc, 0x450202) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async, rerun: 64)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) (rerun: 64)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
write$FUSE_POLL(r2, &(0x7f0000000040)={0x18, 0x0, 0x0, {0xfffffff7}}, 0x18) (async)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, 0x0)
userfaultfd(0x80801) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x40e202, 0x0) (async)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x161300, 0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0xcfb9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7ff)

07:58:56 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0x10000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0x10000000) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)

07:58:56 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000001840)={&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/196, 0xc4}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x6}, 0x10000) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000001a00)={&(0x7f0000ffa000/0x1000)=nil, 0x5, 0x3, 0x20})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/163, 0xa3, 0x0, &(0x7f0000000140)=""/237, 0xed}, &(0x7f0000000280)=0x40) (async)
recvmsg$can_bcm(r0, &(0x7f00000019c0)={&(0x7f0000001880), 0x80, &(0x7f0000001980)=[{&(0x7f0000001900)=""/105, 0x69}], 0x1}, 0x6143)

07:58:56 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r2 = io_uring_setup(0x6718, &(0x7f0000000000)={0x0, 0x882c, 0x4, 0x1, 0x203, 0x0, r0})
r3 = io_uring_setup(0x1d05, &(0x7f00000001c0)={0x0, 0x4e81, 0x1, 0x0, 0x357, 0x0, r2})
syz_io_uring_setup(0x1e96, &(0x7f0000000240)={0x0, 0xdf46, 0x1, 0x800003, 0x352, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000300))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x8001)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r1, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_setup(0x6718, &(0x7f0000000000)={0x0, 0x882c, 0x4, 0x1, 0x203, 0x0, r0}) (async)
io_uring_setup(0x1d05, &(0x7f00000001c0)={0x0, 0x4e81, 0x1, 0x0, 0x357, 0x0, r2}) (async)
syz_io_uring_setup(0x1e96, &(0x7f0000000240)={0x0, 0xdf46, 0x1, 0x800003, 0x352, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000300)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x8001) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r1, 0x0) (async)

07:58:56 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x4fd2, &(0x7f0000000000)={0x0, 0xe201, 0x10, 0x2, 0x1a6, 0x0, r0}, &(0x7f00009fb000/0x1000)=nil, &(0x7f0000fdf000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_CQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x20010, r1, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0xcfb9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7ff)

07:58:56 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x100010, 0xffffffffffffffff, 0x10000000) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:56 executing program 2:
r0 = io_uring_setup(0x15a8, &(0x7f0000000080)={0x0, 0xded8, 0x0, 0x2, 0x223})
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0xcfb9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async, rerun: 64)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7ff)

07:58:56 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x0, 0x10000, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800)
syz_io_uring_setup(0x5495, &(0x7f0000000040)={0x0, 0xb784, 0x0, 0x3, 0x2cf, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:56 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x4fd2, &(0x7f0000000000)={0x0, 0xe201, 0x10, 0x2, 0x1a6, 0x0, r0}, &(0x7f00009fb000/0x1000)=nil, &(0x7f0000fdf000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_CQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x20010, r1, 0x8000000) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (rerun: 32)

07:58:56 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0xa1002)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socketpair(0x5, 0x1, 0xfff, &(0x7f0000000000))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:56 executing program 2:
r0 = io_uring_setup(0x15a8, &(0x7f0000000080)={0x0, 0xded8, 0x0, 0x2, 0x223})
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
io_uring_setup(0x15a8, &(0x7f0000000080)={0x0, 0xded8, 0x0, 0x2, 0x223}) (async)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:56 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r2 = io_uring_setup(0x6718, &(0x7f0000000000)={0x0, 0x882c, 0x4, 0x1, 0x203, 0x0, r0})
r3 = io_uring_setup(0x1d05, &(0x7f00000001c0)={0x0, 0x4e81, 0x1, 0x0, 0x357, 0x0, r2})
syz_io_uring_setup(0x1e96, &(0x7f0000000240)={0x0, 0xdf46, 0x1, 0x800003, 0x352, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000300)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x8001) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r1, 0x0)

07:58:56 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async, rerun: 32)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (rerun: 32)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x0, 0x10000, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 64)
accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) (async, rerun: 64)
syz_io_uring_setup(0x5495, &(0x7f0000000040)={0x0, 0xb784, 0x0, 0x3, 0x2cf, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) (async, rerun: 64)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000}) (async, rerun: 64)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:56 executing program 2:
r0 = io_uring_setup(0x15a8, &(0x7f0000000080)={0x0, 0xded8, 0x0, 0x2, 0x223})
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
io_uring_setup(0x15a8, &(0x7f0000000080)={0x0, 0xded8, 0x0, 0x2, 0x223}) (async)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:56 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x4fd2, &(0x7f0000000000)={0x0, 0xe201, 0x10, 0x2, 0x1a6, 0x0, r0}, &(0x7f00009fb000/0x1000)=nil, &(0x7f0000fdf000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_CQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x20010, r1, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, r0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000)

07:58:56 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

07:58:56 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0x8000000)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14)

07:58:56 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0xa1002)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
socketpair(0x5, 0x1, 0xfff, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:56 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, r0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000)

07:58:56 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

07:58:56 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)

07:58:56 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0x8000000)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14)

07:58:56 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x0, 0x10000, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800)
syz_io_uring_setup(0x5495, &(0x7f0000000040)={0x0, 0xb784, 0x0, 0x3, 0x2cf, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async)
shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000}) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:56 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, r0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000)

07:58:56 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x100000001, 0xa1002)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
socketpair(0x5, 0x1, 0xfff, &(0x7f0000000000)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:56 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:56 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)

07:58:56 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0x8000000) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x14) (rerun: 32)

07:58:56 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x151403, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)

07:58:56 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
syz_io_uring_setup(0x78fd, &(0x7f0000000000)={0x0, 0xe3cb, 0x0, 0x2, 0x361}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))

07:58:56 executing program 5:
io_uring_setup(0x16e1, &(0x7f00000001c0)={0x0, 0x9e1e, 0x0, 0x3, 0x396})
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x4000b381, 0x0, 0x8001}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x149, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:56 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x10010, r0, 0x10000000)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, r2)

07:58:56 executing program 4:
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x4000000, 0x10, 0xffffffffffffffff, 0x83000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:56 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x151403, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x151403, 0x0) (async)
mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) (async)

07:58:56 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async, rerun: 32)
syz_io_uring_setup(0x78fd, &(0x7f0000000000)={0x0, 0xe3cb, 0x0, 0x2, 0x361}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))

07:58:56 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:58:57 executing program 5:
io_uring_setup(0x16e1, &(0x7f00000001c0)={0x0, 0x9e1e, 0x0, 0x3, 0x396}) (async, rerun: 64)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x4000b381, 0x0, 0x8001}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (rerun: 64)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x149, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:57 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x10010, r0, 0x10000000)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r1, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, r2)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x10010, r0, 0x10000000) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r1, 0x10000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
pkey_alloc(0x0, 0x0) (async)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, r2) (async)

07:58:57 executing program 4:
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x4000000, 0x10, 0xffffffffffffffff, 0x83000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:57 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x151403, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3, 0x40010, 0xffffffffffffffff, 0x82000000)

07:58:57 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x10010, r0, 0x10000000)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x2010, r1, 0x10000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, r2)

07:58:57 executing program 4:
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x4000000, 0x10, 0xffffffffffffffff, 0x83000000) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:58:57 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4c5f, 0x40)

07:58:57 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x2000004)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg1\x00'})
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x2400c8d0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3, 0x40010, 0xffffffffffffffff, 0x82000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3, 0x40010, 0xffffffffffffffff, 0x82000000) (async)

07:58:57 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
syz_io_uring_setup(0x78fd, &(0x7f0000000000)={0x0, 0xe3cb, 0x0, 0x2, 0x361}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))

07:58:57 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x938a190bdf036787})

07:58:57 executing program 5:
io_uring_setup(0x16e1, &(0x7f00000001c0)={0x0, 0x9e1e, 0x0, 0x3, 0x396})
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x4000b381, 0x0, 0x8001}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x149, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
io_uring_setup(0x16e1, &(0x7f00000001c0)={0x0, 0x9e1e, 0x0, 0x3, 0x396}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x4000b381, 0x0, 0x8001}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x149, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async, rerun: 32)
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3, 0x40010, 0xffffffffffffffff, 0x82000000) (rerun: 32)

07:58:57 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x2000004)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg1\x00'})
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x2400c8d0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x2000004) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x2400c8d0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)

07:58:57 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4c5f, 0x40)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil) (async)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4c5f, 0x40) (async)

07:58:57 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async, rerun: 64)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async, rerun: 64)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x938a190bdf036787}) (rerun: 64)

07:58:57 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, 0xffffffffffffffff, 0x10000000)

07:58:57 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4c5f, 0x40)

07:58:57 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, 0xffffffffffffffff, 0x10000000)

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16)

07:58:57 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x938a190bdf036787})

07:58:57 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x2000004)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg1\x00'})
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x2400c8d0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x2000004) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x2400c8d0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)

07:58:57 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, 0xffffffffffffffff, 0x10000000) (async)

07:58:57 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1)
r2 = syz_io_uring_setup(0x4332, &(0x7f0000000000)={0x0, 0x7c79, 0x4, 0x2, 0x14, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r3 = io_uring_setup(0x2684, &(0x7f0000000180)={0x0, 0x9794, 0x8, 0x0, 0x2eb, 0x0, r2})
io_uring_setup(0x7556, &(0x7f0000000200)={0x0, 0x330b, 0x10, 0x3, 0x52})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x80010, r3, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16)

07:58:57 executing program 2:
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x7)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:57 executing program 4:
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x283c, 0x4000000)

07:58:57 executing program 0:
syz_io_uring_setup(0x2c64, &(0x7f00000000c0)={0x0, 0x1df2, 0x0, 0x0, 0x4b}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:57 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x2, 0x1, 0xc1})

07:58:57 executing program 2:
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x7)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16)

07:58:57 executing program 4:
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x283c, 0x4000000)

07:58:57 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x2, 0x1, 0xc1})

07:58:57 executing program 0:
syz_io_uring_setup(0x2c64, &(0x7f00000000c0)={0x0, 0x1df2, 0x0, 0x0, 0x4b}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:57 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) (async)
r2 = syz_io_uring_setup(0x4332, &(0x7f0000000000)={0x0, 0x7c79, 0x4, 0x2, 0x14, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r3 = io_uring_setup(0x2684, &(0x7f0000000180)={0x0, 0x9794, 0x8, 0x0, 0x2eb, 0x0, r2}) (async)
io_uring_setup(0x7556, &(0x7f0000000200)={0x0, 0x330b, 0x10, 0x3, 0x52})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x80010, r3, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:57 executing program 2:
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x7)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000000)=0x7) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:58:57 executing program 4:
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x283c, 0x4000000)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x283c, 0x4000000) (async)

07:58:57 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r0, 0x0) (async)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x2, 0x1, 0xc1})

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})

07:58:57 executing program 0:
syz_io_uring_setup(0x2c64, &(0x7f00000000c0)={0x0, 0x1df2, 0x0, 0x0, 0x4b}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})

07:58:57 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x80b381, 0x20, 0xfffffffd}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000))

07:58:57 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffab1, 0x2, 0x2})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)

07:58:57 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1)
r2 = syz_io_uring_setup(0x4332, &(0x7f0000000000)={0x0, 0x7c79, 0x4, 0x2, 0x14, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r3 = io_uring_setup(0x2684, &(0x7f0000000180)={0x0, 0x9794, 0x8, 0x0, 0x2eb, 0x0, r2})
io_uring_setup(0x7556, &(0x7f0000000200)={0x0, 0x330b, 0x10, 0x3, 0x52})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x80010, r3, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:57 executing program 2:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000240)=0x5)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = getuid()
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)=ANY=[@ANYBLOB='stats=global,max=00000000000000000000R04,max=00000000000000000007351,stats=global,max=000000000000000000004,stats\x00\x00lobal,stats=global,smackfsdef=\x00,uid=', @ANYRESDEC=r0, @ANYBLOB="2c66736d616769633d3078896666666666666666666666666435622c6f626a5f726f6c653d3a2d5c23212ff63a242c00"])
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0xfffffffffffffffe, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000380))

07:58:57 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:57 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})

07:58:57 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x80b381, 0x20, 0xfffffffd}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x80b381, 0x20, 0xfffffffd}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) (async)

07:58:57 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x4035, &(0x7f0000000000)={0x0, 0xf29b, 0x2, 0x1, 0x2c9, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xdb24}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:57 executing program 2:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000240)=0x5)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = getuid()
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)=ANY=[@ANYBLOB='stats=global,max=00000000000000000000R04,max=00000000000000000007351,stats=global,max=000000000000000000004,stats\x00\x00lobal,stats=global,smackfsdef=\x00,uid=', @ANYRESDEC=r0, @ANYBLOB="2c66736d616769633d3078896666666666666666666666666435622c6f626a5f726f6c653d3a2d5c23212ff63a242c00"])
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0xfffffffffffffffe, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000380))
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000240)=0x5) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
getuid() (async)
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)=ANY=[@ANYBLOB='stats=global,max=00000000000000000000R04,max=00000000000000000007351,stats=global,max=000000000000000000004,stats\x00\x00lobal,stats=global,smackfsdef=\x00,uid=', @ANYRESDEC=r0, @ANYBLOB="2c66736d616769633d3078896666666666666666666666666435622c6f626a5f726f6c653d3a2d5c23212ff63a242c00"]) (async)
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0xfffffffffffffffe, 0x0) (async)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) (async)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000380)) (async)

07:58:58 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffab1, 0x2, 0x2})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffab1, 0x2, 0x2}) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) (async)

[ 2047.071836][   T26] audit: type=1326 audit(1645084737.932:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31644 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c8501059 code=0x0
07:58:58 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x93f9, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x6a, 0xc6, &(0x7f0000000080)="5b70ac9ff325cda55568f8c78c30aa9869d1ec8cce9e735aa083a033f6ed523d58a1334bc3d0905e24870a6f8fad0c9c274ce42514559ba2a59beb1738a233a6c1636d062b62d92bc3bb80f83a41d608ab331e5521ad36b6a9da2df3dd537900c5d9963b92333667c0dd9fde432119e492feb11b81ec1a06bcc89da21fe8f57c6b685d9ece9cace546390d5d4c57b0cdf36f48a770acbe7481bcb7e09395d1ccdea2f2878edc7e80dddb593bdb1bc4fe3b3fd4d627ef184f9a767f8f9968d910ea7aa2a91764", 0x4, 0x5, 0x3, 0xf809, 0x8, 0x4, 0x7fffffff, 'syz1\x00'})
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)

07:58:58 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x80b381, 0x20, 0xfffffffd}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000))

07:58:58 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x4035, &(0x7f0000000000)={0x0, 0xf29b, 0x2, 0x1, 0x2c9, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async, rerun: 32)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xdb24}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:58 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffab1, 0x2, 0x2})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13)

07:58:58 executing program 2:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000240)=0x5) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = getuid()
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)=ANY=[@ANYBLOB='stats=global,max=00000000000000000000R04,max=00000000000000000007351,stats=global,max=000000000000000000004,stats\x00\x00lobal,stats=global,smackfsdef=\x00,uid=', @ANYRESDEC=r0, @ANYBLOB="2c66736d616769633d3078896666666666666666666666666435622c6f626a5f726f6c653d3a2d5c23212ff63a242c00"]) (async)
ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) (async)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0xfffffffffffffffe, 0x0) (async)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) (async)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000380))

07:58:58 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x93f9, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x6a, 0xc6, &(0x7f0000000080)="5b70ac9ff325cda55568f8c78c30aa9869d1ec8cce9e735aa083a033f6ed523d58a1334bc3d0905e24870a6f8fad0c9c274ce42514559ba2a59beb1738a233a6c1636d062b62d92bc3bb80f83a41d608ab331e5521ad36b6a9da2df3dd537900c5d9963b92333667c0dd9fde432119e492feb11b81ec1a06bcc89da21fe8f57c6b685d9ece9cace546390d5d4c57b0cdf36f48a770acbe7481bcb7e09395d1ccdea2f2878edc7e80dddb593bdb1bc4fe3b3fd4d627ef184f9a767f8f9968d910ea7aa2a91764", 0x4, 0x5, 0x3, 0xf809, 0x8, 0x4, 0x7fffffff, 'syz1\x00'}) (async)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)

[ 2047.353278][T31684] cgroup: fork rejected by pids controller in /syz5
07:58:58 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)

07:58:58 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x100000001, 0x5, 0x59})

07:58:58 executing program 4:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_io_uring_setup(0x6044, &(0x7f0000000000)={0x0, 0x2e71, 0x8, 0x1, 0x2b7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r0, 0x8000000)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)

07:58:58 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x93f9, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x6a, 0xc6, &(0x7f0000000080)="5b70ac9ff325cda55568f8c78c30aa9869d1ec8cce9e735aa083a033f6ed523d58a1334bc3d0905e24870a6f8fad0c9c274ce42514559ba2a59beb1738a233a6c1636d062b62d92bc3bb80f83a41d608ab331e5521ad36b6a9da2df3dd537900c5d9963b92333667c0dd9fde432119e492feb11b81ec1a06bcc89da21fe8f57c6b685d9ece9cace546390d5d4c57b0cdf36f48a770acbe7481bcb7e09395d1ccdea2f2878edc7e80dddb593bdb1bc4fe3b3fd4d627ef184f9a767f8f9968d910ea7aa2a91764", 0x4, 0x5, 0x3, 0xf809, 0x8, 0x4, 0x7fffffff, 'syz1\x00'})
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x93f9, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x6a, 0xc6, &(0x7f0000000080)="5b70ac9ff325cda55568f8c78c30aa9869d1ec8cce9e735aa083a033f6ed523d58a1334bc3d0905e24870a6f8fad0c9c274ce42514559ba2a59beb1738a233a6c1636d062b62d92bc3bb80f83a41d608ab331e5521ad36b6a9da2df3dd537900c5d9963b92333667c0dd9fde432119e492feb11b81ec1a06bcc89da21fe8f57c6b685d9ece9cace546390d5d4c57b0cdf36f48a770acbe7481bcb7e09395d1ccdea2f2878edc7e80dddb593bdb1bc4fe3b3fd4d627ef184f9a767f8f9968d910ea7aa2a91764", 0x4, 0x5, 0x3, 0xf809, 0x8, 0x4, 0x7fffffff, 'syz1\x00'}) (async)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) (async)

07:58:58 executing program 2:
syz_io_uring_setup(0x278b, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x4, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:58 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x4035, &(0x7f0000000000)={0x0, 0xf29b, 0x2, 0x1, 0x2c9, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xdb24}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:58 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, 0x0, 0x3, 0x8})

07:58:58 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x100000001, 0x5, 0x59})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x100000001, 0x5, 0x59}) (async)

07:58:58 executing program 5:
syz_io_uring_setup(0x5883, &(0x7f00000000c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:58 executing program 2:
syz_io_uring_setup(0x278b, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x4, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:58 executing program 4:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_io_uring_setup(0x6044, &(0x7f0000000000)={0x0, 0x2e71, 0x8, 0x1, 0x2b7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) (async, rerun: 32)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r0, 0x8000000) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)

[ 2047.972032][   T26] audit: type=1326 audit(1645084738.832:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31747 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c8501059 code=0x0
07:58:58 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, 0x0, 0x3, 0x8})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, 0x0, 0x3, 0x8}) (async)

[ 2048.074676][   T26] audit: type=1326 audit(1645084738.892:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31747 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c8501059 code=0x0
07:58:59 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:58:59 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x100000001, 0x5, 0x59})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x100000001, 0x5, 0x59}) (async)

07:58:59 executing program 4:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) (async)
r0 = syz_io_uring_setup(0x6044, &(0x7f0000000000)={0x0, 0x2e71, 0x8, 0x1, 0x2b7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r0, 0x8000000) (async)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)

07:58:59 executing program 5:
syz_io_uring_setup(0x5883, &(0x7f00000000c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:58:59 executing program 2:
syz_io_uring_setup(0x278b, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x4, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (rerun: 32)

07:58:59 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, 0x0, 0x3, 0x8})

07:58:59 executing program 3:
r0 = syz_io_uring_setup(0x2383, &(0x7f0000000000)={0x0, 0x5608, 0x20, 0x2, 0x1e6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0)=r1)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x40010, r2, 0x10000000)
r3 = io_uring_setup(0x7a99, &(0x7f0000000300)={0x0, 0xf664, 0x1, 0x1, 0x289, 0x0, r2})
syz_io_uring_setup(0x4116, &(0x7f0000000480)={0x0, 0x6148, 0x10, 0x0, 0x262, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_setup(0x5d62, &(0x7f0000000380)={0x0, 0xcac0, 0x2, 0x1, 0x311, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r4 = io_uring_setup(0x1509, &(0x7f00000001c0)={0x0, 0xd4b8, 0xed20cd2e24aa99d8, 0x3, 0x4, 0x0, r0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000680)={r1, 0x2, 0xffffffffffffffff, 0x7, 0x80000})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r4, 0x0)
r5 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000005c0)={0x8, &(0x7f0000000580)=[{0x9, 0x40, 0x6, 0x7}, {0x0, 0x1f, 0x7, 0x54e}, {0x8000, 0xfc, 0x4c, 0x5}, {0x6, 0x5, 0x0, 0xdcf0000}, {0x0, 0x1, 0x1f, 0x10000}, {0x40, 0x20, 0x81, 0x6}, {0x400, 0x8c, 0x7f, 0x3}, {0x20, 0x20, 0x2, 0x6}]})
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:58:59 executing program 5:
syz_io_uring_setup(0x5883, &(0x7f00000000c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
syz_io_uring_setup(0x5883, &(0x7f00000000c0), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)

[ 2048.918877][   T26] audit: type=1326 audit(1645084739.782:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31792 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c8501059 code=0x0
07:58:59 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:59 executing program 2:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:58:59 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:58:59 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf0de, 0x230e00)
mmap$usbfs(&(0x7f0000935000/0x3000)=nil, 0x3000, 0x300000f, 0x810, r0, 0x8000000000000000)
r1 = syz_io_uring_setup(0x6268, &(0x7f0000000140)={0x0, 0x4670, 0x1, 0x3, 0x94}, &(0x7f000090c000/0x1000)=nil, &(0x7f00005ff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000002c0))
io_uring_setup(0x59b0, &(0x7f0000000240)={0x0, 0xf2f, 0x4, 0x2, 0xbe, 0x0, r1})
move_pages(0x0, 0xa, &(0x7f0000000040)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fc1000/0x1000)=nil, &(0x7f0000ea2000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f00000000c0)=[0x6, 0xfffffc01], &(0x7f0000000100)=[0x0], 0x6)

07:59:00 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x800)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff7000/0x9000)=nil})

07:59:00 executing program 5:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x84ec}, 0x8)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

07:59:00 executing program 2:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:00 executing program 3:
r0 = syz_io_uring_setup(0x2383, &(0x7f0000000000)={0x0, 0x5608, 0x20, 0x2, 0x1e6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0)=r1)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x40010, r2, 0x10000000)
r3 = io_uring_setup(0x7a99, &(0x7f0000000300)={0x0, 0xf664, 0x1, 0x1, 0x289, 0x0, r2})
syz_io_uring_setup(0x4116, &(0x7f0000000480)={0x0, 0x6148, 0x10, 0x0, 0x262, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_setup(0x5d62, &(0x7f0000000380)={0x0, 0xcac0, 0x2, 0x1, 0x311, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r4 = io_uring_setup(0x1509, &(0x7f00000001c0)={0x0, 0xd4b8, 0xed20cd2e24aa99d8, 0x3, 0x4, 0x0, r0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000680)={r1, 0x2, 0xffffffffffffffff, 0x7, 0x80000})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r4, 0x0)
r5 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000005c0)={0x8, &(0x7f0000000580)=[{0x9, 0x40, 0x6, 0x7}, {0x0, 0x1f, 0x7, 0x54e}, {0x8000, 0xfc, 0x4c, 0x5}, {0x6, 0x5, 0x0, 0xdcf0000}, {0x0, 0x1, 0x1f, 0x10000}, {0x40, 0x20, 0x81, 0x6}, {0x400, 0x8c, 0x7f, 0x3}, {0x20, 0x20, 0x2, 0x6}]})
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
syz_io_uring_setup(0x2383, &(0x7f0000000000)={0x0, 0x5608, 0x20, 0x2, 0x1e6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0)=r1) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x40010, r2, 0x10000000) (async)
io_uring_setup(0x7a99, &(0x7f0000000300)={0x0, 0xf664, 0x1, 0x1, 0x289, 0x0, r2}) (async)
syz_io_uring_setup(0x4116, &(0x7f0000000480)={0x0, 0x6148, 0x10, 0x0, 0x262, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) (async)
syz_io_uring_setup(0x5d62, &(0x7f0000000380)={0x0, 0xcac0, 0x2, 0x1, 0x311, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) (async)
io_uring_setup(0x1509, &(0x7f00000001c0)={0x0, 0xd4b8, 0xed20cd2e24aa99d8, 0x3, 0x4, 0x0, r0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000680)={r1, 0x2, 0xffffffffffffffff, 0x7, 0x80000}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r4, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000005c0)={0x8, &(0x7f0000000580)=[{0x9, 0x40, 0x6, 0x7}, {0x0, 0x1f, 0x7, 0x54e}, {0x8000, 0xfc, 0x4c, 0x5}, {0x6, 0x5, 0x0, 0xdcf0000}, {0x0, 0x1, 0x1f, 0x10000}, {0x40, 0x20, 0x81, 0x6}, {0x400, 0x8c, 0x7f, 0x3}, {0x20, 0x20, 0x2, 0x6}]}) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:59:00 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf0de, 0x230e00)
mmap$usbfs(&(0x7f0000935000/0x3000)=nil, 0x3000, 0x300000f, 0x810, r0, 0x8000000000000000)
r1 = syz_io_uring_setup(0x6268, &(0x7f0000000140)={0x0, 0x4670, 0x1, 0x3, 0x94}, &(0x7f000090c000/0x1000)=nil, &(0x7f00005ff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000002c0))
io_uring_setup(0x59b0, &(0x7f0000000240)={0x0, 0xf2f, 0x4, 0x2, 0xbe, 0x0, r1}) (async)
move_pages(0x0, 0xa, &(0x7f0000000040)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fc1000/0x1000)=nil, &(0x7f0000ea2000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f00000000c0)=[0x6, 0xfffffc01], &(0x7f0000000100)=[0x0], 0x6)

07:59:00 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:59:00 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0)
mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x80000a, 0x13, r0, 0xa183000)

07:59:00 executing program 5:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x84ec}, 0x8) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

07:59:00 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf0de, 0x230e00)
mmap$usbfs(&(0x7f0000935000/0x3000)=nil, 0x3000, 0x300000f, 0x810, r0, 0x8000000000000000) (async)
r1 = syz_io_uring_setup(0x6268, &(0x7f0000000140)={0x0, 0x4670, 0x1, 0x3, 0x94}, &(0x7f000090c000/0x1000)=nil, &(0x7f00005ff000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) (async)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000002c0))
io_uring_setup(0x59b0, &(0x7f0000000240)={0x0, 0xf2f, 0x4, 0x2, 0xbe, 0x0, r1})
move_pages(0x0, 0xa, &(0x7f0000000040)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fc1000/0x1000)=nil, &(0x7f0000ea2000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f00000000c0)=[0x6, 0xfffffc01], &(0x7f0000000100)=[0x0], 0x6)

07:59:00 executing program 2:
syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:00 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x800)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff7000/0x9000)=nil})

07:59:00 executing program 3:
r0 = syz_io_uring_setup(0x2383, &(0x7f0000000000)={0x0, 0x5608, 0x20, 0x2, 0x1e6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0)=r1) (async)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x40010, r2, 0x10000000) (async)
r3 = io_uring_setup(0x7a99, &(0x7f0000000300)={0x0, 0xf664, 0x1, 0x1, 0x289, 0x0, r2})
syz_io_uring_setup(0x4116, &(0x7f0000000480)={0x0, 0x6148, 0x10, 0x0, 0x262, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) (async)
syz_io_uring_setup(0x5d62, &(0x7f0000000380)={0x0, 0xcac0, 0x2, 0x1, 0x311, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440))
r4 = io_uring_setup(0x1509, &(0x7f00000001c0)={0x0, 0xd4b8, 0xed20cd2e24aa99d8, 0x3, 0x4, 0x0, r0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000680)={r1, 0x2, 0xffffffffffffffff, 0x7, 0x80000}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r4, 0x0) (async)
r5 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000005c0)={0x8, &(0x7f0000000580)=[{0x9, 0x40, 0x6, 0x7}, {0x0, 0x1f, 0x7, 0x54e}, {0x8000, 0xfc, 0x4c, 0x5}, {0x6, 0x5, 0x0, 0xdcf0000}, {0x0, 0x1, 0x1f, 0x10000}, {0x40, 0x20, 0x81, 0x6}, {0x400, 0x8c, 0x7f, 0x3}, {0x20, 0x20, 0x2, 0x6}]})
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:00 executing program 5:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x84ec}, 0x8)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}})

07:59:00 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
prctl$PR_PAC_RESET_KEYS(0x36, 0xb)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000)
mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x4000010, r0, 0x800)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSBRK(r2, 0x5409, 0x10000)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x4, 0x4e})

07:59:00 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0)
mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x80000a, 0x13, r0, 0xa183000)

07:59:00 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:00 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x800)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff7000/0x9000)=nil})

07:59:00 executing program 3:
syz_open_dev$media(&(0x7f0000000180), 0x8, 0x80200)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)={0x4, 0x4a, 0x2})
syz_io_uring_setup(0x4fb, &(0x7f0000000000)={0x0, 0x7c53, 0x10, 0x2, 0x281}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140))
r0 = syz_io_uring_setup(0x42c67, &(0x7f00000000c0)={0x0, 0x7b0e, 0x8, 0x1, 0x360}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000001c0))
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x40010, r0, 0x6dc7a000)

07:59:00 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x6, 0x6, 0x1ff})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:00 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0)
mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x80000a, 0x13, r0, 0xa183000)

07:59:00 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:00 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
prctl$PR_PAC_RESET_KEYS(0x36, 0xb)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000)
mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x4000010, r0, 0x800)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSBRK(r2, 0x5409, 0x10000)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x4, 0x4e})

07:59:00 executing program 0:
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:00 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x6, 0x6, 0x1ff})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x6, 0x6, 0x1ff}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)

07:59:00 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
prctl$PR_PAC_RESET_KEYS(0x36, 0xb)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000)
mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x4000010, r0, 0x800)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSBRK(r2, 0x5409, 0x10000)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x4, 0x4e})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
prctl$PR_PAC_RESET_KEYS(0x36, 0xb) (async)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) (async)
mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x4000010, r0, 0x800) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$TCSBRK(r2, 0x5409, 0x10000) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x4, 0x4e}) (async)

07:59:00 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0xd18, 0x0)

07:59:00 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:59:01 executing program 3:
syz_open_dev$media(&(0x7f0000000180), 0x8, 0x80200)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)={0x4, 0x4a, 0x2}) (async)
syz_io_uring_setup(0x4fb, &(0x7f0000000000)={0x0, 0x7c53, 0x10, 0x2, 0x281}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
r0 = syz_io_uring_setup(0x42c67, &(0x7f00000000c0)={0x0, 0x7b0e, 0x8, 0x1, 0x360}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000001c0))
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x40010, r0, 0x6dc7a000)

07:59:01 executing program 0:
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:01 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0xd18, 0x0)

07:59:01 executing program 5:
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x6, 0x6, 0x1ff})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:01 executing program 3:
syz_open_dev$media(&(0x7f0000000180), 0x8, 0x80200) (async)
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)={0x4, 0x4a, 0x2}) (async)
syz_io_uring_setup(0x4fb, &(0x7f0000000000)={0x0, 0x7c53, 0x10, 0x2, 0x281}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async, rerun: 32)
r0 = syz_io_uring_setup(0x42c67, &(0x7f00000000c0)={0x0, 0x7b0e, 0x8, 0x1, 0x360}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000001c0))
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x40010, r0, 0x6dc7a000)

07:59:01 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
r0 = userfaultfd(0xea9dbe9b205f659d)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})

07:59:01 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb)

07:59:01 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async, rerun: 64)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0xd18, 0x0)

07:59:01 executing program 2:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:01 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
r0 = userfaultfd(0xea9dbe9b205f659d)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async)
userfaultfd(0xea9dbe9b205f659d) (async)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async)

07:59:01 executing program 0:
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)

07:59:01 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb)

07:59:01 executing program 2:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:59:01 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
r0 = userfaultfd(0xea9dbe9b205f659d)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})

07:59:01 executing program 0:
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xb6417000)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0xc99f, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x3, 0x200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x40010, r1, 0xb07f9000)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3000004, 0x100010, r0, 0x83000000)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:01 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xb) (async)

07:59:01 executing program 2:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:01 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})

07:59:01 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x9a59}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
io_uring_setup(0x5095, &(0x7f0000000000)={0x0, 0x230f, 0x8, 0x2, 0x214, 0x0, r0})
r1 = io_uring_setup(0xee2, &(0x7f00000023c0)={0x0, 0xb8e0, 0x1, 0x1, 0x1b0, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2010, r1, 0x10000000)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x2d5a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x8000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002380)={'ip6_vti0\x00', &(0x7f0000002300)={'syztnl1\x00', 0x0, 0x2f, 0x56, 0x0, 0x4, 0x64, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x7, 0xa58, 0x3}})
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
ioprio_get$uid(0x3, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r3, 0x10000000)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x200, 0x0)
ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x0)

07:59:01 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xcc7)

07:59:01 executing program 5:
syz_io_uring_setup(0x2c65, &(0x7f00000000c0)={0x0, 0x3, 0x2, 0x0, 0x9d}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x8000000)
socketpair(0x1f, 0x6, 0x3ff, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x3})

07:59:01 executing program 0:
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xb6417000)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0xc99f, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) (async)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x3, 0x200) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async, rerun: 32)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x40010, r1, 0xb07f9000) (async, rerun: 32)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3000004, 0x100010, r0, 0x83000000) (async)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x1) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:01 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async)

07:59:01 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x9a59}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
io_uring_setup(0x5095, &(0x7f0000000000)={0x0, 0x230f, 0x8, 0x2, 0x214, 0x0, r0})
r1 = io_uring_setup(0xee2, &(0x7f00000023c0)={0x0, 0xb8e0, 0x1, 0x1, 0x1b0, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2010, r1, 0x10000000)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x2d5a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x8000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002380)={'ip6_vti0\x00', &(0x7f0000002300)={'syztnl1\x00', 0x0, 0x2f, 0x56, 0x0, 0x4, 0x64, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x7, 0xa58, 0x3}})
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
ioprio_get$uid(0x3, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r3, 0x10000000)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x200, 0x0)
ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x9a59}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
io_uring_setup(0x5095, &(0x7f0000000000)={0x0, 0x230f, 0x8, 0x2, 0x214, 0x0, r0}) (async)
io_uring_setup(0xee2, &(0x7f00000023c0)={0x0, 0xb8e0, 0x1, 0x1, 0x1b0, 0x0, r0}) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2010, r1, 0x10000000) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x2d5a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x8000000) (async)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1}}, 0x18) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002380)={'ip6_vti0\x00', &(0x7f0000002300)={'syztnl1\x00', 0x0, 0x2f, 0x56, 0x0, 0x4, 0x64, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x7, 0xa58, 0x3}}) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) (async)
ioprio_get$uid(0x3, r4) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r3, 0x10000000) (async)
syz_open_dev$loop(&(0x7f0000000080), 0x200, 0x0) (async)
ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000140)) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x0) (async)

07:59:01 executing program 2:
prctl$PR_GET_THP_DISABLE(0x2a)
syz_io_uring_setup(0x2f1a, &(0x7f0000000000)={0x0, 0xa15f, 0x2, 0x1, 0x193}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:01 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async)

07:59:01 executing program 0:
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xb6417000)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0xc99f, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x3, 0x200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x40010, r1, 0xb07f9000)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3000004, 0x100010, r0, 0x83000000)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x1)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xb6417000) (async)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0xc99f, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) (async)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x3, 0x200) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x40010, r1, 0xb07f9000) (async)
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3000004, 0x100010, r0, 0x83000000) (async)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x1) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)

07:59:01 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x20100)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x40010, r0, 0x8)
syz_io_uring_setup(0x48da, &(0x7f0000000000)={0x0, 0x8b6, 0x8, 0x3, 0x84}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))

07:59:01 executing program 5:
syz_io_uring_setup(0x2c65, &(0x7f00000000c0)={0x0, 0x3, 0x2, 0x0, 0x9d}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x8000000) (async)
socketpair(0x1f, 0x6, 0x3ff, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x3})

07:59:01 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xcc7)

07:59:01 executing program 2:
prctl$PR_GET_THP_DISABLE(0x2a) (async)
syz_io_uring_setup(0x2f1a, &(0x7f0000000000)={0x0, 0xa15f, 0x2, 0x1, 0x193}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:01 executing program 0:
r0 = syz_io_uring_setup(0x6d32, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x60ef, &(0x7f0000000140)={0x0, 0x3630, 0x1, 0x0, 0xba, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0xfffffffffffff186, 0xe9})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0)
ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040))
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x1000)=nil)

[ 2050.767663][T31990] warn_alloc: 1 callbacks suppressed
[ 2050.767683][T31990] syz-executor.3: vmalloc error: size 8192, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 2050.813273][T31990] CPU: 0 PID: 31990 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2050.823820][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2050.833882][T31990] Call Trace:
[ 2050.837158][T31990]  <TASK>
[ 2050.840086][T31990]  dump_stack_lvl+0xcd/0x134
[ 2050.844690][T31990]  warn_alloc.cold+0x9b/0x189
[ 2050.849387][T31990]  ? zone_watermark_ok_safe+0x290/0x290
[ 2050.854954][T31990]  ? __kmalloc_node+0x62/0x4a0
[ 2050.859773][T31990]  ? __vmalloc_node_range+0x7bf/0x1060
[ 2050.865332][T31990]  __vmalloc_node_range+0xe18/0x1060
[ 2050.870647][T31990]  ? vfree_atomic+0xe0/0xe0
[ 2050.875168][T31990]  ? rcu_read_lock_sched_held+0x3a/0x70
[ 2050.880725][T31990]  ? kernel_clone+0xe7/0xab0
[ 2050.885410][T31990]  copy_process+0x926/0x7300
[ 2050.890012][T31990]  ? kernel_clone+0xe7/0xab0
[ 2050.894609][T31990]  ? try_to_wake_up+0xf2/0x1510
[ 2050.899470][T31990]  ? lock_downgrade+0x6e0/0x6e0
[ 2050.904337][T31990]  ? __cleanup_sighand+0xb0/0xb0
07:59:01 executing program 2:
prctl$PR_GET_THP_DISABLE(0x2a) (async)
syz_io_uring_setup(0x2f1a, &(0x7f0000000000)={0x0, 0xa15f, 0x2, 0x1, 0x193}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:01 executing program 0:
r0 = syz_io_uring_setup(0x6d32, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x60ef, &(0x7f0000000140)={0x0, 0x3630, 0x1, 0x0, 0xba, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0xfffffffffffff186, 0xe9})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0)
ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) (async)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x1000)=nil)

07:59:01 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x20000001, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc2)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8, 0x40)

[ 2050.909278][T31990]  ? __lock_acquire+0x1666/0x56c0
[ 2050.914329][T31990]  ? kernel_clone+0x314/0xab0
[ 2050.919277][T31990]  kernel_clone+0xe7/0xab0
[ 2050.923706][T31990]  ? create_io_thread+0xf0/0xf0
[ 2050.928834][T31990]  ? find_held_lock+0x2d/0x110
[ 2050.933786][T31990]  __do_sys_clone+0xc8/0x110
[ 2050.938393][T31990]  ? kernel_clone+0xab0/0xab0
[ 2050.943081][T31990]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2050.948993][T31990]  do_syscall_64+0x35/0xb0
[ 2050.953426][T31990]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2050.959325][T31990] RIP: 0033:0x7f31cffe8481
[ 2050.964097][T31990] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2050.985158][T31990] RSP: 002b:00007ffe0b1e5a58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2050.993552][T31990] RAX: ffffffffffffffda RBX: 00007f31ce70a700 RCX: 00007f31cffe8481
[ 2051.001503][T31990] RDX: 00007f31ce70a9d0 RSI: 00007f31ce70a2f0 RDI: 00000000003d0f00
[ 2051.009454][T31990] RBP: 00007ffe0b1e5ca0 R08: 00007f31ce70a700 R09: 00007f31ce70a700
[ 2051.017404][T31990] R10: 00007f31ce70a9d0 R11: 0000000000000206 R12: 00007ffe0b1e5b0e
[ 2051.025353][T31990] R13: 00007ffe0b1e5b0f R14: 00007f31ce70a300 R15: 0000000000022000
[ 2051.033316][T31990]  </TASK>
[ 2051.041402][T31990] Mem-Info:
[ 2051.044699][T31990] active_anon:540 inactive_anon:34174 isolated_anon:0
[ 2051.044699][T31990]  active_file:5011 inactive_file:7658 isolated_file:0
[ 2051.044699][T31990]  unevictable:768 dirty:19 writeback:0
[ 2051.044699][T31990]  slab_reclaimable:30287 slab_unreclaimable:95823
[ 2051.044699][T31990]  mapped:27322 shmem:2007 pagetables:497 bounce:0
[ 2051.044699][T31990]  kernel_misc_reclaimable:0
[ 2051.044699][T31990]  free:1418792 free_pcp:8839 free_cma:0
[ 2051.088444][T31990] Node 0 active_anon:2152kB inactive_anon:135764kB active_file:19968kB inactive_file:30632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109288kB dirty:72kB writeback:0kB shmem:5552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 63488kB writeback_tmp:0kB kernel_stack:12564kB pagetables:1984kB all_unreclaimable? no
[ 2051.120477][T31990] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no
[ 2051.150103][T31990] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2051.177583][T31990] lowmem_reserve[]: 0 2645 2645 2645 2645
[ 2051.183927][T31990] Node 0 DMA32 free:1733208kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2152kB inactive_anon:135632kB active_file:19980kB inactive_file:30632kB unevictable:1536kB writepending:96kB present:3129332kB managed:2716648kB mlocked:0kB bounce:0kB free_pcp:42768kB local_pcp:21016kB free_cma:0kB
[ 2051.215275][T31990] lowmem_reserve[]: 0 0 0 0 0
[ 2051.220541][T31990] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2051.247598][T31990] lowmem_reserve[]: 0 0 0 0 0
[ 2051.252443][T31990] Node 1 Normal free:3951860kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB
[ 2051.285030][T31990] lowmem_reserve[]: 0 0 0 0 0
[ 2051.290763][T31990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 2051.303969][T31990] Node 0 DMA32: 1117*4kB (UME) 825*8kB (UME) 508*16kB (UME) 195*32kB (UME) 957*64kB (UME) 489*128kB (UME) 154*256kB (UM) 29*512kB (UME) 4*1024kB (UM) 4*2048kB (UM) 371*4096kB (UM) = 1735452kB
[ 2051.323245][T31990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2051.335278][T31990] Node 1 Normal: 177*4kB (UME) 48*8kB (UME) 31*16kB (UME) 110*32kB (UME) 78*64kB (UME) 27*128kB (UE) 12*256kB (U) 4*512kB (U) 1*1024kB (U) 4*2048kB (UME) 958*4096kB (M) = 3951860kB
[ 2051.353873][T31990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2051.363855][T31990] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB
[ 2051.374483][T31990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2051.384101][T31990] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2051.393822][T31990] 14680 total pagecache pages
[ 2051.398548][T31990] 0 pages in swap cache
[ 2051.402696][T31990] Swap cache stats: add 0, delete 0, find 0/0
[ 2051.408857][T31990] Free swap  = 0kB
[ 2051.412654][T31990] Total swap = 0kB
07:59:02 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x9a59}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
io_uring_setup(0x5095, &(0x7f0000000000)={0x0, 0x230f, 0x8, 0x2, 0x214, 0x0, r0})
r1 = io_uring_setup(0xee2, &(0x7f00000023c0)={0x0, 0xb8e0, 0x1, 0x1, 0x1b0, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2010, r1, 0x10000000) (async, rerun: 64)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000) (rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
r2 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x2d5a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x8000000)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x1}}, 0x18) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002380)={'ip6_vti0\x00', &(0x7f0000002300)={'syztnl1\x00', 0x0, 0x2f, 0x56, 0x0, 0x4, 0x64, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x7, 0xa58, 0x3}}) (async, rerun: 64)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async, rerun: 32)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020) (rerun: 32)
ioprio_get$uid(0x3, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async, rerun: 64)
mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r3, 0x10000000) (async, rerun: 64)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x200, 0x0)
ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x0)

07:59:02 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x20000001, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc2)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8, 0x40)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x20000001, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc2) (async)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8, 0x40) (async)

07:59:02 executing program 5:
syz_io_uring_setup(0x2c65, &(0x7f00000000c0)={0x0, 0x3, 0x2, 0x0, 0x9d}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x8000000)
socketpair(0x1f, 0x6, 0x3ff, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x3})
syz_io_uring_setup(0x2c65, &(0x7f00000000c0)={0x0, 0x3, 0x2, 0x0, 0x9d}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x842, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x8000000) (async)
socketpair(0x1f, 0x6, 0x3ff, &(0x7f0000000040)) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x3}) (async)

07:59:02 executing program 0:
r0 = syz_io_uring_setup(0x6d32, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x60ef, &(0x7f0000000140)={0x0, 0x3630, 0x1, 0x0, 0xba, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0xfffffffffffff186, 0xe9})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0)
ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040))
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x1000)=nil)
syz_io_uring_setup(0x6d32, &(0x7f00000000c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x60ef, &(0x7f0000000140)={0x0, 0x3630, 0x1, 0x0, 0xba, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0xfffffffffffff186, 0xe9}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) (async)
ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) (async)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x1000)=nil) (async)

07:59:02 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xcc7)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xcc7) (async)

07:59:02 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x20100)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x40010, r0, 0x8)
syz_io_uring_setup(0x48da, &(0x7f0000000000)={0x0, 0x8b6, 0x8, 0x3, 0x84}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x20100) (async)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x40010, r0, 0x8) (async)
syz_io_uring_setup(0x48da, &(0x7f0000000000)={0x0, 0x8b6, 0x8, 0x3, 0x84}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async)

[ 2051.416424][T31990] 2097051 pages RAM
[ 2051.420225][T31990] 0 pages HighMem/MovableOnly
[ 2051.424891][T31990] 384544 pages reserved
[ 2051.429107][T31990] 0 pages cma reserved
07:59:02 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x20000001, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc2) (async)
remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8, 0x40)

07:59:02 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

07:59:02 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x20100)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x40010, r0, 0x8)
syz_io_uring_setup(0x48da, &(0x7f0000000000)={0x0, 0x8b6, 0x8, 0x3, 0x84}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x20100) (async)
mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x40010, r0, 0x8) (async)
syz_io_uring_setup(0x48da, &(0x7f0000000000)={0x0, 0x8b6, 0x8, 0x3, 0x84}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async)

07:59:02 executing program 0:
r0 = io_uring_setup(0x1b5e, &(0x7f0000000000)={0x0, 0x4bba, 0x1, 0x0, 0x88})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5493, &(0x7f00000001c0)={0x0, 0x39c6, 0x2, 0x0, 0x12a, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:59:02 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x12b, 0x800)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:02 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r1 = io_uring_setup(0x366f, &(0x7f0000000000)={0x0, 0x544d, 0x8, 0x2, 0x262, 0x0, r0})
syz_io_uring_setup(0x341d, &(0x7f0000000140)={0x0, 0xf732, 0x29, 0x2, 0x27a, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0))

07:59:02 executing program 0:
r0 = io_uring_setup(0x1b5e, &(0x7f0000000000)={0x0, 0x4bba, 0x1, 0x0, 0x88})
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x5493, &(0x7f00000001c0)={0x0, 0x39c6, 0x2, 0x0, 0x12a, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:59:02 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

07:59:02 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x7, 0x2000)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xfff, 0x5, 0x4})
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x8010, 0xffffffffffffffff, 0x8000000)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x0, 0x288}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x25c3, &(0x7f0000000080)={0x0, 0x219e, 0x8, 0x2, 0x19, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

07:59:02 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x12b, 0x800)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:02 executing program 3:
syz_io_uring_setup(0x1c9c, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x0, 0x40372}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x7, 0x20000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x34}}, 0x40805)
mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r0, 0x83000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:02 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r1 = io_uring_setup(0x366f, &(0x7f0000000000)={0x0, 0x544d, 0x8, 0x2, 0x262, 0x0, r0})
syz_io_uring_setup(0x341d, &(0x7f0000000140)={0x0, 0xf732, 0x29, 0x2, 0x27a, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0))

07:59:02 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

07:59:02 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x7, 0x2000)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xfff, 0x5, 0x4}) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x8010, 0xffffffffffffffff, 0x8000000)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x0, 0x288}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x25c3, &(0x7f0000000080)={0x0, 0x219e, 0x8, 0x2, 0x19, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

07:59:02 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
r1 = io_uring_setup(0x366f, &(0x7f0000000000)={0x0, 0x544d, 0x8, 0x2, 0x262, 0x0, r0})
syz_io_uring_setup(0x341d, &(0x7f0000000140)={0x0, 0xf732, 0x29, 0x2, 0x27a, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000001c0))

07:59:02 executing program 0:
r0 = io_uring_setup(0x1b5e, &(0x7f0000000000)={0x0, 0x4bba, 0x1, 0x0, 0x88}) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x5493, &(0x7f00000001c0)={0x0, 0x39c6, 0x2, 0x0, 0x12a, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:59:02 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x12b, 0x800)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
syz_open_dev$loop(&(0x7f0000000000), 0x12b, 0x800) (async)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)

07:59:02 executing program 3:
syz_io_uring_setup(0x1c9c, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x0, 0x40372}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x7, 0x20000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x34}}, 0x40805)
mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r0, 0x83000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:02 executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000002280))
ioprio_get$pid(0x2, r0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x476a, &(0x7f0000002180)={0x0, 0x9419, 0x2, 0x2, 0x127, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000002200), &(0x7f0000002240))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0, <r2=>0x0})
sched_rr_get_interval(r2, &(0x7f0000000080))

07:59:02 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040))

07:59:02 executing program 3:
syz_io_uring_setup(0x1c9c, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x0, 0x40372}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x7, 0x20000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x34}}, 0x40805)
mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r0, 0x83000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
syz_io_uring_setup(0x1c9c, &(0x7f00000000c0)={0x0, 0x8, 0x2, 0x0, 0x40372}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) (async)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x7, 0x20000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x34}}, 0x40805) (async)
mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r0, 0x83000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:59:02 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x7, 0x2000)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xfff, 0x5, 0x4})
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x8010, 0xffffffffffffffff, 0x8000000)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x0, 0x288}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x25c3, &(0x7f0000000080)={0x0, 0x219e, 0x8, 0x2, 0x19, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x7, 0x2000) (async)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xfff, 0x5, 0x4}) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x8010, 0xffffffffffffffff, 0x8000000) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381, 0x0, 0x0, 0x288}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x25c3, &(0x7f0000000080)={0x0, 0x219e, 0x8, 0x2, 0x19, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async)

07:59:02 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)

07:59:02 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) (async)

07:59:02 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)

07:59:02 executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000002280)) (async)
ioprio_get$pid(0x2, r0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x476a, &(0x7f0000002180)={0x0, 0x9419, 0x2, 0x2, 0x127, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000002200), &(0x7f0000002240)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0, <r2=>0x0})
sched_rr_get_interval(r2, &(0x7f0000000080))

07:59:02 executing program 4:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

[ 2052.033569][T32150] cgroup: fork rejected by pids controller in /syz0
07:59:03 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
io_uring_setup(0x3bf8, &(0x7f0000000000)={0x0, 0xa3bf, 0x1, 0x1, 0x49, 0x0, r0})

07:59:03 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r2 = syz_io_uring_setup(0x68c8, &(0x7f0000000000)={0x0, 0xd4fa, 0x8, 0x2, 0x35d, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
syz_io_uring_setup(0x41aa, &(0x7f0000000280)={0x0, 0xd0e1, 0x1, 0x1, 0x217, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240))

07:59:03 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)

07:59:03 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x0) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040))

07:59:03 executing program 4:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:03 executing program 1:
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000002280))
ioprio_get$pid(0x2, r0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x476a, &(0x7f0000002180)={0x0, 0x9419, 0x2, 0x2, 0x127, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000002200), &(0x7f0000002240))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0, <r2=>0x0})
sched_rr_get_interval(r2, &(0x7f0000000080))
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000002280)) (async)
ioprio_get$pid(0x2, r0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x476a, &(0x7f0000002180)={0x0, 0x9419, 0x2, 0x2, 0x127, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000002200), &(0x7f0000002240)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) (async)
sched_rr_get_interval(r2, &(0x7f0000000080)) (async)

07:59:03 executing program 4:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) (async, rerun: 32)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (rerun: 32)

07:59:03 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x562c, 0x0, 0xfffffffe}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000030, r0, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:03 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
io_uring_setup(0x3bf8, &(0x7f0000000000)={0x0, 0xa3bf, 0x1, 0x1, 0x49, 0x0, r0})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
io_uring_setup(0x3bf8, &(0x7f0000000000)={0x0, 0xa3bf, 0x1, 0x1, 0x49, 0x0, r0}) (async)

07:59:03 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r2 = syz_io_uring_setup(0x68c8, &(0x7f0000000000)={0x0, 0xd4fa, 0x8, 0x2, 0x35d, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
syz_io_uring_setup(0x41aa, &(0x7f0000000280)={0x0, 0xd0e1, 0x1, 0x1, 0x217, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240))

07:59:03 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r1 = syz_io_uring_setup(0x556, &(0x7f0000000200)={0x0, 0xefcb, 0x10, 0x1, 0x235, 0x0, r0}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x8000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
io_uring_setup(0x4aa0, &(0x7f0000000000)={0x0, 0xa767, 0x20, 0x1, 0x2c9, 0x0, r0})

07:59:03 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r0, 0x8000000)

07:59:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
prctl$PR_SET_MM(0x23, 0x9af023e431772d32, &(0x7f0000ffd000/0x2000)=nil)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)

07:59:03 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x562c, 0x0, 0xfffffffe}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000030, r0, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x562c, 0x0, 0xfffffffe}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000030, r0, 0x0) (async)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:59:03 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r1 = syz_io_uring_setup(0x556, &(0x7f0000000200)={0x0, 0xefcb, 0x10, 0x1, 0x235, 0x0, r0}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x8000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
io_uring_setup(0x4aa0, &(0x7f0000000000)={0x0, 0xa767, 0x20, 0x1, 0x2c9, 0x0, r0})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
syz_io_uring_setup(0x556, &(0x7f0000000200)={0x0, 0xefcb, 0x10, 0x1, 0x235, 0x0, r0}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x8000000) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async)
io_uring_setup(0x4aa0, &(0x7f0000000000)={0x0, 0xa767, 0x20, 0x1, 0x2c9, 0x0, r0}) (async)

07:59:03 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
io_uring_setup(0x3bf8, &(0x7f0000000000)={0x0, 0xa3bf, 0x1, 0x1, 0x49, 0x0, r0})

07:59:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async, rerun: 32)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async, rerun: 32)
prctl$PR_SET_MM(0x23, 0x9af023e431772d32, &(0x7f0000ffd000/0x2000)=nil) (async)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)

07:59:03 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r2 = syz_io_uring_setup(0x68c8, &(0x7f0000000000)={0x0, 0xd4fa, 0x8, 0x2, 0x35d, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
syz_io_uring_setup(0x41aa, &(0x7f0000000280)={0x0, 0xd0e1, 0x1, 0x1, 0x217, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r1, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
syz_io_uring_setup(0x68c8, &(0x7f0000000000)={0x0, 0xd4fa, 0x8, 0x2, 0x35d, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
syz_io_uring_setup(0x41aa, &(0x7f0000000280)={0x0, 0xd0e1, 0x1, 0x1, 0x217, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async)

07:59:03 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x562c, 0x0, 0xfffffffe}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000030, r0, 0x0) (async)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:03 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r0, 0x8000000)

07:59:03 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
r1 = syz_io_uring_setup(0x556, &(0x7f0000000200)={0x0, 0xefcb, 0x10, 0x1, 0x235, 0x0, r0}, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x8000000) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async)
io_uring_setup(0x4aa0, &(0x7f0000000000)={0x0, 0xa767, 0x20, 0x1, 0x2c9, 0x0, r0})

07:59:03 executing program 0:
r0 = syz_io_uring_setup(0x7feb, &(0x7f0000000040)={0x0, 0xac8e, 0x2, 0x2, 0x3cd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x2c67, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x60a402, 0x0)

07:59:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
prctl$PR_SET_MM(0x23, 0x9af023e431772d32, &(0x7f0000ffd000/0x2000)=nil)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
prctl$PR_SET_MM(0x23, 0x9af023e431772d32, &(0x7f0000ffd000/0x2000)=nil) (async)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async)

07:59:03 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x608001, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x5, 0x4})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r3 = io_uring_setup(0x659b, &(0x7f0000000140)={0x0, 0x6d9, 0x2, 0x3, 0x281, 0x0, r0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10010, r3, 0x8000000)

07:59:03 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r0, 0x8000000)

07:59:03 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2})

07:59:03 executing program 3:
syz_io_uring_setup(0x7827, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000001}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:03 executing program 0:
r0 = syz_io_uring_setup(0x7feb, &(0x7f0000000040)={0x0, 0xac8e, 0x2, 0x2, 0x3cd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x2c67, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x60a402, 0x0)
syz_io_uring_setup(0x7feb, &(0x7f0000000040)={0x0, 0xac8e, 0x2, 0x2, 0x3cd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x60a402, 0x0) (async)

07:59:03 executing program 3:
syz_io_uring_setup(0x7827, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000001}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:03 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) (async)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x608001, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x5, 0x4}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r3 = io_uring_setup(0x659b, &(0x7f0000000140)={0x0, 0x6d9, 0x2, 0x3, 0x281, 0x0, r0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10010, r3, 0x8000000)

07:59:03 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x10010, r1, 0x0)

07:59:03 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) (async)

07:59:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x800, 0x3, 0x10})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x436681, 0x0)

07:59:03 executing program 0:
r0 = syz_io_uring_setup(0x7feb, &(0x7f0000000040)={0x0, 0xac8e, 0x2, 0x2, 0x3cd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
syz_io_uring_setup(0x2c67, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x60a402, 0x0)

07:59:03 executing program 3:
syz_io_uring_setup(0x7827, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000001}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
syz_io_uring_setup(0x7827, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20000001}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:59:03 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async, rerun: 32)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) (rerun: 32)

07:59:03 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x10010, r1, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x10010, r1, 0x0) (async)

07:59:03 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x608001, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x2, 0x5, 0x4})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
r3 = io_uring_setup(0x659b, &(0x7f0000000140)={0x0, 0x6d9, 0x2, 0x3, 0x281, 0x0, r0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10010, r3, 0x8000000)

07:59:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x800, 0x3, 0x10})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x436681, 0x0)

07:59:03 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
syz_io_uring_setup(0x5b97, &(0x7f0000000000)={0x0, 0xf953, 0x2, 0x2, 0x255}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140))

07:59:03 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:03 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x3})

07:59:03 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000005, 0x11, 0xffffffffffffffff, 0x180000000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x00')
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f00000001c0)=0x3, 0x1, 0x1)
r1 = syz_io_uring_setup(0x2cb5, &(0x7f0000000000)={0x0, 0xb70b, 0x4, 0x2, 0x10b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r1, 0x10000000)

07:59:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) (async)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x800, 0x3, 0x10}) (async)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x436681, 0x0)

07:59:03 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:03 executing program 1:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x10010, r1, 0x0)

07:59:03 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000005, 0x11, 0xffffffffffffffff, 0x180000000) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x00')
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f00000001c0)=0x3, 0x1, 0x1)
r1 = syz_io_uring_setup(0x2cb5, &(0x7f0000000000)={0x0, 0xb70b, 0x4, 0x2, 0x10b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r1, 0x10000000)

07:59:03 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
syz_io_uring_setup(0x5b97, &(0x7f0000000000)={0x0, 0xf953, 0x2, 0x2, 0x255}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140))
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
syz_io_uring_setup(0x5b97, &(0x7f0000000000)={0x0, 0xf953, 0x2, 0x2, 0x255}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)

07:59:03 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x3})

07:59:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x6, 0x0, 0x7)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:03 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:03 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x401, 0x0, 0x18})
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1)

07:59:03 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000005, 0x11, 0xffffffffffffffff, 0x180000000) (async, rerun: 32)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000180)='\x00') (rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3, &(0x7f00000001c0)=0x3, 0x1, 0x1) (async)
r1 = syz_io_uring_setup(0x2cb5, &(0x7f0000000000)={0x0, 0xb70b, 0x4, 0x2, 0x10b, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x1010, r1, 0x10000000)

07:59:03 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x6, 0x0, 0x7)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x6, 0x0, 0x7) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)

07:59:03 executing program 3:
mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2eb447b84a2c4463, 0x4010, r0, 0x0)

07:59:03 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
syz_io_uring_setup(0x5b97, &(0x7f0000000000)={0x0, 0xf953, 0x2, 0x2, 0x255}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140))

07:59:04 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x3})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x3}) (async)

07:59:04 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x6, 0x0, 0x7) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:04 executing program 3:
mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2eb447b84a2c4463, 0x4010, r0, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2eb447b84a2c4463, 0x4010, r0, 0x0) (async)

07:59:04 executing program 5:
r0 = syz_io_uring_setup(0x62d3, &(0x7f00000000c0)={0x0, 0x3c5a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040))
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = io_uring_setup(0x497, &(0x7f00000001c0)={0x0, 0x7018, 0x10, 0x0, 0xc, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x2010, r3, 0x8000000)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x100000, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff3000/0xd000)=nil, 0x7, 0x3, 0x20})
ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0)

07:59:04 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x401, 0x0, 0x18}) (async, rerun: 32)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1)

07:59:04 executing program 4:
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x72b, 0x300)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xfffffffffffffefe, 0x80)
mmap$snddsp_status(&(0x7f0000ff7000/0x7000)=nil, 0x1000, 0x1000004, 0x30, r0, 0x82000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:04 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
syz_io_uring_setup(0x763f, &(0x7f0000000000)={0x0, 0xb98c, 0x2, 0x3, 0x181, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:04 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = getpid()
move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0)

07:59:04 executing program 3:
mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000004, 0x50, 0xffffffffffffffff, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2eb447b84a2c4463, 0x4010, r0, 0x0)

07:59:04 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
syz_io_uring_setup(0x763f, &(0x7f0000000000)={0x0, 0xb98c, 0x2, 0x3, 0x181, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:04 executing program 5:
r0 = syz_io_uring_setup(0x62d3, &(0x7f00000000c0)={0x0, 0x3c5a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040))
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0) (async)
r2 = io_uring_setup(0x497, &(0x7f00000001c0)={0x0, 0x7018, 0x10, 0x0, 0xc, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x10000000) (async)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x2010, r3, 0x8000000)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x100000, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff3000/0xd000)=nil, 0x7, 0x3, 0x20})
ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0)

07:59:04 executing program 4:
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x72b, 0x300)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async, rerun: 32)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xfffffffffffffefe, 0x80) (rerun: 32)
mmap$snddsp_status(&(0x7f0000ff7000/0x7000)=nil, 0x1000, 0x1000004, 0x30, r0, 0x82000000) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:04 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = getpid()
move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0)

07:59:04 executing program 0:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async, rerun: 32)
syz_io_uring_setup(0x763f, &(0x7f0000000000)={0x0, 0xb98c, 0x2, 0x3, 0x181, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:04 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x401, 0x0, 0x18})
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1)

07:59:04 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = getpid()
move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x0)

07:59:04 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x30400, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})

07:59:04 executing program 5:
r0 = syz_io_uring_setup(0x62d3, &(0x7f00000000c0)={0x0, 0x3c5a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) (async)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, 0x0)
r2 = io_uring_setup(0x497, &(0x7f00000001c0)={0x0, 0x7018, 0x10, 0x0, 0xc, 0x0, r0})
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r2, 0x10000000) (async)
r3 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async, rerun: 32)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x2010, r3, 0x8000000) (rerun: 32)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x100000, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff3000/0xd000)=nil, 0x7, 0x3, 0x20}) (async, rerun: 64)
ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) (rerun: 64)

07:59:04 executing program 4:
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x72b, 0x300) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xfffffffffffffefe, 0x80)
mmap$snddsp_status(&(0x7f0000ff7000/0x7000)=nil, 0x1000, 0x1000004, 0x30, r0, 0x82000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:04 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x16)
r0 = userfaultfd(0x40000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x100000001, 0x6, 0x6)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x0, 0x5, 0x7, {r2, r3/1000+10000}, {0x0, 0xea60}, {0x3}, 0x1, @canfd={{0x4, 0x1}, 0x30, 0x0, 0x0, 0x0, "b1197d04cd6a13e99958f35a83b21e0f0a676fcf79d6c8d7cb78c9a79285f41888fc89d12a4e8f9ea61b59f19865307dccc3787245fe8989b4246923edf841c8"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)

07:59:04 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil)

07:59:04 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1000008, 0x12, r0, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
mmap$usbfs(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x1ff)
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000004, 0x810, r0, 0xae7cd000)

07:59:04 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x30400, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})

07:59:04 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:04 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1000008, 0x12, r0, 0x8000000)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
mmap$usbfs(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x1ff)
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000004, 0x810, r0, 0xae7cd000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1000008, 0x12, r0, 0x8000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
mmap$usbfs(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x1ff) (async)
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000004, 0x810, r0, 0xae7cd000) (async)

07:59:04 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x16) (async)
r0 = userfaultfd(0x40000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x100000001, 0x6, 0x6) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x0, 0x5, 0x7, {r2, r3/1000+10000}, {0x0, 0xea60}, {0x3}, 0x1, @canfd={{0x4, 0x1}, 0x30, 0x0, 0x0, 0x0, "b1197d04cd6a13e99958f35a83b21e0f0a676fcf79d6c8d7cb78c9a79285f41888fc89d12a4e8f9ea61b59f19865307dccc3787245fe8989b4246923edf841c8"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)

07:59:04 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x30400, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x30400, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async)

07:59:04 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil) (async)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil) (async)

07:59:04 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (rerun: 32)

07:59:04 executing program 2:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1000008, 0x12, r0, 0x8000000) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
mmap$usbfs(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x1ff) (async)
mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000004, 0x810, r0, 0xae7cd000)

07:59:04 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x46}, 0x24048000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:04 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xd5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:04 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil)

07:59:04 executing program 5:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:04 executing program 1:
syz_io_uring_setup(0x22c67, &(0x7f0000000000)={0x0, 0x7d02, 0x8, 0x1, 0x3ca}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:59:04 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x46}, 0x24048000) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:04 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x16)
r0 = userfaultfd(0x40000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x100000001, 0x6, 0x6) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x0, 0x5, 0x7, {r2, r3/1000+10000}, {0x0, 0xea60}, {0x3}, 0x1, @canfd={{0x4, 0x1}, 0x30, 0x0, 0x0, 0x0, "b1197d04cd6a13e99958f35a83b21e0f0a676fcf79d6c8d7cb78c9a79285f41888fc89d12a4e8f9ea61b59f19865307dccc3787245fe8989b4246923edf841c8"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)

07:59:04 executing program 1:
syz_io_uring_setup(0x22c67, &(0x7f0000000000)={0x0, 0x7d02, 0x8, 0x1, 0x3ca}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:59:04 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:04 executing program 5:
syz_io_uring_setup(0x13c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:59:04 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xd5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:04 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x46}, 0x24048000) (async)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async, rerun: 64)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:04 executing program 5:
syz_io_uring_setup(0x13c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:59:04 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)

07:59:04 executing program 1:
syz_io_uring_setup(0x22c67, &(0x7f0000000000)={0x0, 0x7d02, 0x8, 0x1, 0x3ca}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)

07:59:04 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xd5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xd5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)

07:59:04 executing program 4:
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1})
madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x11)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa2495a4d061a7dfa, 0x110, r0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x8002)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfff, 0x3, 0x8e})

07:59:05 executing program 5:
syz_io_uring_setup(0x13c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

07:59:05 executing program 1:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, 0xffffffffffffffff, 0x8000000)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
connect$can_bcm(r2, &(0x7f0000000040), 0x10)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r3 = io_uring_setup(0x2d, &(0x7f00000001c0)={0x0, 0x9df9, 0x20, 0x0, 0x142})
io_uring_setup(0x17a4, &(0x7f0000000240)={0x0, 0x46ae, 0x0, 0x3, 0xdc, 0x0, r3})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
connect$can_bcm(r2, &(0x7f0000000080), 0x10)

07:59:05 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)

07:59:05 executing program 4:
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1})
madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x11)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa2495a4d061a7dfa, 0x110, r0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x8002)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async, rerun: 32)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfff, 0x3, 0x8e}) (rerun: 32)

07:59:05 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:05 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x8000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:05 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x65c7, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:05 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r1 = syz_io_uring_setup(0x1a, &(0x7f0000000000)={0x0, 0x428e, 0x4, 0x3, 0x9f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x4004032, r1, 0x10000000)

07:59:05 executing program 4:
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1})
madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x11)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa2495a4d061a7dfa, 0x110, r0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x8002)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfff, 0x3, 0x8e})
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1}) (async)
madvise(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x11) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa2495a4d061a7dfa, 0x110, r0, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x8002) (async)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) (async)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0xfff, 0x3, 0x8e}) (async)

07:59:05 executing program 1:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, 0xffffffffffffffff, 0x8000000) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
connect$can_bcm(r2, &(0x7f0000000040), 0x10) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
r3 = io_uring_setup(0x2d, &(0x7f00000001c0)={0x0, 0x9df9, 0x20, 0x0, 0x142})
io_uring_setup(0x17a4, &(0x7f0000000240)={0x0, 0x46ae, 0x0, 0x3, 0xdc, 0x0, r3}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
connect$can_bcm(r2, &(0x7f0000000080), 0x10)

07:59:05 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x8000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x8000000) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)

07:59:05 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0) (async, rerun: 64)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (rerun: 64)

07:59:05 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
r1 = syz_io_uring_setup(0x1a, &(0x7f0000000000)={0x0, 0x428e, 0x4, 0x3, 0x9f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x4004032, r1, 0x10000000)

07:59:05 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000f4c000/0x4000)=nil, 0x4000, 0xf)

07:59:05 executing program 1:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, 0xffffffffffffffff, 0x8000000)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
connect$can_bcm(r2, &(0x7f0000000040), 0x10)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r3 = io_uring_setup(0x2d, &(0x7f00000001c0)={0x0, 0x9df9, 0x20, 0x0, 0x142})
io_uring_setup(0x17a4, &(0x7f0000000240)={0x0, 0x46ae, 0x0, 0x3, 0xdc, 0x0, r3})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
connect$can_bcm(r2, &(0x7f0000000080), 0x10)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, 0xffffffffffffffff, 0x8000000) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
connect$can_bcm(r2, &(0x7f0000000040), 0x10) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
io_uring_setup(0x2d, &(0x7f00000001c0)={0x0, 0x9df9, 0x20, 0x0, 0x142}) (async)
io_uring_setup(0x17a4, &(0x7f0000000240)={0x0, 0x46ae, 0x0, 0x3, 0xdc, 0x0, r3}) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async)

07:59:05 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x30, r1, 0x8000000) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:05 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x65c7, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)

07:59:05 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r1 = syz_io_uring_setup(0x1a, &(0x7f0000000000)={0x0, 0x428e, 0x4, 0x3, 0x9f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x4004032, r1, 0x10000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
syz_io_uring_setup(0x1a, &(0x7f0000000000)={0x0, 0x428e, 0x4, 0x3, 0x9f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x4004032, r1, 0x10000000) (async)

07:59:05 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
madvise(&(0x7f0000f4c000/0x4000)=nil, 0x4000, 0xf)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000f4c000/0x4000)=nil, 0x4000, 0xf) (async)

07:59:05 executing program 0:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x65c7, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_io_uring_setup(0x65c7, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000140)) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)

07:59:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000804}, 0x8040)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x23, 0xfffffffd, 0x2bf}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

07:59:05 executing program 3:
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x2, 0x5})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3d9}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x24a042, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x15)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x7, 0x2, 0x6, 0x10b})
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/196, 0xc4, 0x0, &(0x7f0000000340)=""/196, 0xc4}, &(0x7f00000001c0)=0x40)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x105200, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4)
ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000480)=0x81)

07:59:05 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
madvise(&(0x7f0000f4c000/0x4000)=nil, 0x4000, 0xf)

07:59:05 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)

07:59:05 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x813, r0, 0x10000000)

07:59:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000804}, 0x8040) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x23, 0xfffffffd, 0x2bf}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

07:59:05 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x10000)
mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x72ba5aa1a5122393, 0x4010, 0xffffffffffffffff, 0x82000000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:05 executing program 0:
syz_io_uring_setup(0x5cb9, &(0x7f00000000c0)={0x0, 0x9cb5, 0x0, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = socket$caif_stream(0x25, 0x1, 0x1)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="d8acb742e0a553d2873000fa134f3279f0f7407a090851e7b97438ccaeb24d7362102fe2eac82f7de0e6a0a314e906cbbc8f5831c1dbd6e144b8c9e5e4b49de995eec6b1bbea6a60629e57b7b6473cb27494ce80c84bcd3ddbfa47c0886dc6bb7fb78ec4072a", 0x66)

07:59:05 executing program 3:
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x2, 0x5})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3d9}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x24a042, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x15)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x7, 0x2, 0x6, 0x10b})
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/196, 0xc4, 0x0, &(0x7f0000000340)=""/196, 0xc4}, &(0x7f00000001c0)=0x40)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x105200, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4)
ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000480)=0x81)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x2, 0x5}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3d9}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x24a042, 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) (async)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x15) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x7, 0x2, 0x6, 0x10b}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/196, 0xc4, 0x0, &(0x7f0000000340)=""/196, 0xc4}, &(0x7f00000001c0)=0x40) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x105200, 0x0) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) (async)
ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000480)=0x81) (async)

07:59:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000804}, 0x8040) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x23, 0xfffffffd, 0x2bf}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}})

07:59:05 executing program 0:
syz_io_uring_setup(0x5cb9, &(0x7f00000000c0)={0x0, 0x9cb5, 0x0, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
r0 = socket$caif_stream(0x25, 0x1, 0x1)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="d8acb742e0a553d2873000fa134f3279f0f7407a090851e7b97438ccaeb24d7362102fe2eac82f7de0e6a0a314e906cbbc8f5831c1dbd6e144b8c9e5e4b49de995eec6b1bbea6a60629e57b7b6473cb27494ce80c84bcd3ddbfa47c0886dc6bb7fb78ec4072a", 0x66)

07:59:05 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x10000) (async, rerun: 32)
mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x72ba5aa1a5122393, 0x4010, 0xffffffffffffffff, 0x82000000) (async, rerun: 32)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:05 executing program 3:
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x2, 0x5})
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3d9}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x24a042, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x15)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x7, 0x2, 0x6, 0x10b})
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/196, 0xc4, 0x0, &(0x7f0000000340)=""/196, 0xc4}, &(0x7f00000001c0)=0x40)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x105200, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4)
ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000480)=0x81)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)={0x2, 0x5}) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3d9}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x24a042, 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x600400, 0x0) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) (async)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x15) (async)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x7, 0x2, 0x6, 0x10b}) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/196, 0xc4, 0x0, &(0x7f0000000340)=""/196, 0xc4}, &(0x7f00000001c0)=0x40) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x105200, 0x0) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) (async)
ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000480)=0x81) (async)

07:59:05 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3})
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0xffffffffffffffff)

07:59:05 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) (async)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x813, r0, 0x10000000)

07:59:05 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x91)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2804400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0000022abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)

07:59:05 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) (async)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x10000)
mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x72ba5aa1a5122393, 0x4010, 0xffffffffffffffff, 0x82000000) (async)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)

07:59:05 executing program 0:
syz_io_uring_setup(0x5cb9, &(0x7f00000000c0)={0x0, 0x9cb5, 0x0, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r0 = socket$caif_stream(0x25, 0x1, 0x1)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="d8acb742e0a553d2873000fa134f3279f0f7407a090851e7b97438ccaeb24d7362102fe2eac82f7de0e6a0a314e906cbbc8f5831c1dbd6e144b8c9e5e4b49de995eec6b1bbea6a60629e57b7b6473cb27494ce80c84bcd3ddbfa47c0886dc6bb7fb78ec4072a", 0x66)
syz_io_uring_setup(0x5cb9, &(0x7f00000000c0)={0x0, 0x9cb5, 0x0, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
socket$caif_stream(0x25, 0x1, 0x1) (async)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="d8acb742e0a553d2873000fa134f3279f0f7407a090851e7b97438ccaeb24d7362102fe2eac82f7de0e6a0a314e906cbbc8f5831c1dbd6e144b8c9e5e4b49de995eec6b1bbea6a60629e57b7b6473cb27494ce80c84bcd3ddbfa47c0886dc6bb7fb78ec4072a", 0x66) (async)

07:59:05 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3})
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0xffffffffffffffff)

07:59:05 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x81fb, 0x1, 0x3, 0x27e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x400)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x9, 0x1010, r1, 0x82000000)
mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1, 0x18030, r1, 0x83000000)

07:59:05 executing program 1:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11)
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0xb381}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async, rerun: 64)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x813, r0, 0x10000000) (rerun: 64)

07:59:05 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x91) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2804400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0000022abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)

07:59:05 executing program 4:
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='(r\x00')
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x14140, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil})

07:59:05 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3})
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0xffffffffffffffff)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3}) (async)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0xffffffffffffffff) (async)

07:59:05 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x80010, r0, 0x44860000)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x80010, r2, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r4, 0x80, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004004)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3)

07:59:05 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x91)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2804400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0000022abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x91) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2804400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0000022abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)

[ 2055.132265][  T357] ==================================================================
[ 2055.140814][  T357] BUG: KASAN: use-after-free in strcmp+0x9b/0xb0
[ 2055.147159][  T357] Read of size 1 at addr ffff888018f1db6c by task syz-executor.4/357
[ 2055.155408][  T357] 
[ 2055.157731][  T357] CPU: 0 PID: 357 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2055.168062][  T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2055.178306][  T357] Call Trace:
07:59:06 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x81fb, 0x1, 0x3, 0x27e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x400) (async)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x9, 0x1010, r1, 0x82000000)
mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1, 0x18030, r1, 0x83000000)

07:59:06 executing program 5:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_io_uring_setup(0x252c, &(0x7f0000000000)={0x0, 0x490f, 0x20, 0x3, 0x3b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140))
io_uring_setup(0x41d0, &(0x7f0000000180)={0x0, 0x12f8, 0x20, 0x2, 0x93, 0x0, r1})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:59:06 executing program 2:
syz_io_uring_setup(0x2c67, &(0x7f0000000000)={0x0, 0xaf12}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r0 = syz_io_uring_setup(0x6e5e, &(0x7f0000000100)={0x0, 0x5f70, 0x10, 0x2, 0x1ea}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000005, 0x11, r0, 0x0)
r1 = getpid()
sched_rr_get_interval(r1, &(0x7f0000001440))
prctl$PR_GET_THP_DISABLE(0x2a)
sched_rr_get_interval(r1, &(0x7f0000000080))
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc)
clock_gettime(0x6, &(0x7f00000000c0))

07:59:06 executing program 3:
r0 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x81fb, 0x1, 0x3, 0x27e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x400)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2)
mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x9, 0x1010, r1, 0x82000000)
mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1, 0x18030, r1, 0x83000000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0)={0x0, 0x81fb, 0x1, 0x3, 0x27e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x400) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) (async)
mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x9, 0x1010, r1, 0x82000000) (async)
mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1, 0x18030, r1, 0x83000000) (async)

[ 2055.181674][  T357]  <TASK>
[ 2055.184605][  T357]  dump_stack_lvl+0xcd/0x134
[ 2055.189214][  T357]  print_address_description.constprop.0.cold+0x8d/0x336
[ 2055.196262][  T357]  ? strcmp+0x9b/0xb0
[ 2055.200254][  T357]  ? strcmp+0x9b/0xb0
[ 2055.204249][  T357]  kasan_report.cold+0x83/0xdf
[ 2055.209029][  T357]  ? strcmp+0x9b/0xb0
[ 2055.213020][  T357]  strcmp+0x9b/0xb0
[ 2055.216843][  T357]  madvise_update_vma+0x4e6/0x7f0
[ 2055.221895][  T357]  madvise_vma_behavior+0x116/0x1910
[ 2055.227193][  T357]  ? madvise_vma_anon_name+0xc0/0xc0
07:59:06 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x80010, r0, 0x44860000)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x80010, r2, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r4, 0x80, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004004)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x80010, r0, 0x44860000) (async)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0) (async)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x80010, r2, 0x0) (async)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) (async)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r4, 0x80, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004004) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) (async)

07:59:06 executing program 3:
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil], &(0x7f0000000040)=[0x9, 0x7ff, 0x5, 0x3e, 0xfffff801, 0x40, 0x3f, 0xef, 0x8001, 0x400], &(0x7f0000000080)=[0x0, 0x0], 0x6)

[ 2055.232580][  T357]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 2055.238314][  T357]  ? vmacache_find+0x62/0x330
[ 2055.243006][  T357]  ? find_vma+0xbd/0x270
[ 2055.247261][  T357]  madvise_walk_vmas+0x1d5/0x2d0
[ 2055.252210][  T357]  ? madvise_vma_anon_name+0xc0/0xc0
[ 2055.257520][  T357]  ? __remove_memory+0x40/0x40
[ 2055.262298][  T357]  ? __down_timeout+0x10/0x10
[ 2055.266999][  T357]  do_madvise+0x249/0x3c0
[ 2055.271342][  T357]  ? madvise_set_anon_name+0xe0/0xe0
[ 2055.276637][  T357]  ? restore_fpregs_from_fpstate+0xcc/0x1e0
[ 2055.282562][  T357]  __x64_sys_madvise+0xa6/0x110
[ 2055.287438][  T357]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2055.293349][  T357]  do_syscall_64+0x35/0xb0
[ 2055.297781][  T357]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2055.303701][  T357] RIP: 0033:0x7fdd199a6059
[ 2055.308127][  T357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2055.328031][  T357] RSP: 002b:00007fdd1831b168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 2055.336461][  T357] RAX: ffffffffffffffda RBX: 00007fdd19ab8f60 RCX: 00007fdd199a6059
[ 2055.344446][  T357] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000000020ffd000
[ 2055.352429][  T357] RBP: 00007fdd19a0008d R08: 0000000000000000 R09: 0000000000000000
[ 2055.360409][  T357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2055.368387][  T357] R13: 00007ffe668dc06f R14: 00007fdd1831b300 R15: 0000000000022000
[ 2055.376360][  T357]  </TASK>
[ 2055.379360][  T357] 
[ 2055.381664][  T357] Allocated by task 357:
[ 2055.385883][  T357]  kasan_save_stack+0x1e/0x40
[ 2055.390556][  T357]  __kasan_kmalloc+0xa9/0xd0
[ 2055.395130][  T357]  madvise_update_vma+0x546/0x7f0
[ 2055.400141][  T357]  madvise_vma_anon_name+0x7c/0xc0
[ 2055.405471][  T357]  madvise_walk_vmas+0x1d5/0x2d0
[ 2055.410495][  T357]  madvise_set_anon_name+0xac/0xe0
[ 2055.415590][  T357]  __do_sys_prctl+0xeb5/0x12d0
[ 2055.420340][  T357]  do_syscall_64+0x35/0xb0
[ 2055.424739][  T357]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2055.430614][  T357] 
[ 2055.432918][  T357] Freed by task 357:
[ 2055.436786][  T357]  kasan_save_stack+0x1e/0x40
[ 2055.441453][  T357]  kasan_set_track+0x21/0x30
[ 2055.446029][  T357]  kasan_set_free_info+0x20/0x30
[ 2055.450979][  T357]  ____kasan_slab_free+0x126/0x160
[ 2055.456083][  T357]  slab_free_freelist_hook+0x8b/0x1c0
[ 2055.461446][  T357]  kfree+0xd0/0x390
[ 2055.465257][  T357]  free_vma_anon_name+0xeb/0x110
[ 2055.470190][  T357]  vm_area_free+0x11/0x30
[ 2055.474530][  T357]  __vma_adjust+0x836/0x24a0
[ 2055.479102][  T357]  vma_merge+0x860/0xeb0
[ 2055.483324][  T357]  madvise_update_vma+0x1b6/0x7f0
[ 2055.488333][  T357]  madvise_vma_behavior+0x116/0x1910
[ 2055.493602][  T357]  madvise_walk_vmas+0x1d5/0x2d0
[ 2055.498526][  T357]  do_madvise+0x249/0x3c0
[ 2055.502844][  T357]  __x64_sys_madvise+0xa6/0x110
[ 2055.507699][  T357]  do_syscall_64+0x35/0xb0
[ 2055.512101][  T357]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2055.517974][  T357] 
[ 2055.520284][  T357] The buggy address belongs to the object at ffff888018f1db68
[ 2055.520284][  T357]  which belongs to the cache kmalloc-8 of size 8
[ 2055.533969][  T357] The buggy address is located 4 bytes inside of
[ 2055.533969][  T357]  8-byte region [ffff888018f1db68, ffff888018f1db70)
[ 2055.546881][  T357] The buggy address belongs to the page:
[ 2055.552497][  T357] page:ffffea000063c740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18f1d
[ 2055.562721][  T357] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 2055.570276][  T357] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888010c41280
[ 2055.578857][  T357] raw: 0000000000000000 0000000000660066 00000001ffffffff 0000000000000000
[ 2055.587509][  T357] page dumped because: kasan: bad access detected
[ 2055.593923][  T357] page_owner tracks the page as allocated
[ 2055.599620][  T357] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3613, ts 52311257405, free_ts 50973586520
[ 2055.615616][  T357]  get_page_from_freelist+0xa72/0x2f50
[ 2055.621081][  T357]  __alloc_pages+0x1b2/0x500
[ 2055.625655][  T357]  alloc_pages+0x1aa/0x310
[ 2055.630074][  T357]  allocate_slab+0x27f/0x3c0
[ 2055.634648][  T357]  ___slab_alloc+0xbe1/0x12b0
[ 2055.639309][  T357]  __slab_alloc.constprop.0+0x4d/0xa0
[ 2055.644688][  T357]  __kmalloc_track_caller+0x35a/0x430
[ 2055.650166][  T357]  kvasprintf+0xb5/0x150
[ 2055.654426][  T357]  kvasprintf_const+0x60/0x190
[ 2055.659201][  T357]  kobject_set_name_vargs+0x56/0x150
[ 2055.664475][  T357]  dev_set_name+0xbb/0xf0
[ 2055.668791][  T357]  wiphy_new_nm+0x800/0x2080
[ 2055.673367][  T357]  ieee80211_alloc_hw_nm+0x373/0x2270
[ 2055.678737][  T357]  mac80211_hwsim_new_radio+0x1f6/0x4b20
[ 2055.684385][  T357]  hwsim_new_radio_nl+0x9bc/0x1080
[ 2055.689483][  T357]  genl_family_rcv_msg_doit+0x228/0x320
[ 2055.695129][  T357] page last free stack trace:
[ 2055.699780][  T357]  free_pcp_prepare+0x374/0x870
[ 2055.704618][  T357]  free_unref_page_list+0x1a9/0xfa0
[ 2055.709819][  T357]  release_pages+0x317/0x1220
[ 2055.714509][  T357]  tlb_finish_mmu+0x165/0x8c0
[ 2055.719173][  T357]  exit_mmap+0x21b/0x670
[ 2055.723395][  T357]  __mmput+0x122/0x4b0
[ 2055.727446][  T357]  mmput+0x56/0x60
[ 2055.731145][  T357]  do_exit+0xa3c/0x2a30
[ 2055.735288][  T357]  do_group_exit+0xd2/0x2f0
[ 2055.739774][  T357]  get_signal+0x45a/0x2490
[ 2055.744210][  T357]  arch_do_signal_or_restart+0x2a9/0x1c40
[ 2055.749919][  T357]  exit_to_user_mode_prepare+0x17d/0x290
[ 2055.755537][  T357]  syscall_exit_to_user_mode+0x19/0x60
[ 2055.760993][  T357]  do_syscall_64+0x42/0xb0
[ 2055.765410][  T357]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2055.771301][  T357] 
[ 2055.773609][  T357] Memory state around the buggy address:
[ 2055.779251][  T357]  ffff888018f1da00: fa fc fc fc fc fa fc fc fc fc 00 fc fc fc fc fa
[ 2055.787306][  T357]  ffff888018f1da80: fc fc fc fc fa fc fc fc fc fa fc fc fc fc fa fc
[ 2055.795437][  T357] >ffff888018f1db00: fc fc fc fa fc fc fc fc fa fc fc fc fc fa fc fc
[ 2055.803568][  T357]                                                           ^
[ 2055.811010][  T357]  ffff888018f1db80: fc fc 00 fc fc fc fc 00 fc fc fc fc fa fc fc fc
[ 2055.819087][  T357]  ffff888018f1dc00: fc fa fc fc fc fc fa fc fc fc fc fa fc fc fc fc
[ 2055.827140][  T357] ==================================================================
07:59:06 executing program 1:
r0 = syz_open_pts(0xffffffffffffffff, 0x80000)
syz_open_pts(r0, 0x18000)
syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf)

07:59:06 executing program 0:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x80010, r0, 0x44860000)
r1 = syz_io_uring_setup(0x2c67, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) (async)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, 0x0)
mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x80010, r2, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) (async)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r4, 0x80, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004004) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3)

[ 2055.835188][  T357] Disabling lock debugging due to kernel taint
[ 2055.844048][  T357] Kernel panic - not syncing: panic_on_warn set ...
[ 2055.850653][  T357] CPU: 0 PID: 357 Comm: syz-executor.4 Tainted: G    B             5.17.0-rc4-syzkaller-00052-g359303076163 #0
[ 2055.862385][  T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2055.872455][  T357] Call Trace:
[ 2055.875734][  T357]  <TASK>
[ 2055.878669][  T357]  dump_stack_lvl+0xcd/0x134
[ 2055.883264][  T357]  panic+0x2b0/0x6dd
[ 2055.887166][  T357]  ? __warn_printk+0xf3/0xf3
[ 2055.891763][  T357]  ? preempt_schedule_common+0x59/0xc0
[ 2055.897229][  T357]  ? strcmp+0x9b/0xb0
[ 2055.901225][  T357]  ? preempt_schedule_thunk+0x16/0x18
[ 2055.906897][  T357]  ? trace_hardirqs_on+0x38/0x1c0
[ 2055.911916][  T357]  ? trace_hardirqs_on+0x51/0x1c0
[ 2055.916928][  T357]  ? strcmp+0x9b/0xb0
[ 2055.920906][  T357]  ? strcmp+0x9b/0xb0
[ 2055.924890][  T357]  end_report.cold+0x63/0x6f
[ 2055.929488][  T357]  kasan_report.cold+0x71/0xdf
[ 2055.934255][  T357]  ? strcmp+0x9b/0xb0
[ 2055.938235][  T357]  strcmp+0x9b/0xb0
[ 2055.942040][  T357]  madvise_update_vma+0x4e6/0x7f0
[ 2055.947056][  T357]  madvise_vma_behavior+0x116/0x1910
[ 2055.952343][  T357]  ? madvise_vma_anon_name+0xc0/0xc0
[ 2055.957611][  T357]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[ 2055.963321][  T357]  ? vmacache_find+0x62/0x330
[ 2055.968001][  T357]  ? find_vma+0xbd/0x270
[ 2055.972234][  T357]  madvise_walk_vmas+0x1d5/0x2d0
[ 2055.977192][  T357]  ? madvise_vma_anon_name+0xc0/0xc0
[ 2055.982474][  T357]  ? __remove_memory+0x40/0x40
[ 2055.987227][  T357]  ? __down_timeout+0x10/0x10
[ 2055.991890][  T357]  do_madvise+0x249/0x3c0
[ 2055.996204][  T357]  ? madvise_set_anon_name+0xe0/0xe0
[ 2056.001470][  T357]  ? restore_fpregs_from_fpstate+0xcc/0x1e0
[ 2056.007351][  T357]  __x64_sys_madvise+0xa6/0x110
[ 2056.012197][  T357]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2056.018083][  T357]  do_syscall_64+0x35/0xb0
[ 2056.022517][  T357]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2056.028496][  T357] RIP: 0033:0x7fdd199a6059
[ 2056.032911][  T357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2056.052508][  T357] RSP: 002b:00007fdd1831b168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 2056.060915][  T357] RAX: ffffffffffffffda RBX: 00007fdd19ab8f60 RCX: 00007fdd199a6059
[ 2056.068894][  T357] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000000020ffd000
[ 2056.076853][  T357] RBP: 00007fdd19a0008d R08: 0000000000000000 R09: 0000000000000000
[ 2056.084817][  T357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2056.092802][  T357] R13: 00007ffe668dc06f R14: 00007fdd1831b300 R15: 0000000000022000
[ 2056.100772][  T357]  </TASK>
[ 2056.104346][  T357] Kernel Offset: disabled
[ 2056.108654][  T357] Rebooting in 86400 seconds..