={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r3, 0x62782000) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ff6000/0x3000)=nil, 0x3000}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe4000/0x2000)=nil, 0x2000, 0x3, 0x110, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r3, 0x62782000) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ff6000/0x3000)=nil, 0x3000}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:55 executing program 4: io_uring_setup(0x400068d7, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x0, 0x84}) 00:49:55 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x44, &(0x7f0000000080), &(0x7f0000fe6000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0xff, &(0x7f0000ff3000/0x3000)=nil, 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000084180000e1", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x428, 0x3f3, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x2e, [0x200, 0x400, 0x4, 0x7fff, 0x40, 0x0, 0x5, 0x101, 0x3, 0x80, 0x20, 0x4a6e, 0x3, 0x8, 0x400000, 0x1, 0xfffffffc, 0x4, 0x7, 0x1, 0x80000001, 0x2, 0x40, 0x1, 0x4, 0xd917, 0x8, 0x1, 0x7, 0x10000, 0x9, 0x6ce, 0x800, 0x7f, 0x3ff, 0x80, 0xfffffbff, 0x2, 0x0, 0x800, 0xfffffff7, 0x4a66, 0xfffff801, 0x8, 0xffff, 0x0, 0x7fff, 0xf5, 0x8001, 0xb6f8, 0x200, 0x3ff, 0x1, 0xfff, 0x4eb, 0x7, 0x7fffffff, 0x8, 0x17400000, 0x800, 0xff, 0x200, 0x1, 0xffff2697], [0xfff, 0x8, 0x3, 0x1, 0x0, 0x7f, 0x37, 0x7, 0x5, 0x401, 0x2e3, 0x1000, 0x7c0000, 0x6, 0x8, 0x8001, 0x0, 0xfffffc00, 0xffffffff, 0x8001, 0x0, 0x1f, 0xa10, 0x1000, 0x7, 0xd86e, 0x4, 0x7, 0x1000, 0x9, 0x4, 0x9cb, 0x7, 0x2, 0x4, 0x7, 0x101, 0xb370, 0x8000, 0x6, 0x186, 0x0, 0xffffffff, 0x1, 0xd65, 0x80000000, 0x7, 0x5c, 0x6, 0x8, 0x8000, 0x8, 0x10000, 0x7464, 0x7, 0x3ff, 0x7, 0x4, 0x85, 0xcd0, 0x6, 0x8, 0xfff, 0x8], [0xdf08, 0x3, 0x3, 0xffffffff, 0x4, 0x81, 0x800, 0xffffff01, 0x401, 0x2, 0xf4f2, 0x8000, 0x8, 0x1, 0x1ff, 0x9, 0xff, 0x2f, 0xff, 0x9, 0xf3a, 0x2c, 0xff, 0x1, 0x8, 0x6, 0x1, 0x20, 0x9, 0x40, 0x800, 0x0, 0xfffffff9, 0x14b, 0x0, 0xc8, 0x7, 0xf086, 0x8, 0x200, 0x6, 0x18, 0x5, 0x9, 0x800, 0xdc7d, 0x7, 0x2, 0x7, 0x6, 0x1, 0x400, 0x711, 0xadd, 0x64, 0x9d, 0x7, 0x8a9ce7a8, 0x5, 0x0, 0x80, 0x0, 0xffffc99b, 0xb8], [0x2, 0x8000, 0x1, 0x7fff, 0x1, 0x2, 0x22, 0x8, 0x1, 0x80000000, 0x743038c, 0xffffff7f, 0xffffffff, 0xcee, 0x9, 0x7, 0x80000001, 0x2, 0x40000000, 0x2, 0x4, 0xc27, 0x400, 0x2, 0x1, 0x10000, 0x8, 0x1, 0x4, 0x2, 0x9, 0x9, 0x3, 0x4, 0x8, 0x1ff, 0x1b, 0x8, 0x6, 0x1000, 0x3f, 0x6, 0x1, 0xf2, 0x1f, 0x10000, 0x1, 0xeb1, 0x1, 0x1395, 0x4, 0x9, 0x2, 0x3f, 0x1, 0x8, 0x9, 0x1, 0x6, 0x5, 0x7fff, 0xb5, 0x8f, 0x4], 0x5, ['\x00', '(-\'\x00']}, ["", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4001}, 0x4) io_uring_setup(0x6efe, &(0x7f0000000200)={0x0, 0x6d1b, 0x1, 0x2, 0x1df}) 00:49:55 executing program 4: io_uring_setup(0x400068d7, &(0x7f0000000180)={0x0, 0x0, 0x10}) 00:49:55 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x1, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:55 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) io_uring_setup(0x51a2, &(0x7f0000000280)={0x0, 0x9fca, 0x1, 0x1, 0x316, 0x0, r1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) syz_io_uring_setup(0x3bac, &(0x7f0000000080)={0x0, 0x75cc, 0x80, 0x2, 0x235, 0x0, r2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x80000400) inotify_rm_watch(r2, r3) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) 00:49:55 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (rerun: 64) 00:49:55 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x44, &(0x7f0000000080), &(0x7f0000fe6000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0xff, &(0x7f0000ff3000/0x3000)=nil, 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000084180000e1", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x428, 0x3f3, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x2e, [0x200, 0x400, 0x4, 0x7fff, 0x40, 0x0, 0x5, 0x101, 0x3, 0x80, 0x20, 0x4a6e, 0x3, 0x8, 0x400000, 0x1, 0xfffffffc, 0x4, 0x7, 0x1, 0x80000001, 0x2, 0x40, 0x1, 0x4, 0xd917, 0x8, 0x1, 0x7, 0x10000, 0x9, 0x6ce, 0x800, 0x7f, 0x3ff, 0x80, 0xfffffbff, 0x2, 0x0, 0x800, 0xfffffff7, 0x4a66, 0xfffff801, 0x8, 0xffff, 0x0, 0x7fff, 0xf5, 0x8001, 0xb6f8, 0x200, 0x3ff, 0x1, 0xfff, 0x4eb, 0x7, 0x7fffffff, 0x8, 0x17400000, 0x800, 0xff, 0x200, 0x1, 0xffff2697], [0xfff, 0x8, 0x3, 0x1, 0x0, 0x7f, 0x37, 0x7, 0x5, 0x401, 0x2e3, 0x1000, 0x7c0000, 0x6, 0x8, 0x8001, 0x0, 0xfffffc00, 0xffffffff, 0x8001, 0x0, 0x1f, 0xa10, 0x1000, 0x7, 0xd86e, 0x4, 0x7, 0x1000, 0x9, 0x4, 0x9cb, 0x7, 0x2, 0x4, 0x7, 0x101, 0xb370, 0x8000, 0x6, 0x186, 0x0, 0xffffffff, 0x1, 0xd65, 0x80000000, 0x7, 0x5c, 0x6, 0x8, 0x8000, 0x8, 0x10000, 0x7464, 0x7, 0x3ff, 0x7, 0x4, 0x85, 0xcd0, 0x6, 0x8, 0xfff, 0x8], [0xdf08, 0x3, 0x3, 0xffffffff, 0x4, 0x81, 0x800, 0xffffff01, 0x401, 0x2, 0xf4f2, 0x8000, 0x8, 0x1, 0x1ff, 0x9, 0xff, 0x2f, 0xff, 0x9, 0xf3a, 0x2c, 0xff, 0x1, 0x8, 0x6, 0x1, 0x20, 0x9, 0x40, 0x800, 0x0, 0xfffffff9, 0x14b, 0x0, 0xc8, 0x7, 0xf086, 0x8, 0x200, 0x6, 0x18, 0x5, 0x9, 0x800, 0xdc7d, 0x7, 0x2, 0x7, 0x6, 0x1, 0x400, 0x711, 0xadd, 0x64, 0x9d, 0x7, 0x8a9ce7a8, 0x5, 0x0, 0x80, 0x0, 0xffffc99b, 0xb8], [0x2, 0x8000, 0x1, 0x7fff, 0x1, 0x2, 0x22, 0x8, 0x1, 0x80000000, 0x743038c, 0xffffff7f, 0xffffffff, 0xcee, 0x9, 0x7, 0x80000001, 0x2, 0x40000000, 0x2, 0x4, 0xc27, 0x400, 0x2, 0x1, 0x10000, 0x8, 0x1, 0x4, 0x2, 0x9, 0x9, 0x3, 0x4, 0x8, 0x1ff, 0x1b, 0x8, 0x6, 0x1000, 0x3f, 0x6, 0x1, 0xf2, 0x1f, 0x10000, 0x1, 0xeb1, 0x1, 0x1395, 0x4, 0x9, 0x2, 0x3f, 0x1, 0x8, 0x9, 0x1, 0x6, 0x5, 0x7fff, 0xb5, 0x8f, 0x4], 0x5, ['\x00', '(-\'\x00']}, ["", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4001}, 0x4) io_uring_setup(0x6efe, &(0x7f0000000200)={0x0, 0x6d1b, 0x1, 0x2, 0x1df}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x44, &(0x7f0000000080), &(0x7f0000fe6000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0xff, &(0x7f0000ff3000/0x3000)=nil, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000084180000e1", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x428, 0x3f3, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x2e, [0x200, 0x400, 0x4, 0x7fff, 0x40, 0x0, 0x5, 0x101, 0x3, 0x80, 0x20, 0x4a6e, 0x3, 0x8, 0x400000, 0x1, 0xfffffffc, 0x4, 0x7, 0x1, 0x80000001, 0x2, 0x40, 0x1, 0x4, 0xd917, 0x8, 0x1, 0x7, 0x10000, 0x9, 0x6ce, 0x800, 0x7f, 0x3ff, 0x80, 0xfffffbff, 0x2, 0x0, 0x800, 0xfffffff7, 0x4a66, 0xfffff801, 0x8, 0xffff, 0x0, 0x7fff, 0xf5, 0x8001, 0xb6f8, 0x200, 0x3ff, 0x1, 0xfff, 0x4eb, 0x7, 0x7fffffff, 0x8, 0x17400000, 0x800, 0xff, 0x200, 0x1, 0xffff2697], [0xfff, 0x8, 0x3, 0x1, 0x0, 0x7f, 0x37, 0x7, 0x5, 0x401, 0x2e3, 0x1000, 0x7c0000, 0x6, 0x8, 0x8001, 0x0, 0xfffffc00, 0xffffffff, 0x8001, 0x0, 0x1f, 0xa10, 0x1000, 0x7, 0xd86e, 0x4, 0x7, 0x1000, 0x9, 0x4, 0x9cb, 0x7, 0x2, 0x4, 0x7, 0x101, 0xb370, 0x8000, 0x6, 0x186, 0x0, 0xffffffff, 0x1, 0xd65, 0x80000000, 0x7, 0x5c, 0x6, 0x8, 0x8000, 0x8, 0x10000, 0x7464, 0x7, 0x3ff, 0x7, 0x4, 0x85, 0xcd0, 0x6, 0x8, 0xfff, 0x8], [0xdf08, 0x3, 0x3, 0xffffffff, 0x4, 0x81, 0x800, 0xffffff01, 0x401, 0x2, 0xf4f2, 0x8000, 0x8, 0x1, 0x1ff, 0x9, 0xff, 0x2f, 0xff, 0x9, 0xf3a, 0x2c, 0xff, 0x1, 0x8, 0x6, 0x1, 0x20, 0x9, 0x40, 0x800, 0x0, 0xfffffff9, 0x14b, 0x0, 0xc8, 0x7, 0xf086, 0x8, 0x200, 0x6, 0x18, 0x5, 0x9, 0x800, 0xdc7d, 0x7, 0x2, 0x7, 0x6, 0x1, 0x400, 0x711, 0xadd, 0x64, 0x9d, 0x7, 0x8a9ce7a8, 0x5, 0x0, 0x80, 0x0, 0xffffc99b, 0xb8], [0x2, 0x8000, 0x1, 0x7fff, 0x1, 0x2, 0x22, 0x8, 0x1, 0x80000000, 0x743038c, 0xffffff7f, 0xffffffff, 0xcee, 0x9, 0x7, 0x80000001, 0x2, 0x40000000, 0x2, 0x4, 0xc27, 0x400, 0x2, 0x1, 0x10000, 0x8, 0x1, 0x4, 0x2, 0x9, 0x9, 0x3, 0x4, 0x8, 0x1ff, 0x1b, 0x8, 0x6, 0x1000, 0x3f, 0x6, 0x1, 0xf2, 0x1f, 0x10000, 0x1, 0xeb1, 0x1, 0x1395, 0x4, 0x9, 0x2, 0x3f, 0x1, 0x8, 0x9, 0x1, 0x6, 0x5, 0x7fff, 0xb5, 0x8f, 0x4], 0x5, ['\x00', '(-\'\x00']}, ["", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4001}, 0x4) (async) io_uring_setup(0x6efe, &(0x7f0000000200)={0x0, 0x6d1b, 0x1, 0x2, 0x1df}) (async) 00:49:55 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x1f6f, &(0x7f0000000140)={0x0, 0xc6c1, 0x200, 0xfffffffe, 0x3a9, 0x0, r0}, &(0x7f0000feb000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000080), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:55 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x2, 0xcacb5f23ad0187e5) mmap$snddsp_status(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r2, 0x82000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:55 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffff5c34}}, './file0\x00'}) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381, 0x0, r1}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:55 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x9c1, 0x0, 0x2c3}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:55 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x1f6f, &(0x7f0000000140)={0x0, 0xc6c1, 0x200, 0xfffffffe, 0x3a9, 0x0, r0}, &(0x7f0000feb000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000080), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:55 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x1, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x1, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:55 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x2, 0xcacb5f23ad0187e5) mmap$snddsp_status(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r2, 0x82000000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:55 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x44, &(0x7f0000000080), &(0x7f0000fe6000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0xff, &(0x7f0000ff3000/0x3000)=nil, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000084180000e1", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x428, 0x3f3, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x2e, [0x200, 0x400, 0x4, 0x7fff, 0x40, 0x0, 0x5, 0x101, 0x3, 0x80, 0x20, 0x4a6e, 0x3, 0x8, 0x400000, 0x1, 0xfffffffc, 0x4, 0x7, 0x1, 0x80000001, 0x2, 0x40, 0x1, 0x4, 0xd917, 0x8, 0x1, 0x7, 0x10000, 0x9, 0x6ce, 0x800, 0x7f, 0x3ff, 0x80, 0xfffffbff, 0x2, 0x0, 0x800, 0xfffffff7, 0x4a66, 0xfffff801, 0x8, 0xffff, 0x0, 0x7fff, 0xf5, 0x8001, 0xb6f8, 0x200, 0x3ff, 0x1, 0xfff, 0x4eb, 0x7, 0x7fffffff, 0x8, 0x17400000, 0x800, 0xff, 0x200, 0x1, 0xffff2697], [0xfff, 0x8, 0x3, 0x1, 0x0, 0x7f, 0x37, 0x7, 0x5, 0x401, 0x2e3, 0x1000, 0x7c0000, 0x6, 0x8, 0x8001, 0x0, 0xfffffc00, 0xffffffff, 0x8001, 0x0, 0x1f, 0xa10, 0x1000, 0x7, 0xd86e, 0x4, 0x7, 0x1000, 0x9, 0x4, 0x9cb, 0x7, 0x2, 0x4, 0x7, 0x101, 0xb370, 0x8000, 0x6, 0x186, 0x0, 0xffffffff, 0x1, 0xd65, 0x80000000, 0x7, 0x5c, 0x6, 0x8, 0x8000, 0x8, 0x10000, 0x7464, 0x7, 0x3ff, 0x7, 0x4, 0x85, 0xcd0, 0x6, 0x8, 0xfff, 0x8], [0xdf08, 0x3, 0x3, 0xffffffff, 0x4, 0x81, 0x800, 0xffffff01, 0x401, 0x2, 0xf4f2, 0x8000, 0x8, 0x1, 0x1ff, 0x9, 0xff, 0x2f, 0xff, 0x9, 0xf3a, 0x2c, 0xff, 0x1, 0x8, 0x6, 0x1, 0x20, 0x9, 0x40, 0x800, 0x0, 0xfffffff9, 0x14b, 0x0, 0xc8, 0x7, 0xf086, 0x8, 0x200, 0x6, 0x18, 0x5, 0x9, 0x800, 0xdc7d, 0x7, 0x2, 0x7, 0x6, 0x1, 0x400, 0x711, 0xadd, 0x64, 0x9d, 0x7, 0x8a9ce7a8, 0x5, 0x0, 0x80, 0x0, 0xffffc99b, 0xb8], [0x2, 0x8000, 0x1, 0x7fff, 0x1, 0x2, 0x22, 0x8, 0x1, 0x80000000, 0x743038c, 0xffffff7f, 0xffffffff, 0xcee, 0x9, 0x7, 0x80000001, 0x2, 0x40000000, 0x2, 0x4, 0xc27, 0x400, 0x2, 0x1, 0x10000, 0x8, 0x1, 0x4, 0x2, 0x9, 0x9, 0x3, 0x4, 0x8, 0x1ff, 0x1b, 0x8, 0x6, 0x1000, 0x3f, 0x6, 0x1, 0xf2, 0x1f, 0x10000, 0x1, 0xeb1, 0x1, 0x1395, 0x4, 0x9, 0x2, 0x3f, 0x1, 0x8, 0x9, 0x1, 0x6, 0x5, 0x7fff, 0xb5, 0x8f, 0x4], 0x5, ['\x00', '(-\'\x00']}, ["", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4001}, 0x4) (async) io_uring_setup(0x6efe, &(0x7f0000000200)={0x0, 0x6d1b, 0x1, 0x2, 0x1df}) 00:49:55 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffff5c34}}, './file0\x00'}) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381, 0x0, r1}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:55 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x2, 0xcacb5f23ad0187e5) mmap$snddsp_status(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r2, 0x82000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:55 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x1f6f, &(0x7f0000000140)={0x0, 0xc6c1, 0x200, 0xfffffffe, 0x3a9, 0x0, r0}, &(0x7f0000feb000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000080), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x1f6f, &(0x7f0000000140)={0x0, 0xc6c1, 0x200, 0xfffffffe, 0x3a9, 0x0, r0}, &(0x7f0000feb000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000080), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:55 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$usbfs(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r0, 0x1f6) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r1, 0x10000000) 00:49:55 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200402, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$snddsp(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x4, 0x20010, 0xffffffffffffffff, 0x3000) mmap$dsp(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0xa480, 0x200, 0xfffffffe, 0xe1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:55 executing program 1: syz_io_uring_setup(0x2a52, &(0x7f00000000c0)={0x0, 0x7eac, 0x800}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x10000000) 00:49:55 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffff5c34}}, './file0\x00'}) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381, 0x0, r1}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:55 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$usbfs(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r0, 0x1f6) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r1, 0x10000000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$usbfs(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r0, 0x1f6) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r1, 0x10000000) (async) 00:49:55 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x1, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x1, 0x10, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:55 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200402, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$snddsp(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x4, 0x20010, 0xffffffffffffffff, 0x3000) mmap$dsp(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0xa480, 0x200, 0xfffffffe, 0xe1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:56 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 1: syz_io_uring_setup(0x2a52, &(0x7f00000000c0)={0x0, 0x7eac, 0x800}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x10000000) 00:49:56 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x200402, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$snddsp(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x4, 0x20010, 0xffffffffffffffff, 0x3000) (async) mmap$dsp(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0xa480, 0x200, 0xfffffffe, 0xe1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:56 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 1: syz_io_uring_setup(0x2a52, &(0x7f00000000c0)={0x0, 0x7eac, 0x800}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x10000000) 00:49:56 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$usbfs(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r0, 0x1f6) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r1, 0x10000000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$usbfs(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r0, 0x1f6) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r1, 0x10000000) (async) 00:49:56 executing program 5: getegid() mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1a4}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/41, &(0x7f0000000200)=0x29) socket$isdn(0x22, 0x3, 0x1) 00:49:56 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffc1}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9005}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 5: getegid() mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1a4}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/41, &(0x7f0000000200)=0x29) socket$isdn(0x22, 0x3, 0x1) getegid() (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1a4}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/41, &(0x7f0000000200)=0x29) (async) socket$isdn(0x22, 0x3, 0x1) (async) 00:49:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1409, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x8005) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xb944, 0x800}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000fdf000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000ff0000/0x3000)=nil, 0x3000) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000002c0)={{0x20, 0xfff}, 0x69}, 0x10) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000fe4000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0xff, &(0x7f00000000c0)=0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:56 executing program 3: syz_io_uring_setup(0x3fd7, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 5: getegid() mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1a4}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/41, &(0x7f0000000200)=0x29) (async) socket$isdn(0x22, 0x3, 0x1) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0xff, &(0x7f00000000c0)=0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:56 executing program 3: syz_io_uring_setup(0x3fd7, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1409, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x8005) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xb944, 0x800}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000fdf000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000ff0000/0x3000)=nil, 0x3000) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000002c0)={{0x20, 0xfff}, 0x69}, 0x10) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000fe4000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1409, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x8005) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xb944, 0x800}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000fdf000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) munlock(&(0x7f0000ff0000/0x3000)=nil, 0x3000) (async) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000002c0)={{0x20, 0xfff}, 0x69}, 0x10) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000fe4000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0xff, &(0x7f00000000c0)=0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0xff, &(0x7f00000000c0)=0x2) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:49:56 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r0, 0x0) 00:49:56 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffc1}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9005}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffc1}}, './file0\x00'}) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9005}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:56 executing program 3: syz_io_uring_setup(0x3fd7, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:56 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) r0 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r0, 0x0) 00:49:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1409, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x8005) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xb944, 0x800}, &(0x7f0000fe8000/0x1000)=nil, &(0x7f0000fdf000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) munlock(&(0x7f0000ff0000/0x3000)=nil, 0x3000) (async) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000002c0)={{0x20, 0xfff}, 0x69}, 0x10) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000fe4000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r0, 0x0) (rerun: 64) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:56 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffc1}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9005}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:56 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (rerun: 64) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x0) (rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdf000/0x4000)=nil, 0x4000, 0x10000, 0x3, &(0x7f0000ff0000/0x10000)=nil) 00:49:56 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r0, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r0, 0x0) (async) 00:49:56 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0x0) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:56 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010020000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000080000000002e2f66696c653000"]) syz_io_uring_setup(0x3fcf, &(0x7f00000001c0)={0x0, 0x103, 0x80, 0x2, 0x19e, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x2a0b, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000feb000/0x2000)=nil, &(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdf000/0x4000)=nil, 0x4000, 0x10000, 0x3, &(0x7f0000ff0000/0x10000)=nil) 00:49:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x109c00) ioctl$USBDEVFS_RESET(r0, 0x5514) syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0xafa6, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_setup(0x43, &(0x7f0000000180)={0x0, 0x2000086a, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x5860, &(0x7f0000000000)={0x0, 0x54b2, 0x80, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff4000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:56 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ff7000/0x1000)=nil) r1 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000fe5000/0x4000)=nil, 0x4000}) 00:49:56 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010020000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000080000000002e2f66696c653000"]) syz_io_uring_setup(0x3fcf, &(0x7f00000001c0)={0x0, 0x103, 0x80, 0x2, 0x19e, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x2a0b, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000feb000/0x2000)=nil, &(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010020000100000018000000", @ANYRES32, @ANYBLOB="01000080000000002e2f66696c653000"]) (async) syz_io_uring_setup(0x3fcf, &(0x7f00000001c0)={0x0, 0x103, 0x80, 0x2, 0x19e, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x2a0b, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000feb000/0x2000)=nil, &(0x7f0000000000), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) mremap(&(0x7f0000fdf000/0x4000)=nil, 0x4000, 0x10000, 0x3, &(0x7f0000ff0000/0x10000)=nil) 00:49:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x109c00) ioctl$USBDEVFS_RESET(r0, 0x5514) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0xafa6, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_setup(0x43, &(0x7f0000000180)={0x0, 0x2000086a, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:56 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x5860, &(0x7f0000000000)={0x0, 0x54b2, 0x80, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff4000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x109c00) ioctl$USBDEVFS_RESET(r0, 0x5514) syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0xafa6, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_setup(0x43, &(0x7f0000000180)={0x0, 0x2000086a, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ff7000/0x1000)=nil) r1 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000fe5000/0x4000)=nil, 0x4000}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ff7000/0x1000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000fe5000/0x4000)=nil, 0x4000}) (async) 00:49:57 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$snddsp_status(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x100000e, 0x4010, 0xffffffffffffffff, 0x82000000) 00:49:57 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010020000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000080000000002e2f66696c653000"]) (async, rerun: 64) syz_io_uring_setup(0x3fcf, &(0x7f00000001c0)={0x0, 0x103, 0x80, 0x2, 0x19e, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async, rerun: 64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x2a0b, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000feb000/0x2000)=nil, &(0x7f0000000000), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQES(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x100000a, 0x40010, r0, 0x10000000) 00:49:57 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap$snddsp_status(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x100000e, 0x4010, 0xffffffffffffffff, 0x82000000) 00:49:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x5860, &(0x7f0000000000)={0x0, 0x54b2, 0x80, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff4000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:57 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap$snddsp_status(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x100000e, 0x4010, 0xffffffffffffffff, 0x82000000) 00:49:57 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$IORING_OFF_SQES(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x100000a, 0x40010, r0, 0x10000000) 00:49:57 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ff7000/0x1000)=nil) r1 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000fe5000/0x4000)=nil, 0x4000}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ff7000/0x1000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000fe5000/0x4000)=nil, 0x4000}) (async) 00:49:57 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x80000000) mmap$qrtrtun(&(0x7f0000fe9000/0x4000)=nil, 0x4000, 0x2000006, 0x1010, 0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e342f66696c653000"]) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r1, 0x10000000) 00:49:57 executing program 1: r0 = socket(0x8, 0x1, 0x4) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x6, 0x4}, 0x2) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) inotify_rm_watch(r1, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:57 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQES(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x100000a, 0x40010, r0, 0x10000000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$IORING_OFF_SQES(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x100000a, 0x40010, r0, 0x10000000) (async) 00:49:57 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x3) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x300, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20044004) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 32) mmap$xdp(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x80000000) (async, rerun: 32) mmap$qrtrtun(&(0x7f0000fe9000/0x4000)=nil, 0x4000, 0x2000006, 0x1010, 0xffffffffffffffff, 0x9) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e342f66696c653000"]) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r1, 0x10000000) 00:49:57 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 1: r0 = socket(0x8, 0x1, 0x4) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x6, 0x4}, 0x2) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) inotify_rm_watch(r1, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:57 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x7635, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe7000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000180)=0xcb8) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (rerun: 32) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 1: r0 = socket(0x8, 0x1, 0x4) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x6, 0x4}, 0x2) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) inotify_rm_watch(r1, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:57 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x7635, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe7000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000180)=0xcb8) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (rerun: 64) 00:49:57 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x3) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (rerun: 32) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x300, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20044004) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x7635, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe7000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000180)=0xcb8) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x7635, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe7000/0x1000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000180)=0xcb8) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:57 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x8f58, 0x0, 0xfffffffd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe7000/0x7000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ff3000/0x1000)=nil) 00:49:57 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x80000000) (async) mmap$qrtrtun(&(0x7f0000fe9000/0x4000)=nil, 0x4000, 0x2000006, 0x1010, 0xffffffffffffffff, 0x9) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e342f66696c653000"]) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r1, 0x10000000) 00:49:57 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = io_uring_setup(0x5274, &(0x7f0000000180)={0x0, 0x87f8, 0x2, 0x2, 0x26b, 0x0, r0}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fde000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 0: setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async, rerun: 32) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:57 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x8f58, 0x0, 0xfffffffd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe7000/0x7000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ff3000/0x1000)=nil) 00:49:57 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x8f58, 0x0, 0xfffffffd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe7000/0x7000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x8f58, 0x0, 0xfffffffd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe7000/0x7000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ff3000/0x1000)=nil) (async) 00:49:57 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x683c, &(0x7f0000000200)={0x0, 0xf6fd, 0x2, 0x2, 0x292, 0x0, r0}, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:57 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = io_uring_setup(0x5274, &(0x7f0000000180)={0x0, 0x87f8, 0x2, 0x2, 0x26b, 0x0, r0}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fde000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) io_uring_setup(0x5274, &(0x7f0000000180)={0x0, 0x87f8, 0x2, 0x2, 0x26b, 0x0, r0}) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fde000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:57 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x3) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$AUDIT_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x300, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20044004) (async, rerun: 32) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (rerun: 32) 00:49:57 executing program 1: syz_io_uring_setup(0x9ec, &(0x7f0000000000)={0x0, 0xffb4}, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:57 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x683c, &(0x7f0000000200)={0x0, 0xf6fd, 0x2, 0x2, 0x292, 0x0, r0}, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:57 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = io_uring_setup(0x5274, &(0x7f0000000180)={0x0, 0x87f8, 0x2, 0x2, 0x26b, 0x0, r0}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fde000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) io_uring_setup(0x5274, &(0x7f0000000180)={0x0, 0x87f8, 0x2, 0x2, 0x26b, 0x0, r0}) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fde000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:57 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:57 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x1aff, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x215}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000180), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000001c0)={0xc, {0x67, "99452edddfb1bae83adbc19e81481b59d4299d27d9350d9b04db428466b9379191a74a7e11eff4da9aa0060bd4c7696b117fdfa56aec4343ecb1fbc58d614f1ee370a0cac27a4fb0e8363aecdeb9dcd58408a06b0b3ebfb0ba24f774a9e8dd4dae2b7bd2c90dd6"}}, 0x6d) 00:49:57 executing program 1: syz_io_uring_setup(0x9ec, &(0x7f0000000000)={0x0, 0xffb4}, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:57 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x1aff, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x215}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000180), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000001c0)={0xc, {0x67, "99452edddfb1bae83adbc19e81481b59d4299d27d9350d9b04db428466b9379191a74a7e11eff4da9aa0060bd4c7696b117fdfa56aec4343ecb1fbc58d614f1ee370a0cac27a4fb0e8363aecdeb9dcd58408a06b0b3ebfb0ba24f774a9e8dd4dae2b7bd2c90dd6"}}, 0x6d) 00:49:58 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x683c, &(0x7f0000000200)={0x0, 0xf6fd, 0x2, 0x2, 0x292, 0x0, r0}, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x683c, &(0x7f0000000200)={0x0, 0xf6fd, 0x2, 0x2, 0x292, 0x0, r0}, &(0x7f0000fe7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:49:58 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = io_uring_setup(0x495a, &(0x7f0000000380)={0x0, 0x4a19, 0x20, 0x1, 0x1a4}) syz_io_uring_setup(0x150, &(0x7f0000000080)={0x0, 0x8bad, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) socketpair(0x1f, 0xa, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x70082, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r6, 0x8921, 0x0) syz_io_uring_setup(0x748, &(0x7f0000000400)={0x0, 0xd5f6, 0x80, 0x3, 0x323, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000180), 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000240)={@rc={0x1f, @any, 0x40}, {&(0x7f00000001c0)=""/49, 0x31}, &(0x7f0000000200)}, 0xa0) 00:49:58 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x412140, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 1: syz_io_uring_setup(0x9ec, &(0x7f0000000000)={0x0, 0xffb4}, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x9ec, &(0x7f0000000000)={0x0, 0xffb4}, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x1aff, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x215}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000180), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000001c0)={0xc, {0x67, "99452edddfb1bae83adbc19e81481b59d4299d27d9350d9b04db428466b9379191a74a7e11eff4da9aa0060bd4c7696b117fdfa56aec4343ecb1fbc58d614f1ee370a0cac27a4fb0e8363aecdeb9dcd58408a06b0b3ebfb0ba24f774a9e8dd4dae2b7bd2c90dd6"}}, 0x6d) 00:49:58 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x8000000, 0x10, 0x4000000, 0x4, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fde000/0x2000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:58 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x412140, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x412140, 0x0) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:58 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000d, 0x80010, r1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x10, 0xffffffffffffffff, 0x10000) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:58 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x8000000, 0x10, 0x4000000, 0x4, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fde000/0x2000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x8000000, 0x10, 0x4000000, 0x4, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fde000/0x2000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:49:58 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = io_uring_setup(0x495a, &(0x7f0000000380)={0x0, 0x4a19, 0x20, 0x1, 0x1a4}) syz_io_uring_setup(0x150, &(0x7f0000000080)={0x0, 0x8bad, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) socketpair(0x1f, 0xa, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x70082, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r6, 0x8921, 0x0) syz_io_uring_setup(0x748, &(0x7f0000000400)={0x0, 0xd5f6, 0x80, 0x3, 0x323, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000180), 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000240)={@rc={0x1f, @any, 0x40}, {&(0x7f00000001c0)=""/49, 0x31}, &(0x7f0000000200)}, 0xa0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) io_uring_setup(0x495a, &(0x7f0000000380)={0x0, 0x4a19, 0x20, 0x1, 0x1a4}) (async) syz_io_uring_setup(0x150, &(0x7f0000000080)={0x0, 0x8bad, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) (async) socketpair(0x1f, 0xa, 0x8, &(0x7f0000000100)) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x70082, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r6, 0x8921, 0x0) (async) syz_io_uring_setup(0x748, &(0x7f0000000400)={0x0, 0xd5f6, 0x80, 0x3, 0x323, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000180), 0x1) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000240)={@rc={0x1f, @any, 0x40}, {&(0x7f00000001c0)=""/49, 0x31}, &(0x7f0000000200)}, 0xa0) (async) 00:49:58 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000d, 0x80010, r1, 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x10, 0xffffffffffffffff, 0x10000) 00:49:58 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x412140, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x412140, 0x0) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:49:58 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x8000000, 0x10, 0x4000000, 0x4, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fde000/0x2000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x8000000, 0x10, 0x4000000, 0x4, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fde000/0x2000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:49:58 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000d, 0x80010, r1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x10, 0xffffffffffffffff, 0x10000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000d, 0x80010, r1, 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x10, 0xffffffffffffffff, 0x10000) (async) 00:49:58 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x20) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x7688, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:58 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2f65, &(0x7f0000000080)={0x0, 0x21bd, 0x80, 0x1, 0x10, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fdc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:58 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x7688, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:58 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = io_uring_setup(0x495a, &(0x7f0000000380)={0x0, 0x4a19, 0x20, 0x1, 0x1a4}) syz_io_uring_setup(0x150, &(0x7f0000000080)={0x0, 0x8bad, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000340)=0x1, 0x4) (async) socketpair(0x1f, 0xa, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x70082, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) (async, rerun: 32) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (rerun: 32) ioctl$SIOCGIFMTU(r6, 0x8921, 0x0) (async) syz_io_uring_setup(0x748, &(0x7f0000000400)={0x0, 0xd5f6, 0x80, 0x3, 0x323, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) (async) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000180), 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000240)={@rc={0x1f, @any, 0x40}, {&(0x7f00000001c0)=""/49, 0x31}, &(0x7f0000000200)}, 0xa0) 00:49:58 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x20) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$snddsp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x6000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2f65, &(0x7f0000000080)={0x0, 0x21bd, 0x80, 0x1, 0x10, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fdc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:58 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x7688, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x453, 0x200, 0x70bd2c, 0x25dfdbfd, "00000000bf4e9b156d752abc76f0d5e9937aa8f668d6ffef0af9e28705c6ed775f", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x84004) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:58 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2f65, &(0x7f0000000080)={0x0, 0x21bd, 0x80, 0x1, 0x10, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fdc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:58 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x20) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x20) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:58 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$snddsp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x6000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$snddsp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x6000) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) syz_io_uring_setup(0x2b94, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000100)) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x453, 0x200, 0x70bd2c, 0x25dfdbfd, "00000000bf4e9b156d752abc76f0d5e9937aa8f668d6ffef0af9e28705c6ed775f", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x84004) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:58 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) socket$bt_hidp(0x1f, 0x3, 0x6) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x1f, &(0x7f0000fdf000/0x4000)=nil, 0x5) 00:49:58 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 00:49:58 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$snddsp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x6000) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x1f, &(0x7f0000fdf000/0x4000)=nil, 0x5) 00:49:58 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) 00:49:58 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x453, 0x200, 0x70bd2c, 0x25dfdbfd, "00000000bf4e9b156d752abc76f0d5e9937aa8f668d6ffef0af9e28705c6ed775f", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x84004) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:58 executing program 0: syz_io_uring_setup(0x44ae, &(0x7f0000000000)={0x0, 0x10000001, 0x40, 0x0, 0x1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffa000/0x1000)=nil) mmap$binder(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$usbfs(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0xc, 0x4000010, r1, 0x7fffffff) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x15b9, &(0x7f0000000180)={0x0, 0x64cd, 0x200, 0x0, 0x306, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) 00:49:58 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) syz_io_uring_setup(0x2b94, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000100)) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) (async) syz_io_uring_setup(0x2b94, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000100)) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:58 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) socket$bt_hidp(0x1f, 0x3, 0x6) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x1f, &(0x7f0000fdf000/0x4000)=nil, 0x5) 00:49:58 executing program 0: syz_io_uring_setup(0x44ae, &(0x7f0000000000)={0x0, 0x10000001, 0x40, 0x0, 0x1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffa000/0x1000)=nil) (async) mmap$binder(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$usbfs(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0xc, 0x4000010, r1, 0x7fffffff) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x15b9, &(0x7f0000000180)={0x0, 0x64cd, 0x200, 0x0, 0x306, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) connect$rds(r1, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xfff, 0x80) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x82000000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/247, 0xf7, 0x1, &(0x7f00000001c0)=""/148, 0x94}, &(0x7f00000002c0)=0x40) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:58 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000001c0)=0x56) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x2) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)=0x5) syz_io_uring_setup(0x3fd5, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0xfffffffd, @mcast1, 0x6}}}, {&(0x7f00000002c0)=""/130, 0x82}, &(0x7f00000003c0), 0x61}, 0xa0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000200)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 0: syz_io_uring_setup(0x44ae, &(0x7f0000000000)={0x0, 0x10000001, 0x40, 0x0, 0x1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffa000/0x1000)=nil) (async) mmap$binder(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$usbfs(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0xc, 0x4000010, r1, 0x7fffffff) (async) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x15b9, &(0x7f0000000180)={0x0, 0x64cd, 0x200, 0x0, 0x306, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:58 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) connect$rds(r1, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) connect$rds(r1, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) 00:49:58 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:58 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xfff, 0x80) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x82000000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/247, 0xf7, 0x1, &(0x7f00000001c0)=""/148, 0x94}, &(0x7f00000002c0)=0x40) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:59 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) io_uring_setup(0x26f, &(0x7f0000000180)={0x0, 0x1037, 0x4, 0x3, 0xe}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) connect$rds(r1, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) 00:49:59 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) io_uring_setup(0x26f, &(0x7f0000000180)={0x0, 0x1037, 0x4, 0x3, 0xe}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) syz_io_uring_setup(0x2b94, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000100)) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xfff, 0x80) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x82000000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/247, 0xf7, 0x1, &(0x7f00000001c0)=""/148, 0x94}, &(0x7f00000002c0)=0x40) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_open_dev$sndpcmc(&(0x7f0000000080), 0xfff, 0x80) (async) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x82000000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/247, 0xf7, 0x1, &(0x7f00000001c0)=""/148, 0x94}, &(0x7f00000002c0)=0x40) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000001c0)=0x56) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x2) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)=0x5) syz_io_uring_setup(0x3fd5, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0xfffffffd, @mcast1, 0x6}}}, {&(0x7f00000002c0)=""/130, 0x82}, &(0x7f00000003c0), 0x61}, 0xa0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000200)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000001c0)=0x56) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x2) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)=0x5) (async) syz_io_uring_setup(0x3fd5, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0xfffffffd, @mcast1, 0x6}}}, {&(0x7f00000002c0)=""/130, 0x82}, &(0x7f00000003c0), 0x61}, 0xa0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) (async) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000200)) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$snddsp(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x5000) 00:49:59 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:59 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) io_uring_setup(0x26f, &(0x7f0000000180)={0x0, 0x1037, 0x4, 0x3, 0xe}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) io_uring_setup(0x26f, &(0x7f0000000180)={0x0, 0x1037, 0x4, 0x3, 0xe}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:59 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000001c0)=0x56) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async, rerun: 64) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x2) (async, rerun: 64) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)=0x5) (async) syz_io_uring_setup(0x3fd5, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000400)={@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0xfffffffd, @mcast1, 0x6}}}, {&(0x7f00000002c0)=""/130, 0x82}, &(0x7f00000003c0), 0x61}, 0xa0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (rerun: 32) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) (async) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000200)) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = socket(0x18, 0x4, 0xfffffffe) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000180)) 00:49:59 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:49:59 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async, rerun: 64) mmap$snddsp(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x5000) (rerun: 64) 00:49:59 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x0, 0x2, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x5812, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async, rerun: 64) mremap(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:59 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = socket(0x18, 0x4, 0xfffffffe) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) (async) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000180)) 00:49:59 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 64) syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x0, 0x2, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000100), 0x0) (rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, 0x0, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = socket(0x18, 0x4, 0xfffffffe) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000180)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) socket(0x18, 0x4, 0xfffffffe) (async) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) (async) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000180)) (async) 00:49:59 executing program 1: syz_io_uring_setup(0x617e, &(0x7f0000000000)={0x0, 0x2ebb, 0x8, 0x1, 0xfffffffd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:59 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:49:59 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$snddsp(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x5000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) mmap$snddsp(&(0x7f0000feb000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x5000) (async) 00:49:59 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fea000/0x3000)=nil, 0x3000) 00:49:59 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x0, 0x2, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 1: syz_io_uring_setup(0x617e, &(0x7f0000000000)={0x0, 0x2ebb, 0x8, 0x1, 0xfffffffd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x617e, &(0x7f0000000000)={0x0, 0x2ebb, 0x8, 0x1, 0xfffffffd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:49:59 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, 0x0, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 1: syz_io_uring_setup(0x617e, &(0x7f0000000000)={0x0, 0x2ebb, 0x8, 0x1, 0xfffffffd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:49:59 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0xd0a98000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fea000/0x3000)=nil, 0x3000) 00:49:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000012c0)=0x800, 0x2) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0xc3c9a0c82f499c63}, 0x40800) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, 0x0, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000feb000/0x4000)=nil, 0x4000) shmget(0x2, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:49:59 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0xd0a98000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0xd0a98000) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:49:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000012c0)=0x800, 0x2) (async, rerun: 64) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 64) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001300)=ANY=[@ANYBLOB="101000005304000026bd7000fddbdf25c993fd0a608d0bd5403f424c0af23beaa76c1e1f8eeaa823150a75fc74decb9ee0f60db3f9aab6e889a4d78e368f52b7fd43ffe84aa96f111d94db12ca4b611b3b524d14066e7edf6349ed2a90627ed7a6c252b034dd2a9ab0bd298a2688d6387a1159b5d153d6af77a6f64b930e5a69fbd4bcbda3a89d4519ed45ec7c8574cc2d43628a66f5628a2cc446defec017aeb49946356eb55f2e1e31d9895b5e5b0872900f5159c25b36e0fa6d30b84bd2c23dab79705b375f557aecec145fb4b53ec8f598e78e803c518f23ca70fc44764884611eb6679dc9e20e2d9264133f1c5cdf41bbebd322ab1148520e7a84f864b427327e54cc76a617748ebd4b3e072f1f9416aec353730f50333cd11348efd5ad7cd8e7ece8c1071713a9e614167fd77edea8a3dab1a801ad8b6589813b43852f3f6284c4e4ea6e9ad8232fbc48a1322933fcab2a15bf69cadada6939b769f95743e783da3f0ee0c567780cf73c2d07750a437d2f266a61bea02ad7af3275a3dfb3ea392608d34233f5ac02de72a74d2de21284946610c783e5ff4325d05f7be3a47a4a70740984430a476bba1d646216ff5aff3a1ec71f00e8795c5a3ac17382affd905ab4764c536c2497bb7376709a7a0e20765427f0daf87901144db547b9ebac0472a0e312bc25edd7e04d4c774ae35adc488cd29ce1a10934b68efbd378f8dd7bfd9daf277a2a93d5ba83f5b5b30efc944e8c96dee5a94f5fa2f0d4c79904d65f64e49c3cbdaece36c933bb446e23c81ff80f75a12bfa85dc9b193df9708ebf86be34c9455171e3f44d1b069aceef6c715f5517817c4c9171d25b52b1c7068cc80bd17b339c2f26c3eb41f1e4684ae32105a9c516ea7718aee229630c19ce8d76c915274b8efd1483d6c19e33d1bebbcbd8cd3b396ec55f4b70e1facf3ed622e518c1110d70317bb636f28e50def3e8e78cf871fb1c9b3b08d8510b34174861d0bd120383e210f9ee9408b361ae8ae6c3fa626f2acacee06b6f36cbc31ff26d0ac83e667d9ac28275fc4e376a67036d3f806bba2ce9d76aa1712782bb2caa11790e21152efa3caa7bc4c5df5595d42fbe766acd68734dedd18033f451ec136376813aa1f6929be717553ad86247d65666822e54998133f75297e8ea23e13705d64d8a7388e04757651e5705101c1b9f08d8cdae4e3db6260b26cc6fd2107506e1ff1ca15689ab6c2588811fa524d656bf04dde4c32271dca29bd32dd9a67062f6caebbedb95c1f6f657850414b51b7b18db5397628f132d54e65b85821d405994ef078983daa0ee92471c0b0f8fa7a0fcbf81fbc9776989be9dbacdce5ebeb94f6098f0ad282411464c5681319e790702fa94c135f886f0add9cd2fbb35f0bedb70fd41e2d217fbc37df4cb31d4e77553090b6336dd15a626f047beac73eb467786ec25d7914ced69fc7061a1824caafaf26b7c4fef6ebf59795420948be1289be20e2640dfe3e867dfa0aa4978ddee5cf0824fefabdb54d3c459ad79455a937b41b15714556e0bd8a0e45f35063c144d621f27552aea7b0df4192a7e08fa979ca588f52979d08be08f1c8123e10c09546d96fa86ffd80b0e165d48b9aafb35bba3a11aa172f1a7a6d657179bfc6e8f5b063f8cead51b9e9110947f74a274a13a4ca598e8d472087b70ecf554718ab1b8e9078905d06b12c1ee9acdd3161b6faccd3bb597f89d2c74ff8e9e351942dfbef925aeda2540d2f370af629bff2befd01721e050330d0ac66e77010179f1bb96a8ac36afa731636ba578c30907f6cc8e141a19d46858ccdc187f979ca05bd3d370f8e74272cd55c5bb07a479eae41c680df5ee5e60e95d53622cb6ce1f72a522fe5238f00ebf4f579eaa64ca3be6e7b79a5600eab12d505121fcc4157cb39a13e6fbdd41ebbf107cff239f8bdf18b5226f784d2292d46640d3d36ebf5337b80d0773f0687666a10b14846d6e3745838b8f0f8c8e21e7f06049efbf8f900061b8eaf83a9bd569433f8ec07af8d30245dde67ac86d322d80bce815a49b90427d7a07fbf4d69ffa7e2f47dfbf05c9786bb1d48a5d13b03c919b420e3ff2aa6ddb7489b2ffd808d440c8472d6745a57b39aaaab801449c1c372a7974c317b67b44cb23af846f646061f021f4fa1e41d385ab9e312f105095c4ab88b18853b0a8f38c0f0fe3903ef2176996e64df65b5aab336c60a610668413a11c3d3842f2f1e617fccf2be7e45096362192e7ebbedd4e161f40340b080a83cd4c69dc38b1b139f0c3fe8ddeff58544198dfa93701c32a20000cd36e8ed8290cec60c422d88a13a88debc73d91522edf95f368faa17bd39b1b2eb3cf4c5ece80acbecde64b26a1730ddefe386975bab4baf76805e9237ba269410c8f0ae041e423edf58134e750a7fc0dcff257ad3b74d513fc246da62ada0d4bc903a012d3ccd947cf115decbb4ba8f88ac7eaede0287f16a45471c9af7a171f5ec964b335d73fe936a2d75f3aad47bff8e8668c58b59170bc9758e16cdcd1dc17486ca8f28b6eb22737ff7c6357b34556849e6e1f54c1c7c5a6dc2d6a6616f8351b67393b18a5591b3bcc51397884507ed8386ee1c1fe39dd1f5ef4ee1604ad229461dc7a74f7c256efdb3c6b7628461072e42f7d3f4e0bdcd2f636cc346dc0307c4993d4979b19e84f463be39ee41491d9ae06f5f2209e7c4a2726eea69d0b4bc1876c479ed1ed541ec28f9bb66c2b108908cc32dd3cca0ec8b065bac7dbb17e0ce5b88337629e4783f84f1a5c4107c379d599ea0abf1f4a3062c7bdee0e4844d2e7e44e35e796f3649bd44835ee91b9373ae5965e5be8d45e3344dc1c9597b81a58ea4e981277503f2ada0dee09d79a579c67f812bdb9b1a3d404dff7965d649378a809d3bc8c64923652609c23b19b1d11e414a460f9103ae73c0efe99c185482e0b4994de74c69dafb06e33ae44607ac1e372e5c35d5a5fd7e88964f1f814968fb3b2ace5adbd4c83bf56df38f8a741d53461251228f26640710116fed9ce63228c22094f5dee6c10e84d35cb530e26d7a33f0703fbbff9b6ca4f84ba224dd4cc9fec0cefefc9632e78bc24c724f3367f65bb5dbe11225f26cd126903d608493aba0623a03a57ecc808bafb5fbb5ab60da8e3a4376f71b611d0782649a1cbe55160ac9397abe787c1b4f59c8302b03e7462b7e950154ac3b1faa2c9e1ad5f9f836087096b3ae60cc7a9ff91d68cffbd037b66f1025484e0490a1cf112f6cd1b8c83b7a00fcb89a4fb823f54cda9f11129a0872cd6b9b1d239652d6de8ecb53c30e5b1edeb300a6e26a387b6f724896f360e34c8aa82c937665e2b85530d0dc42ef7bab2cef90031bf1296d123eae17a23e768441da245162ef09b28bb504113eac8c0d0d83a60f2e3a3c8b45c555d6dd242e1e3d11404cb9a7b4f642e006f755f12bce5601e368b4af042d3fa8542ad61ea45cc0e28581d8fc0d2eab85412f9d9b2201501fd9c92433aaf1348ec78b8f9542e7c0d4d22943d27bc8f37a449e13f7ebd1fbfb7f2f56f5d3bda7b79ec4652cc3113f50fadb05a87a8cfc437abbb0189d6a5330c524db00ff5f236676cb63ec3d37a0297728170da425498e57587b2c98f4ad87c2f64665df8d670a3b4768d77bf59fceb6bb8704e9c117cd8f677d56ec3c91d4ca682961cffa124f022c6430cd5c08e3db203c01c4daf3ee15a84a74740fbc2f312744d345ded64aa2b260a786b809dd4359f0a2c2e887e5a232d8125d082357c698e8dbfd9576d52f8fe6c20c9e975472ef1a26276e19d8c781bd6bf5897b2b37b08affda98e7b3058d2f77f43bb7e0e74d45434ccead08a39f55a4798031892e8aefcc7b97a2c8e89741fecdb127b416f9ea941137e776a799bc249b11de91d3670c9087bcab60f4789e943797d187582417a2a7f88ae4719d85342bcfb7724876ad422ab9b05449c6619c09af8055ad964b6b3e5fd3c712172d9defe2b66caa02d7ccf969d0aa68d582ce9380100ea4da78bb0ffc4bcc20361092522a7e1be9f6155f4504c50f03bae6025840d8ccf46494c78c95e41a750a9d0af47bccd55e6b29596a84d6c425cc176aa9bc4db0bfd2f65602b2b08f12ee3c61943f524995675f3d7d52099a7faaa5a90de81556edd96fc75ac8f949d38a9eb5851d4579cebb5a79a86ff51d39aade4804221cf1812a78e020bb653a9281384c67943ec3d200aa5781ead64f472a13978e9dd19478384d6b817fa8d16564944f8263b045fe53853069671eb49ad5a7f935db5e8839985d5f808ea401621046e4a61b0096365c4154f647a0ef1f57ac3990fca24cf42162ba70c64f0183e761939d59cf6a2ed1d9f66c72ee9b4291bc6075b0b79895fdd54395ecd415488cdd6ea09f7b9f3dfbc05c68a7a3ea809562d3b3918b68e6efae9fdc31484fbac3d3737cbb71adf1cf759416b00c6ad5d8f6da32949533fd7568cd7eb4132e2ca0f8b05f573400b6f648c5e369bcebc67bb5a86733fe09051c7c38fe952f88f1fcf191d5afccefbf174b2fc16d07fb6637bb6c118df120aa0abd2f449c5e0ac5842f4247b0414e18c5fdcebef6f607fcf328bf047171722dd2a36d4009c0787212cc60afa1e5982d51043b00f854d8615c36a0de19c833250889bc9e834fd6465831ad72a1069648c48837e86831b99e81984b105dfbe7d37b9f9e13a350447e750c15b9c285d0c7d3edee42138f2798c5d62f44c51de6640975eb3e43e996350eb6478244428affa29e5d00315dc89dd71115067216d3b3559e7844e39c258805c98e936b03d3ef9431c9599c9592162c5fdd230d012f444d2aa3f3ea772e81f376d6bcf9014f36c54262275f5e7c03af6f9c307f55e8db3fa148b23f25dd11d71e17d2d54fe80f1a7bc13dc3943343e80f59d2ae7cb14453ded7c5a5778d060332afd7de535f8bc35427b41b6073d6eceed90e857101110f2c00816f7608f62964bcfe56bb06e97d0020cf49a4301327bbda58b4f8d3719d285f03fa422852f001bbbe238386fe8f82221c83908981149045df8fa287b0b1a4a8e35d92c43ac6de0fef5f21ddf87dc32178e9e2976e920c8ab39b66fe09054f6f6deae4f49c2d055893051b0c39e939df524d08746bdcf7fc22e0cc8c235cf21eeba442bfe8e4cbc72017085d2004aa94cfe5d2ab8d244f5a8b45a7f7f5424ea29f989e197977bffd36e26720011e339716d285c9b04e53ec976481974d1c18d85f0b64a6f8e11e102bbc0e93d4ab8c19e06619a66284bac1a96e4e26c7bdba47f286035ef7175b7c05544c6e70b9f7e587c2104d65fcdd75347d1250d4f480c2dbc7499d14cf9d4e203296280769d51f6a4e4b4c84abc1dbe0fc6fc02365b60eb5eec2a63d14c9918a1594b7eabcbce9cc0be5a8600e5c1349bf442d81bbbed6ce6a8e661db066e80610ddcb5dae80539fe9658fc75385d27160d15fa0abdb133b396264aa3b02ac3c9923945f0d405067b2c35640c2dde3726b384014c395d852a2234eccad8a7a9d29771540ab84ea772d5de131812fec251c0eebc8cf92be38102a41108949f92d01267fdbe32080b62eb026ef5fa704c244c8db39770961eb0068bac87685e630d9ff8139db691919acd4028e19f62492429fc1e97313c10d7c8b91bc3c135e3cbd322dcaf98703e49828197b56f47e79168380abab6debdffef0a240dcd38a6e35cc59261756b8223a434d4c845bddcd762b7157b8a2874e902b6d13a2c3a4b130d47eea9f26f3c25a12168e3c6e9c3ff6c6e91bc984729f49e198b81f811f3b46ea07599bf11ba82aa798e32d040d8493ff2f851b529e7bab235c5"], 0x1010}, 0x1, 0x0, 0x0, 0xc3c9a0c82f499c63}, 0x40800) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (rerun: 32) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:49:59 executing program 2: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100100018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x9b, 0x0, r1}, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000200)=0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x102402, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r5, 0x8921, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r5, 0xf000) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x2000001, 0xe1aefab4f2c79e75, r4, 0x17f8b000) 00:49:59 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000feb000/0x4000)=nil, 0x4000) (async, rerun: 64) shmget(0x2, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) (rerun: 64) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (rerun: 64) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0xd0a98000) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:49:59 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:49:59 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010054b38c00005e7e0018", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_setup(0x395f, &(0x7f00000001c0)={0x0, 0x9ff3, 0x0, 0x0, 0x373, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x41, &(0x7f0000000080), &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4, 0x1010, r1, 0x0) 00:50:00 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000fea000/0x3000)=nil, 0x3000) 00:50:00 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) munmap(&(0x7f0000feb000/0x4000)=nil, 0x4000) (async, rerun: 64) shmget(0x2, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:50:00 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0), &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:50:00 executing program 2: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100100018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x9b, 0x0, r1}, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000200)=0x4) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) (rerun: 64) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0x0) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x102402, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r5, 0x8921, 0x0) (async, rerun: 32) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r5, 0xf000) (async, rerun: 32) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x2000001, 0xe1aefab4f2c79e75, r4, 0x17f8b000) 00:50:00 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010054b38c00005e7e0018", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async, rerun: 64) syz_io_uring_setup(0x395f, &(0x7f00000001c0)={0x0, 0x9ff3, 0x0, 0x0, 0x373, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x41, &(0x7f0000000080), &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4, 0x1010, r1, 0x0) 00:50:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000012c0)=0x800, 0x2) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0xc3c9a0c82f499c63}, 0x40800) (async, rerun: 32) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:00 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mmap$usbmon(&(0x7f0000fe4000/0x11000)=nil, 0x11000, 0x8, 0x1010, 0xffffffffffffffff, 0x1ff) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) clock_gettime(0x4, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:00 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010054b38c00005e7e0018", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_setup(0x395f, &(0x7f00000001c0)={0x0, 0x9ff3, 0x0, 0x0, 0x373, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x41, &(0x7f0000000080), &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4, 0x1010, r1, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010054b38c00005e7e0018", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) syz_io_uring_setup(0x395f, &(0x7f00000001c0)={0x0, 0x9ff3, 0x0, 0x0, 0x373, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x41, &(0x7f0000000080), &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f00000002c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4, 0x1010, r1, 0x0) (async) 00:50:00 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0), &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, 0x0, &(0x7f0000000280)) 00:50:00 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x0, 0x200, 0x4}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe2000/0x1000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:00 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000fe4000/0x11000)=nil, 0x11000, 0x8, 0x1010, 0xffffffffffffffff, 0x1ff) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) clock_gettime(0x4, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:00 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0), &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, 0x0, &(0x7f0000000280)) 00:50:00 executing program 2: r0 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100100018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x9b, 0x0, r1}, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000200)=0x4) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0x0) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x102402, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r5, 0x8921, 0x0) (async) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r5, 0xf000) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x2000001, 0xe1aefab4f2c79e75, r4, 0x17f8b000) 00:50:00 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x0, 0x200, 0x4}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe2000/0x1000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:00 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mmap$usbmon(&(0x7f0000fe4000/0x11000)=nil, 0x11000, 0x8, 0x1010, 0xffffffffffffffff, 0x1ff) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) clock_gettime(0x4, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000fe4000/0x11000)=nil, 0x11000, 0x8, 0x1010, 0xffffffffffffffff, 0x1ff) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) clock_gettime(0x4, &(0x7f0000000080)) (async) mmap$dsp(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:00 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0), &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, 0x0, &(0x7f0000000280)) 00:50:00 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:00 executing program 5: r0 = syz_io_uring_setup(0x3fd4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) mmap$usbmon(&(0x7f0000fe1000/0x3000)=nil, 0x3000, 0x200000d, 0x4010, r1, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x6d30, &(0x7f0000000240)={0x0, 0x5f2a, 0x40, 0x1, 0x2, 0x0, r2}, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:00 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x0, 0x200, 0x4}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe2000/0x1000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:00 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x37}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140)=0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:00 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0), &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), 0x0) 00:50:00 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:00 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:00 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$USBDEVFS_RESET(r1, 0x5514) 00:50:00 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x37}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140)=0x1) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:00 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0), &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), 0x0) 00:50:00 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:00 executing program 5: r0 = syz_io_uring_setup(0x3fd4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) mmap$usbmon(&(0x7f0000fe1000/0x3000)=nil, 0x3000, 0x200000d, 0x4010, r1, 0x1ff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x6d30, &(0x7f0000000240)={0x0, 0x5f2a, 0x40, 0x1, 0x2, 0x0, r2}, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:00 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x37}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140)=0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:00 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0), &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), 0x0) 00:50:00 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x2976, &(0x7f00000002c0)={0x0, 0xd18b, 0x200, 0x1, 0x322, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000340)) syz_io_uring_setup(0x5b78, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xfffffffe}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000280), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x6f32, &(0x7f0000000180)={0x0, 0xa4db, 0x20, 0x1, 0x36e, 0x0, r1}, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:00 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$USBDEVFS_RESET(r1, 0x5514) 00:50:00 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:00 executing program 5: r0 = syz_io_uring_setup(0x3fd4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) mmap$usbmon(&(0x7f0000fe1000/0x3000)=nil, 0x3000, 0x200000d, 0x4010, r1, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x6d30, &(0x7f0000000240)={0x0, 0x5f2a, 0x40, 0x1, 0x2, 0x0, r2}, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) (async) mmap$usbmon(&(0x7f0000fe1000/0x3000)=nil, 0x3000, 0x200000d, 0x4010, r1, 0x1ff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) syz_io_uring_setup(0x6d30, &(0x7f0000000240)={0x0, 0x5f2a, 0x40, 0x1, 0x2, 0x0, r2}, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:00 executing program 1: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x7, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="01000080000000002e2f66696c653000"]) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x3ba9, &(0x7f0000000000)={0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ff3000/0x2000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:00 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010054b38c00005e7e0018", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_setup(0x395f, &(0x7f00000001c0)={0x0, 0x9ff3, 0x0, 0x0, 0x373, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x41, &(0x7f0000000080), &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x4, 0x1010, r1, 0x0) 00:50:00 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x2976, &(0x7f00000002c0)={0x0, 0xd18b, 0x200, 0x1, 0x322, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000340)) (async, rerun: 64) syz_io_uring_setup(0x5b78, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xfffffffe}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000280), 0x0) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) syz_io_uring_setup(0x6f32, &(0x7f0000000180)={0x0, 0xa4db, 0x20, 0x1, 0x36e, 0x0, r1}, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:00 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$USBDEVFS_RESET(r1, 0x5514) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) ioctl$USBDEVFS_RESET(r1, 0x5514) (async) 00:50:00 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000fe9000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:00 executing program 1: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x7, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="01000080000000002e2f66696c653000"]) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x3ba9, &(0x7f0000000000)={0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ff3000/0x2000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:00 executing program 5: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x8, &(0x7f0000000200)=0x2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000240)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:00 executing program 1: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x7, 0x1) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="01000080000000002e2f66696c653000"]) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x3ba9, &(0x7f0000000000)={0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async, rerun: 64) mremap(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ff3000/0x2000)=nil) (async, rerun: 64) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:00 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x2976, &(0x7f00000002c0)={0x0, 0xd18b, 0x200, 0x1, 0x322, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000340)) (async) syz_io_uring_setup(0x5b78, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xfffffffe}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000280), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x6f32, &(0x7f0000000180)={0x0, 0xa4db, 0x20, 0x1, 0x36e, 0x0, r1}, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:00 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x4e8d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x381}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 00:50:00 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x6abf, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x135, 0x0, r1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:00 executing program 5: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x8, &(0x7f0000000200)=0x2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000240)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:00 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x4, &(0x7f0000ff2000/0x4000)=nil, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, r0, 0x0) 00:50:01 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 5: getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x8, &(0x7f0000000200)=0x2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000240)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x8, &(0x7f0000000200)=0x2) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000240)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:01 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x6abf, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x135, 0x0, r1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) syz_io_uring_setup(0x6abf, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x135, 0x0, r1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:01 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x4, &(0x7f0000ff2000/0x4000)=nil, 0x1) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, r0, 0x0) 00:50:01 executing program 4: syz_io_uring_setup(0x3fd7, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xfffffffc, 0x804, 0x0, 0x35, 0x0, r1}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fe7000/0x1000)=nil) 00:50:01 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x33fc, &(0x7f0000000200)={0x0, 0xa990, 0x10, 0x3, 0x48}, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:01 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x4, &(0x7f0000ff2000/0x4000)=nil, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, r0, 0x0) 00:50:01 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x6abf, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x135, 0x0, r1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) syz_io_uring_setup(0x6abf, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x135, 0x0, r1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0), 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:01 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) io_uring_setup(0x2779, &(0x7f0000000100)={0x0, 0xbf1, 0x200, 0x1, 0x27e}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x7405, &(0x7f0000000180)={0x0, 0x76ab, 0x200, 0x0, 0x269}, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f00000000c0)={'gre0\x00', 0x0}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:01 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xfffffffd, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000d7f8ec9e30c563e2", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) mmap$xdp(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x9, 0x10, r1, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000001c0)) 00:50:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xfffffffc, 0x804, 0x0, 0x35, 0x0, r1}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) (async) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fe7000/0x1000)=nil) 00:50:01 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fe3000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r0, 0x10000000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x33fc, &(0x7f0000000200)={0x0, 0xa990, 0x10, 0x3, 0x48}, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:01 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0xc30, &(0x7f0000000300)={0x0, 0x37d, 0x400, 0x2, 0x398, 0x0, r1}, &(0x7f0000fe6000/0x2000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:50:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xfffffffc, 0x804, 0x0, 0x35, 0x0, r1}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fe7000/0x1000)=nil) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xfffffffc, 0x804, 0x0, 0x35, 0x0, r1}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) (async) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000fe7000/0x1000)=nil) (async) 00:50:01 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x41, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r0, 0x1}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) 00:50:01 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fe3000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r0, 0x10000000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x33fc, &(0x7f0000000200)={0x0, 0xa990, 0x10, 0x3, 0x48}, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:01 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xfffffffd, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000d7f8ec9e30c563e2", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) (async) mmap$xdp(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x9, 0x10, r1, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000001c0)) 00:50:01 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$binder(&(0x7f0000fe5000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) io_uring_setup(0x400068d7, &(0x7f0000000180)={0x0, 0x2f51, 0x10, 0x2, 0x84, 0x0, r0}) munmap(&(0x7f0000fe8000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) 00:50:01 executing program 1: socketpair(0x1e, 0x6, 0x401, &(0x7f0000000000)) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:01 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x41, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r0, 0x1}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x41, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r0, 0x1}, 0x10) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) (async) 00:50:01 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x72a7, 0x2}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) 00:50:01 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xfffffffd, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000d7f8ec9e30c563e2", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) (async) mmap$xdp(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x9, 0x10, r1, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000001c0)) 00:50:01 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000fe3000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r0, 0x10000000) (rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 1: socketpair(0x1e, 0x6, 0x401, &(0x7f0000000000)) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) socketpair(0x1e, 0x6, 0x401, &(0x7f0000000000)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:01 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0xfffffff9, 0x800, 0x40, 0x204}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x72a7, 0x2}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x72a7, 0x2}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) (async) 00:50:01 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:01 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000000, 0x30, r3, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff8000/0x3000)=nil) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r2, 0x7bb1b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xb4fc}}, './file0\x00'}) 00:50:01 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0xfffffff9, 0x800, 0x40, 0x204}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0xfffffff9, 0x800, 0x40, 0x204}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:01 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x41, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r0, 0x1}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x41, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r0, 0x1}, 0x10) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r1, 0x4) (async) 00:50:01 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x72a7, 0x2}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x72a7, 0x2}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) (async) 00:50:01 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x9) socketpair(0x23, 0x4, 0x3, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) 00:50:01 executing program 1: socketpair(0x1e, 0x6, 0x401, &(0x7f0000000000)) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) socketpair(0x1e, 0x6, 0x401, &(0x7f0000000000)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:01 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) r1 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000000, 0x30, r3, 0x0) (async) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff8000/0x3000)=nil) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r2, 0x7bb1b000) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xb4fc}}, './file0\x00'}) 00:50:01 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x84}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) shmget(0x3, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1f002000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mlock(&(0x7f0000fe1000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:01 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000000, 0x30, r3, 0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff8000/0x3000)=nil) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r2, 0x7bb1b000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xb4fc}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe3000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000000, 0x30, r3, 0x0) (async) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff8000/0x3000)=nil) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r2, 0x7bb1b000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xb4fc}}, './file0\x00'}) (async) 00:50:01 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0xfffffff9, 0x800, 0x40, 0x204}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x100000000, &(0x7f0000ff7000/0x2000)=nil, 0x1) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:01 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x84}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) shmget(0x3, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1f002000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mlock(&(0x7f0000fe1000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x84}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) shmget(0x3, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1f002000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mlock(&(0x7f0000fe1000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:01 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) getegid() mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$snddsp_status(&(0x7f0000fea000/0x3000)=nil, 0x1000, 0x2000007, 0x4010, r0, 0x82000000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 00:50:01 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x9) socketpair(0x23, 0x4, 0x3, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) 00:50:01 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x100000000, &(0x7f0000ff7000/0x2000)=nil, 0x1) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:01 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x84}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) shmget(0x3, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1f002000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mlock(&(0x7f0000fe1000/0x1000)=nil, 0x1000) (async, rerun: 64) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (rerun: 64) 00:50:01 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x1ff) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:01 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:02 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) getegid() mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$snddsp_status(&(0x7f0000fea000/0x3000)=nil, 0x1000, 0x2000007, 0x4010, r0, 0x82000000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) getegid() (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$snddsp_status(&(0x7f0000fea000/0x3000)=nil, 0x1000, 0x2000007, 0x4010, r0, 0x82000000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) (async) 00:50:02 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x100000000, 0x8000) mmap$usbfs(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x4000000, 0x80010, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000d14000326bd7000fddbdf2508000100090000000800000100000000080003000000000008000300030000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008894) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap(&(0x7f0000fea000/0x2000)=nil, 0x2000, 0x1000004, 0x1010, r0, 0x456a4000) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x1ff) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x9) socketpair(0x23, 0x4, 0x3, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x1ff) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x1ff) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:02 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x100000000, 0x8000) mmap$usbfs(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x4000000, 0x80010, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000d14000326bd7000fddbdf2508000100090000000800000100000000080003000000000008000300030000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008894) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap(&(0x7f0000fea000/0x2000)=nil, 0x2000, 0x1000004, 0x1010, r0, 0x456a4000) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x100000000, 0x8000) (async) mmap$usbfs(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x4000000, 0x80010, r1, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000d14000326bd7000fddbdf2508000100090000000800000100000000080003000000000008000300030000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008894) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap(&(0x7f0000fea000/0x2000)=nil, 0x2000, 0x1000004, 0x1010, r0, 0x456a4000) (async) 00:50:02 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x100000000, 0x8000) (rerun: 64) mmap$usbfs(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x4000000, 0x80010, r1, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000d14000326bd7000fddbdf2508000100090000000800000100000000080003000000000008000300030000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008894) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap(&(0x7f0000fea000/0x2000)=nil, 0x2000, 0x1000004, 0x1010, r0, 0x456a4000) 00:50:02 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x100000000, &(0x7f0000ff7000/0x2000)=nil, 0x1) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x100000000, &(0x7f0000ff7000/0x2000)=nil, 0x1) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:02 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) getegid() mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$snddsp_status(&(0x7f0000fea000/0x3000)=nil, 0x1000, 0x2000007, 0x4010, r0, 0x82000000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 00:50:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x9) socketpair(0x23, 0x4, 0x3, &(0x7f0000000180)) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/159, 0x9f, 0x1, &(0x7f00000002c0)=""/13, 0xd}, &(0x7f0000000340)=0x40) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="2e2f66699c73c65d"]) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/159, 0x9f, 0x1, &(0x7f00000002c0)=""/13, 0xd}, &(0x7f0000000340)=0x40) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="2e2f66699c73c65d"]) 00:50:02 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (rerun: 64) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/159, 0x9f, 0x1, &(0x7f00000002c0)=""/13, 0xd}, &(0x7f0000000340)=0x40) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="2e2f66699c73c65d"]) 00:50:02 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80000) 00:50:02 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:02 executing program 2: syz_io_uring_setup(0x43fd3, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000fdb000/0xc000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x7159, &(0x7f0000000080)={0x0, 0xdc5d}, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$snddsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000002, 0x5830, 0xffffffffffffffff, 0x5000) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000ff2000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80000) (async) 00:50:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000000180), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:02 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x9) 00:50:02 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:02 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) 00:50:02 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$qrtrtun(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000fde000/0x12000)=nil, 0x12000, 0x3000004, 0x10, r0, 0x9de3a000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000ff2000/0x1000)=nil, 0x1000) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000000c0)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:02 executing program 2: syz_io_uring_setup(0x43fd3, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000fdb000/0xc000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x7159, &(0x7f0000000080)={0x0, 0xdc5d}, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$snddsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000002, 0x5830, 0xffffffffffffffff, 0x5000) 00:50:02 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x80000) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) munlock(&(0x7f0000ff2000/0x1000)=nil, 0x1000) (async, rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000000c0)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:02 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mmap$qrtrtun(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000fde000/0x12000)=nil, 0x12000, 0x3000004, 0x10, r0, 0x9de3a000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x6b75, &(0x7f0000000180)={0x0, 0x5c3, 0x800, 0x0, 0x1d8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x150, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x4000850) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 2: syz_io_uring_setup(0x43fd3, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000fdb000/0xc000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x7159, &(0x7f0000000080)={0x0, 0xdc5d}, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$snddsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000002, 0x5830, 0xffffffffffffffff, 0x5000) 00:50:02 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000000c0)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:02 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:02 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mmap$qrtrtun(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000fde000/0x12000)=nil, 0x12000, 0x3000004, 0x10, r0, 0x9de3a000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 64) syz_io_uring_setup(0x6b75, &(0x7f0000000180)={0x0, 0x5c3, 0x800, 0x0, 0x1d8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x150, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x4000850) (rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100020018000000", @ANYRES32=r0, @ANYBLOB="feffffffffffffffff2f66696c653000"]) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x453, 0x400, 0x70bd28, 0x25dfdbfc, "61a6990e27bf8fd6d7f1a9860fd3db184ca994d8793fa3493a9b228ed9181ab821e47aca88ab96e1fc66dc56ec774900428990c51554912a785880bef821d54366d45d1bd4ddd59679dcf979c99ae56cda5052d1d143ffd465ab244ef41a2358be3195b77418d498128eaf1ced5338c0", ["", "", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x20008010}, 0x4008044) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000fe1000/0x4000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$usbmon(&(0x7f0000fe9000/0x1000)=nil, 0x1000, 0x4, 0x4010, 0xffffffffffffffff, 0x800) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 00:50:02 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x80000000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:02 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:02 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all, 0xb) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100020018000000", @ANYRES32=r0, @ANYBLOB="feffffffffffffffff2f66696c653000"]) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x453, 0x400, 0x70bd28, 0x25dfdbfc, "61a6990e27bf8fd6d7f1a9860fd3db184ca994d8793fa3493a9b228ed9181ab821e47aca88ab96e1fc66dc56ec774900428990c51554912a785880bef821d54366d45d1bd4ddd59679dcf979c99ae56cda5052d1d143ffd465ab244ef41a2358be3195b77418d498128eaf1ced5338c0", ["", "", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x20008010}, 0x4008044) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000fe1000/0x4000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$usbmon(&(0x7f0000fe9000/0x1000)=nil, 0x1000, 0x4, 0x4010, 0xffffffffffffffff, 0x800) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 00:50:02 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x6b75, &(0x7f0000000180)={0x0, 0x5c3, 0x800, 0x0, 0x1d8, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x150, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x4000850) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)={0x1, 'r'}, 0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe8000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100020018000000", @ANYRES32=r0, @ANYBLOB="feffffffffffffffff2f66696c653000"]) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x453, 0x400, 0x70bd28, 0x25dfdbfc, "61a6990e27bf8fd6d7f1a9860fd3db184ca994d8793fa3493a9b228ed9181ab821e47aca88ab96e1fc66dc56ec774900428990c51554912a785880bef821d54366d45d1bd4ddd59679dcf979c99ae56cda5052d1d143ffd465ab244ef41a2358be3195b77418d498128eaf1ced5338c0", ["", "", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x20008010}, 0x4008044) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000fe1000/0x4000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap$usbmon(&(0x7f0000fe9000/0x1000)=nil, 0x1000, 0x4, 0x4010, 0xffffffffffffffff, 0x800) (async) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 00:50:02 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async, rerun: 64) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all, 0xb) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:02 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x8, 0x8010, r0, 0x0) 00:50:03 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x80000000) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async, rerun: 32) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 32) 00:50:03 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)={0x1, 'r'}, 0x2) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe8000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x8, 0x8010, r0, 0x0) 00:50:03 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@unlock_all, 0xb) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (rerun: 64) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000300f1ffb6999cb003", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x464, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40885}, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:03 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x8, 0x8010, r0, 0x0) 00:50:03 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000300f1ffb6999cb003", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) (async, rerun: 32) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x464, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40885}, 0x0) (async, rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:03 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)={0x1, 'r'}, 0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe8000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)={0x1, 'r'}, 0x2) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fe8000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:03 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 3: syz_io_uring_setup(0x3ff7, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x80000000) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000300f1ffb6999cb003", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) (async) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x464, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40885}, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:03 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 3: syz_io_uring_setup(0x3ff7, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 0: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)=0x1) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000000514010029bd7000fbdbdf25080001000200000008000300045973ff218b12e776318a000000080001000108000008000300000000000800010002000000080003030000000000080001000000000000694c0f000300010000000003000300"/138], 0x80}}, 0x4008080) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) mmap(&(0x7f0000fe0000/0x2000)=nil, 0x2000, 0x2800009, 0x20010, r0, 0x99826000) 00:50:03 executing program 3: syz_io_uring_setup(0x3ff7, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3ff7, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:03 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:03 executing program 0: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)=0x1) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 0: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)=0x1) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)=0x1) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) mmap(&(0x7f0000fe0000/0x2000)=nil, 0x2000, 0x2800009, 0x20010, r0, 0x99826000) 00:50:03 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:03 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x400000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmget(0x1, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) 00:50:03 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000000514010029bd7000fbdbdf25080001000200000008000300045973ff218b12e776318a000000080001000108000008000300000000000800010002000000080003030000000000080001000000000000694c0f000300010000000003000300"/138], 0x80}}, 0x4008080) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) mmap(&(0x7f0000fe0000/0x2000)=nil, 0x2000, 0x2800009, 0x20010, r0, 0x99826000) 00:50:03 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x5100, &(0x7f0000000500)={0x0, 0xaab8, 0x200, 0x2, 0x1ab, 0x0, r0}, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) munmap(&(0x7f0000feb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000031400042dbd7000fddbdf250900020073797a3100000000080041007278650014083300697036746e6c300000000000000000000900020073797a3200000000080041007369770014003300766574000000010000000100000000000900020073797a32000000000800410073697700140033006d6163767461703001000000000000000900020073797a300000000008004100727865001400330076657468305f746f5f627269646765000900020073797a300000000008004100736977001400330073797a6b616c6c6572300000000000000900020073797a300000000008004100727865001400330069703665727370616e300000000000000900020073797a3100000000080041007278650014003300766574683100000000000000000000000900020073797a30000000000800410072786500140033007465616d5f736c6176655f3100000000"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x3000c055) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000e40)=ANY=[@ANYBLOB="180000001214000126bd7000fddbdf2508004f0002000000c651953ce83c92210e1d6dea8ede915dd61a6df334072c7213f34eb6e3c240f2ee92231e8f8ca57f7d8784f03bff27331201ee4a18716067a757d04d1f7221f9b695d5890934f9044984594015"], 0x18}, 0x1, 0x0, 0x0, 0x48141}, 0x4040000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001214100029bdab2c617d1dd55585aa482727d759f41c9ac9336439c3271b000000ff7f080001000200000008000100000000000800150000000000080003000300000008004f0004000000080015000300004008004b001300000032871990c3121c6cb62a76edf62c16bcd966967745bb411b2a8b61a5e9a72cfe703f"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x62f08d841a99516b) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x140e, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) mmap(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x1000008, 0x4010, r3, 0xbb0f7000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x18, 0x140b, 0x200, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x7f96, &(0x7f0000000c40)={0x0, 0xc326, 0x20, 0x0, 0xbf}, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000cc0), &(0x7f0000000d00)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) mlock(&(0x7f0000fec000/0x4000)=nil, 0x4000) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0x781b3000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r5, 0x8921, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000b80)={@vsock={0x28, 0x0, 0x0, @local}, {&(0x7f0000000a80)=""/199, 0xc7}, &(0x7f0000000940)}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000d40)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000100000000002e2f66696c653000d8ae18ca0abf96f27bd373d1e631cc073d1f01dd0068c40922aa4ce945d46afae5423a18b6262eeeae5354a7b88b57aac03913abe97228a9da2303e3ad344849ce79e2e02b6956234bab073eb4dcadefb8a93e678dc675af5f388823743d7fff62af02cd393472db27f6dcbf35f3bdbfb611be13c991b784cb95bc10ba3a160f02d7dd8269f700000000"]) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000a00)=""/106, &(0x7f0000000e00)=0x6a) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f00000009c0)={'tunl0\x00'}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000980)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 00:50:03 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:03 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x400000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmget(0x1, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x400000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) shmget(0x1, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) (async) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:03 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x5100, &(0x7f0000000500)={0x0, 0xaab8, 0x200, 0x2, 0x1ab, 0x0, r0}, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) (async) munmap(&(0x7f0000feb000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000031400042dbd7000fddbdf250900020073797a3100000000080041007278650014083300697036746e6c300000000000000000000900020073797a3200000000080041007369770014003300766574000000010000000100000000000900020073797a32000000000800410073697700140033006d6163767461703001000000000000000900020073797a300000000008004100727865001400330076657468305f746f5f627269646765000900020073797a300000000008004100736977001400330073797a6b616c6c6572300000000000000900020073797a300000000008004100727865001400330069703665727370616e300000000000000900020073797a3100000000080041007278650014003300766574683100000000000000000000000900020073797a30000000000800410072786500140033007465616d5f736c6176655f3100000000"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x3000c055) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000e40)=ANY=[@ANYBLOB="180000001214000126bd7000fddbdf2508004f0002000000c651953ce83c92210e1d6dea8ede915dd61a6df334072c7213f34eb6e3c240f2ee92231e8f8ca57f7d8784f03bff27331201ee4a18716067a757d04d1f7221f9b695d5890934f9044984594015"], 0x18}, 0x1, 0x0, 0x0, 0x48141}, 0x4040000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001214100029bdab2c617d1dd55585aa482727d759f41c9ac9336439c3271b000000ff7f080001000200000008000100000000000800150000000000080003000300000008004f0004000000080015000300004008004b001300000032871990c3121c6cb62a76edf62c16bcd966967745bb411b2a8b61a5e9a72cfe703f"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x62f08d841a99516b) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x140e, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) (async, rerun: 64) mmap(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x1000008, 0x4010, r3, 0xbb0f7000) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x18, 0x140b, 0x200, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async, rerun: 64) syz_io_uring_setup(0x7f96, &(0x7f0000000c40)={0x0, 0xc326, 0x20, 0x0, 0xbf}, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000cc0), &(0x7f0000000d00)) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) mlock(&(0x7f0000fec000/0x4000)=nil, 0x4000) (async, rerun: 64) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) (async) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0x781b3000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r5, 0x8921, 0x0) (async, rerun: 32) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000b80)={@vsock={0x28, 0x0, 0x0, @local}, {&(0x7f0000000a80)=""/199, 0xc7}, &(0x7f0000000940)}, 0xa0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000d40)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000100000000002e2f66696c653000d8ae18ca0abf96f27bd373d1e631cc073d1f01dd0068c40922aa4ce945d46afae5423a18b6262eeeae5354a7b88b57aac03913abe97228a9da2303e3ad344849ce79e2e02b6956234bab073eb4dcadefb8a93e678dc675af5f388823743d7fff62af02cd393472db27f6dcbf35f3bdbfb611be13c991b784cb95bc10ba3a160f02d7dd8269f700000000"]) (async) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000a00)=""/106, &(0x7f0000000e00)=0x6a) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f00000009c0)={'tunl0\x00'}) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000980)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 00:50:03 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000000514010029bd7000fbdbdf25080001000200000008000300045973ff218b12e776318a000000080001000108000008000300000000000800010002000000080003030000000000080001000000000000694c0f000300010000000003000300"/138], 0x80}}, 0x4008080) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="800000000514010029bd7000fbdbdf25080001000200000008000300045973ff218b12e776318a000000080001000108000008000300000000000800010002000000080003030000000000080001000000000000694c0f000300010000000003000300"/138], 0x80}}, 0x4008080) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:03 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x890}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r0, 0x0) 00:50:03 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x400000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) (rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmget(0x1, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) 00:50:03 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:03 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x890}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r0, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x890}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r0, 0x0) (async) 00:50:03 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x5100, &(0x7f0000000500)={0x0, 0xaab8, 0x200, 0x2, 0x1ab, 0x0, r0}, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) (async) munmap(&(0x7f0000feb000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000031400042dbd7000fddbdf250900020073797a3100000000080041007278650014083300697036746e6c300000000000000000000900020073797a3200000000080041007369770014003300766574000000010000000100000000000900020073797a32000000000800410073697700140033006d6163767461703001000000000000000900020073797a300000000008004100727865001400330076657468305f746f5f627269646765000900020073797a300000000008004100736977001400330073797a6b616c6c6572300000000000000900020073797a300000000008004100727865001400330069703665727370616e300000000000000900020073797a3100000000080041007278650014003300766574683100000000000000000000000900020073797a30000000000800410072786500140033007465616d5f736c6176655f3100000000"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x3000c055) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000e40)=ANY=[@ANYBLOB="180000001214000126bd7000fddbdf2508004f0002000000c651953ce83c92210e1d6dea8ede915dd61a6df334072c7213f34eb6e3c240f2ee92231e8f8ca57f7d8784f03bff27331201ee4a18716067a757d04d1f7221f9b695d5890934f9044984594015"], 0x18}, 0x1, 0x0, 0x0, 0x48141}, 0x4040000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001214100029bdab2c617d1dd55585aa482727d759f41c9ac9336439c3271b000000ff7f080001000200000008000100000000000800150000000000080003000300000008004f0004000000080015000300004008004b001300000032871990c3121c6cb62a76edf62c16bcd966967745bb411b2a8b61a5e9a72cfe703f"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x62f08d841a99516b) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x140e, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) (async) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) mmap(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x1000008, 0x4010, r3, 0xbb0f7000) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x18, 0x140b, 0x200, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) syz_io_uring_setup(0x7f96, &(0x7f0000000c40)={0x0, 0xc326, 0x20, 0x0, 0xbf}, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000cc0), &(0x7f0000000d00)) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) mlock(&(0x7f0000fec000/0x4000)=nil, 0x4000) (async) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) (async) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0x781b3000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r5, 0x8921, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000b80)={@vsock={0x28, 0x0, 0x0, @local}, {&(0x7f0000000a80)=""/199, 0xc7}, &(0x7f0000000940)}, 0xa0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000d40)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000100000000002e2f66696c653000d8ae18ca0abf96f27bd373d1e631cc073d1f01dd0068c40922aa4ce945d46afae5423a18b6262eeeae5354a7b88b57aac03913abe97228a9da2303e3ad344849ce79e2e02b6956234bab073eb4dcadefb8a93e678dc675af5f388823743d7fff62af02cd393472db27f6dcbf35f3bdbfb611be13c991b784cb95bc10ba3a160f02d7dd8269f700000000"]) (async) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000a00)=""/106, &(0x7f0000000e00)=0x6a) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f00000009c0)={'tunl0\x00'}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000980)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 00:50:03 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000b5aea32bced90ad131e4a1a5b66b16a71dd57b0964f1359f106139e7caa91b22ba3c94acabaa2d79a9ebe4f297d0b1883bb6c041cf0ee2685a2ff73eeaac94bccb3b83ac72cc12f7f2b5b675bb57519eaf91a6ec65cefda61e6090fb6233174b489bfcab33af977fa89eb9b9bf9e6bfd490e781b49f3ee0a5f6c0e76c5e3bb2dba73c31f5ba258247228ac4c0303bba6e296ac0959c17df61cddf29ff2516e65af36b7e2f4a5ba5c267e666a48e06ef82b5422562ee9f4b5f0b87aeba6680d5537ff07fb0d87c90f33d07ac4aac45f8429d7c6596184f9559e69f8b7431c7db69aa7ca74f70efe", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x2829, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$qrtrtun(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000008, 0x10, 0xffffffffffffffff, 0x6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) semop(0xffffffffffffffff, &(0x7f00000004c0)=[{0x1}, {0x1, 0x7fff, 0x800}], 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$AUDIT_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008840}, 0x4000000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r6, 0x8921, 0x0) ioctl$IMCLEAR_L2(r6, 0x80044946, &(0x7f00000001c0)=0xa06f) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4000030, r0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:03 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mmap$usbmon(&(0x7f0000fe3000/0xb000)=nil, 0xb000, 0x1000001, 0x40010, 0xffffffffffffffff, 0x5) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0xaa}, {0x2, 0x6970}], 0x3) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munlock(&(0x7f0000feb000/0x3000)=nil, 0x3000) 00:50:03 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x890}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r0, 0x0) 00:50:03 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000b5aea32bced90ad131e4a1a5b66b16a71dd57b0964f1359f106139e7caa91b22ba3c94acabaa2d79a9ebe4f297d0b1883bb6c041cf0ee2685a2ff73eeaac94bccb3b83ac72cc12f7f2b5b675bb57519eaf91a6ec65cefda61e6090fb6233174b489bfcab33af977fa89eb9b9bf9e6bfd490e781b49f3ee0a5f6c0e76c5e3bb2dba73c31f5ba258247228ac4c0303bba6e296ac0959c17df61cddf29ff2516e65af36b7e2f4a5ba5c267e666a48e06ef82b5422562ee9f4b5f0b87aeba6680d5537ff07fb0d87c90f33d07ac4aac45f8429d7c6596184f9559e69f8b7431c7db69aa7ca74f70efe", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x2829, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$qrtrtun(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000008, 0x10, 0xffffffffffffffff, 0x6) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) semop(0xffffffffffffffff, &(0x7f00000004c0)=[{0x1}, {0x1, 0x7fff, 0x800}], 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$AUDIT_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008840}, 0x4000000) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r6, 0x8921, 0x0) (async) ioctl$IMCLEAR_L2(r6, 0x80044946, &(0x7f00000001c0)=0xa06f) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:03 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4000030, r0, 0x0) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:03 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:03 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0xaa}, {0x2, 0x6970}], 0x3) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munlock(&(0x7f0000feb000/0x3000)=nil, 0x3000) semget$private(0x0, 0x4, 0x0) (async) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0xaa}, {0x2, 0x6970}], 0x3) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) munlock(&(0x7f0000feb000/0x3000)=nil, 0x3000) (async) 00:50:04 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4000030, r0, 0x0) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:04 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:04 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000000000000b5aea32bced90ad131e4a1a5b66b16a71dd57b0964f1359f106139e7caa91b22ba3c94acabaa2d79a9ebe4f297d0b1883bb6c041cf0ee2685a2ff73eeaac94bccb3b83ac72cc12f7f2b5b675bb57519eaf91a6ec65cefda61e6090fb6233174b489bfcab33af977fa89eb9b9bf9e6bfd490e781b49f3ee0a5f6c0e76c5e3bb2dba73c31f5ba258247228ac4c0303bba6e296ac0959c17df61cddf29ff2516e65af36b7e2f4a5ba5c267e666a48e06ef82b5422562ee9f4b5f0b87aeba6680d5537ff07fb0d87c90f33d07ac4aac45f8429d7c6596184f9559e69f8b7431c7db69aa7ca74f70efe", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) syz_io_uring_setup(0x2829, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) mmap$qrtrtun(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000008, 0x10, 0xffffffffffffffff, 0x6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) semop(0xffffffffffffffff, &(0x7f00000004c0)=[{0x1}, {0x1, 0x7fff, 0x800}], 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$AUDIT_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008840}, 0x4000000) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r6, 0x8921, 0x0) (async, rerun: 64) ioctl$IMCLEAR_L2(r6, 0x80044946, &(0x7f00000001c0)=0xa06f) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:04 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mmap$usbmon(&(0x7f0000fe3000/0xb000)=nil, 0xb000, 0x1000001, 0x40010, 0xffffffffffffffff, 0x5) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000fe3000/0xb000)=nil, 0xb000, 0x1000001, 0x40010, 0xffffffffffffffff, 0x5) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:04 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0xaa}, {0x2, 0x6970}], 0x3) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munlock(&(0x7f0000feb000/0x3000)=nil, 0x3000) semget$private(0x0, 0x4, 0x0) (async) semop(r0, &(0x7f0000000140)=[{}, {0x2, 0xaa}, {0x2, 0x6970}], 0x3) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) munlock(&(0x7f0000feb000/0x3000)=nil, 0x3000) (async) 00:50:04 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) io_uring_setup(0x88d, &(0x7f0000000080)={0x0, 0x24bf, 0x200, 0x1, 0x101, 0x0, r0}) 00:50:04 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:04 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:04 executing program 3: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180)=0x2, 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) inotify_init1(0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x464, 0x400, 0x270bd28, 0x25dfdc01, "9cf53f000e8698e41aa04a248170953f3e3b", ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000094) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x1013, r0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:04 executing program 0: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x1403, 0x20, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:04 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) io_uring_setup(0x88d, &(0x7f0000000080)={0x0, 0x24bf, 0x200, 0x1, 0x101, 0x0, r0}) 00:50:04 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000fe3000/0xb000)=nil, 0xb000, 0x1000001, 0x40010, 0xffffffffffffffff, 0x5) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (rerun: 64) 00:50:04 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:04 executing program 3: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180)=0x2, 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) inotify_init1(0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x464, 0x400, 0x270bd28, 0x25dfdc01, "9cf53f000e8698e41aa04a248170953f3e3b", ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000094) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x1013, r0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180)=0x2, 0x4) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) inotify_init1(0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x464, 0x400, 0x270bd28, 0x25dfdc01, "9cf53f000e8698e41aa04a248170953f3e3b", ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000094) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x1013, r0, 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:04 executing program 0: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x1403, 0x20, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:04 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) io_uring_setup(0x88d, &(0x7f0000000080)={0x0, 0x24bf, 0x200, 0x1, 0x101, 0x0, r0}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) io_uring_setup(0x88d, &(0x7f0000000080)={0x0, 0x24bf, 0x200, 0x1, 0x101, 0x0, r0}) (async) 00:50:05 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x768f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 32) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 1: r0 = syz_io_uring_setup(0x66b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x28e}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x674f, &(0x7f0000000080)={0x0, 0x409e, 0x4, 0xfffff001, 0x12e, 0x0, r1}, &(0x7f0000fe5000/0x3000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x423f80, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000fde000/0x2000)=nil, 0x2000}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x2, 0xf1011, r2, 0x10000000) 00:50:05 executing program 0: sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x1403, 0x20, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x1403, 0x20, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:05 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) io_uring_setup(0x71a7, &(0x7f0000000180)={0x0, 0xdd2d, 0x10, 0x3, 0x152}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x7ba9, 0x20, 0x0, 0x400}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000100), &(0x7f0000000200), 0x3ff, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 1: r0 = syz_io_uring_setup(0x66b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x28e}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x674f, &(0x7f0000000080)={0x0, 0x409e, 0x4, 0xfffff001, 0x12e, 0x0, r1}, &(0x7f0000fe5000/0x3000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x423f80, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000fde000/0x2000)=nil, 0x2000}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x2, 0xf1011, r2, 0x10000000) syz_io_uring_setup(0x66b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x28e}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0x674f, &(0x7f0000000080)={0x0, 0x409e, 0x4, 0xfffff001, 0x12e, 0x0, r1}, &(0x7f0000fe5000/0x3000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x423f80, 0x0) (async) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000fde000/0x2000)=nil, 0x2000}) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap$IORING_OFF_SQES(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x2, 0xf1011, r2, 0x10000000) (async) 00:50:05 executing program 3: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180)=0x2, 0x4) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) inotify_init1(0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x464, 0x400, 0x270bd28, 0x25dfdc01, "9cf53f000e8698e41aa04a248170953f3e3b", ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000094) (async, rerun: 64) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x1013, r0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_io_uring_setup(0x586f, &(0x7f0000000000)={0x0, 0xb63e, 0x100}, &(0x7f0000fe2000/0x1000)=nil, &(0x7f0000fe5000/0x3000)=nil, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f00000011c0)=""/86, 0x56}, &(0x7f0000001280)=0x40) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000001300), &(0x7f0000001340)=0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async, rerun: 32) syz_io_uring_setup(0x586f, &(0x7f0000000000)={0x0, 0xb63e, 0x100}, &(0x7f0000fe2000/0x1000)=nil, &(0x7f0000fe5000/0x3000)=nil, &(0x7f0000000180), 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:05 executing program 1: r0 = syz_io_uring_setup(0x66b6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x28e}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_io_uring_setup(0x674f, &(0x7f0000000080)={0x0, 0x409e, 0x4, 0xfffff001, 0x12e, 0x0, r1}, &(0x7f0000fe5000/0x3000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x423f80, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async, rerun: 32) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000fde000/0x2000)=nil, 0x2000}) (async, rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x2, 0xf1011, r2, 0x10000000) 00:50:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r1 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f00000011c0)=""/86, 0x56}, &(0x7f0000001280)=0x40) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000001300), &(0x7f0000001340)=0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) io_uring_setup(0x71a7, &(0x7f0000000180)={0x0, 0xdd2d, 0x10, 0x3, 0x152}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x7ba9, 0x20, 0x0, 0x400}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) get_mempolicy(&(0x7f0000000100), &(0x7f0000000200), 0x3ff, &(0x7f0000ffc000/0x4000)=nil, 0x0) 00:50:05 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_io_uring_setup(0x586f, &(0x7f0000000000)={0x0, 0xb63e, 0x100}, &(0x7f0000fe2000/0x1000)=nil, &(0x7f0000fe5000/0x3000)=nil, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) syz_io_uring_setup(0x586f, &(0x7f0000000000)={0x0, 0xb63e, 0x100}, &(0x7f0000fe2000/0x1000)=nil, &(0x7f0000fe5000/0x3000)=nil, &(0x7f0000000180), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f00000011c0)=""/86, 0x56}, &(0x7f0000001280)=0x40) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000001300), &(0x7f0000001340)=0x4) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20c}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0xcad, &(0x7f0000fe2000/0x1000)=nil, 0x3) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000fe5000/0x2000)=nil, 0x2000}) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20c}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0xcad, &(0x7f0000fe2000/0x1000)=nil, 0x3) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000fe5000/0x2000)=nil, 0x2000}) 00:50:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0x93, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:05 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) io_uring_setup(0x71a7, &(0x7f0000000180)={0x0, 0xdd2d, 0x10, 0x3, 0x152}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x7ba9, 0x20, 0x0, 0x400}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000100), &(0x7f0000000200), 0x3ff, &(0x7f0000ffc000/0x4000)=nil, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) io_uring_setup(0x71a7, &(0x7f0000000180)={0x0, 0xdd2d, 0x10, 0x3, 0x152}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x7ba9, 0x20, 0x0, 0x400}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) get_mempolicy(&(0x7f0000000100), &(0x7f0000000200), 0x3ff, &(0x7f0000ffc000/0x4000)=nil, 0x0) (async) 00:50:05 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x140d, 0x2, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:05 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0x93, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:05 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20c}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0xcad, &(0x7f0000fe2000/0x1000)=nil, 0x3) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000fe5000/0x2000)=nil, 0x2000}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20c}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0xcad, &(0x7f0000fe2000/0x1000)=nil, 0x3) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000fe5000/0x2000)=nil, 0x2000}) (async) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0x93, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:05 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x140d, 0x2, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ff8000/0x3000)=nil) (rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x115080, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe0000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000100)) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x100, &(0x7f0000fe1000/0x1000)=nil, 0x6) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:05 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x140d, 0x2, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:05 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x115080, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe0000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) (async) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000100)) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x100, &(0x7f0000fe1000/0x1000)=nil, 0x6) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 00:50:05 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:05 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x115080, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe0000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000100)) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x100, &(0x7f0000fe1000/0x1000)=nil, 0x6) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x115080, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe0000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) (async) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000100)) (async) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x100, &(0x7f0000fe1000/0x1000)=nil, 0x6) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:05 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:05 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000feb000/0x4000)=nil, 0x4000}}) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:06 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:06 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) (async) 00:50:06 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x3, 0x800, 0x0, 0xfffffffc}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x2b48, &(0x7f00000001c0)={0x0, 0xe0dc, 0x20, 0x3, 0x334}, &(0x7f0000fe7000/0xc000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000fe9000/0x2000)=nil) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:06 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000feb000/0x4000)=nil, 0x4000}}) 00:50:06 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) (async) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:06 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x2, 0x100000da}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5, 0x2010, r0, 0x82000000) 00:50:06 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000feb000/0x4000)=nil, 0x4000}}) 00:50:06 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x3, 0x800, 0x0, 0xfffffffc}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x2b48, &(0x7f00000001c0)={0x0, 0xe0dc, 0x20, 0x3, 0x334}, &(0x7f0000fe7000/0xc000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000fe9000/0x2000)=nil) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x3, 0x800, 0x0, 0xfffffffc}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0x2b48, &(0x7f00000001c0)={0x0, 0xe0dc, 0x20, 0x3, 0x334}, &(0x7f0000fe7000/0xc000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000fe9000/0x2000)=nil) (async) 00:50:06 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r0, 0x100000000) syz_io_uring_setup(0x768b, &(0x7f0000000200), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) socket(0x23, 0x80000, 0x0) 00:50:06 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x2, 0x100000da}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5, 0x2010, r0, 0x82000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x2, 0x100000da}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$snddsp_status(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5, 0x2010, r0, 0x82000000) (async) 00:50:06 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe9000/0x2000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:06 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$binder(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xb4a) 00:50:06 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x2, 0x100000da}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5, 0x2010, r0, 0x82000000) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:06 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x3, 0x800, 0x0, 0xfffffffc}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f00000002c0), 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0x2b48, &(0x7f00000001c0)={0x0, 0xe0dc, 0x20, 0x3, 0x334}, &(0x7f0000fe7000/0xc000)=nil, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000fe9000/0x2000)=nil) 00:50:06 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r0, 0x100000000) (async, rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000200), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 64) socket(0x23, 0x80000, 0x0) 00:50:06 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$binder(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xb4a) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$binder(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xb4a) (async) 00:50:06 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x2d7c, 0x800, 0x0, 0x85}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:06 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe9000/0x2000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x2d7c, 0x800, 0x0, 0x85}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x2d7c, 0x800, 0x0, 0x85}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x8000000000000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$binder(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xb4a) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$binder(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xb4a) (async) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) 00:50:06 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x2d7c, 0x800, 0x0, 0x85}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x2) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x8000000000000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 1: syz_io_uring_setup(0x75e3, &(0x7f0000000080)={0x0, 0xc823, 0x8, 0x28002, 0x6}, &(0x7f0000fe2000/0x3000)=nil, &(0x7f0000fe3000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:06 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r0, 0x100000000) syz_io_uring_setup(0x768b, &(0x7f0000000200), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) socket(0x23, 0x80000, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r0, 0x100000000) (async) syz_io_uring_setup(0x768b, &(0x7f0000000200), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) socket(0x23, 0x80000, 0x0) (async) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) 00:50:06 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe9000/0x2000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fea000/0x1000)=nil, 0x1000}, 0x1}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x2) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x8000000000000000, &(0x7f0000ffa000/0x4000)=nil, 0x2) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 1: syz_io_uring_setup(0x75e3, &(0x7f0000000080)={0x0, 0xc823, 0x8, 0x28002, 0x6}, &(0x7f0000fe2000/0x3000)=nil, &(0x7f0000fe3000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x75e3, &(0x7f0000000080)={0x0, 0xc823, 0x8, 0x28002, 0x6}, &(0x7f0000fe2000/0x3000)=nil, &(0x7f0000fe3000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:06 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fea000/0x1000)=nil, 0x1000}, 0x1}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fea000/0x1000)=nil, 0x1000}, 0x1}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) 00:50:06 executing program 1: syz_io_uring_setup(0x75e3, &(0x7f0000000080)={0x0, 0xc823, 0x8, 0x28002, 0x6}, &(0x7f0000fe2000/0x3000)=nil, &(0x7f0000fe3000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:06 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1000, 0x40000) mmap$usbfs(&(0x7f0000fe4000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/245, 0xf5, 0x1, &(0x7f0000000280)=""/163, 0xa3}, &(0x7f0000000380)=0x40) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x3000000, 0x20010, r0, 0x10000000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000003c0)={&(0x7f0000fef000/0x4000)=nil, 0x4000}) 00:50:06 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) syz_io_uring_setup(0x1cb0, &(0x7f0000000200)={0x0, 0xc1df, 0x80, 0x0, 0x10d, 0x0, r0}, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x0) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:06 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x64b5, 0x4}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:06 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fea000/0x1000)=nil, 0x1000}, 0x1}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000feb000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fea000/0x1000)=nil, 0x1000}, 0x1}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:06 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1000, 0x40000) mmap$usbfs(&(0x7f0000fe4000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/245, 0xf5, 0x1, &(0x7f0000000280)=""/163, 0xa3}, &(0x7f0000000380)=0x40) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x3000000, 0x20010, r0, 0x10000000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000003c0)={&(0x7f0000fef000/0x4000)=nil, 0x4000}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_open_dev$usbfs(&(0x7f0000000400), 0x1000, 0x40000) (async) mmap$usbfs(&(0x7f0000fe4000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x2) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/245, 0xf5, 0x1, &(0x7f0000000280)=""/163, 0xa3}, &(0x7f0000000380)=0x40) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x3000000, 0x20010, r0, 0x10000000) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000003c0)={&(0x7f0000fef000/0x4000)=nil, 0x4000}) (async) 00:50:06 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:06 executing program 1: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$usbmon(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x4, 0x40010, 0xffffffffffffffff, 0x100000000) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fe7000/0x1000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:06 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) (async) syz_io_uring_setup(0x1cb0, &(0x7f0000000200)={0x0, 0xc1df, 0x80, 0x0, 0x10d, 0x0, r0}, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x0) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:06 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000100)={0x0, 0x7a48, 0x12e, 0x0, 0x250}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:50:06 executing program 1: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$usbmon(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x4, 0x40010, 0xffffffffffffffff, 0x100000000) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fe7000/0x1000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) mmap$usbmon(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x4, 0x40010, 0xffffffffffffffff, 0x100000000) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fe7000/0x1000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:06 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x64b5, 0x4}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1000, 0x40000) mmap$usbfs(&(0x7f0000fe4000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/245, 0xf5, 0x1, &(0x7f0000000280)=""/163, 0xa3}, &(0x7f0000000380)=0x40) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000480)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x3000000, 0x20010, r0, 0x10000000) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000003c0)={&(0x7f0000fef000/0x4000)=nil, 0x4000}) 00:50:07 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000100)={0x0, 0x7a48, 0x12e, 0x0, 0x250}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:50:07 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) 00:50:07 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) syz_io_uring_setup(0x1cb0, &(0x7f0000000200)={0x0, 0xc1df, 0x80, 0x0, 0x10d, 0x0, r0}, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x0) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) (async) syz_io_uring_setup(0x1cb0, &(0x7f0000000200)={0x0, 0xc1df, 0x80, 0x0, 0x10d, 0x0, r0}, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x0) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:07 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000100)={0x0, 0x7a48, 0x12e, 0x0, 0x250}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000100)={0x0, 0x7a48, 0x12e, 0x0, 0x250}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) 00:50:07 executing program 1: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$usbmon(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x4, 0x40010, 0xffffffffffffffff, 0x100000000) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fe7000/0x1000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) mmap$usbmon(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x4, 0x40010, 0xffffffffffffffff, 0x100000000) (async) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fe7000/0x1000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:07 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ff5000/0x3000)=nil, 0x3000}, 0x1}) 00:50:07 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x400000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) shmget(0x1, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmget(0x1, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) 00:50:07 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x64b5, 0x4}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180)={0x0, 0x64b5, 0x4}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:07 executing program 0: munlock(&(0x7f0000ff2000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x8}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f00000001c0)) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0x6) syz_io_uring_setup(0x6c8f, &(0x7f0000000080)={0x0, 0xfce5}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x43c, 0x3f3, 0x300, 0x70bd27, 0x25dfdbfd, {0x10, 0x1, 0x1f, [0x5, 0x6, 0x4d, 0x3, 0x10001, 0x1, 0x5, 0x4, 0x5, 0x81, 0x30e, 0x7fff, 0x4, 0x80000000, 0x8, 0x9, 0x5d05, 0x1000, 0x6, 0x9419, 0x1, 0x80000000, 0xe32, 0x33c71d6b, 0x4, 0x100, 0x0, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x6, 0x7, 0x3, 0x807, 0xfff, 0x1, 0x7fff, 0x8, 0x5, 0x9, 0x8, 0x401, 0x100, 0x50, 0x8000, 0x4, 0x7ff, 0x7, 0x8, 0x0, 0x1, 0x2a, 0x4, 0x4, 0x8, 0x7, 0xfffffffc, 0x1, 0x800, 0x2e, 0xffffffde, 0x8387], [0x5, 0x4, 0x8, 0x7, 0x8, 0x8, 0x9, 0x3, 0x9, 0x3, 0x1, 0x7f, 0x3, 0x6, 0x4, 0x200, 0x400, 0x6, 0x20, 0x80, 0xfffffff8, 0x200, 0xfffff290, 0x5, 0x0, 0x80, 0x3, 0x7449, 0xfffffff7, 0x3, 0xff, 0x2, 0x0, 0xb3, 0xffffffff, 0x1ff, 0x4, 0x80, 0xfffffffb, 0xffffffff, 0x5, 0x7, 0x4, 0x3, 0x7, 0x6, 0x9c2, 0x1000, 0xbe, 0x2, 0x0, 0xfffffffc, 0x7, 0x7, 0x6, 0x9, 0xfffffffb, 0x6, 0xfffffffa, 0x0, 0x7, 0x0, 0x2b8, 0xffff0000], [0x1, 0x1, 0x0, 0x2f, 0x1, 0x20, 0x0, 0x3, 0xfffffff7, 0x5, 0x3, 0x6, 0x9, 0xa8, 0xff, 0x1, 0x6e, 0x1ff, 0x1f, 0x3, 0x9, 0x7807ec1f, 0x7, 0x7, 0x7fff, 0x80000001, 0xfffffffe, 0x10001, 0x1800000, 0xfff, 0x4, 0x401, 0x29, 0x4, 0x6, 0x2, 0x1, 0x6, 0xffffffff, 0xfffff801, 0x5, 0x0, 0xe8000000, 0x7, 0x7, 0x400, 0x10000, 0x5, 0x5, 0x71b, 0x6872, 0x0, 0x8001, 0x2, 0x5de3, 0xe8, 0x81, 0x6, 0x4, 0x100, 0x8000, 0x0, 0x5, 0x6], [0x0, 0x3, 0x6, 0x4, 0x5, 0x40, 0x1, 0x6, 0x5, 0x1, 0x7, 0x80000000, 0x2, 0x20, 0x1, 0x81, 0xee20, 0xfff, 0x2, 0x6, 0xffff, 0xc0000, 0x6, 0x9, 0x3, 0x7fffffff, 0xb07, 0x400, 0x0, 0x1, 0x8347, 0x7, 0x95a00000, 0x2, 0x6cdd57f5, 0x5, 0x8, 0x4, 0x3ff, 0x0, 0xffe00000, 0x0, 0x1ff00, 0x8, 0xfffffcde, 0x8, 0x9, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, 0x91d, 0x7, 0x7, 0x2, 0x7, 0x8, 0xc0000000, 0x9, 0x7ff, 0x8, 0x2], 0x1c, ['\x00', '/dev/adsp1\x00', '/dev/adsp1\x00', '\x00', '\x00', '[\x00', '\x00']}, ["", "", "", ""]}, 0x43c}}, 0x800) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x23000) 00:50:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ff0000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:07 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (rerun: 32) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ff5000/0x3000)=nil, 0x3000}, 0x1}) 00:50:07 executing program 5: ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000080)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ff0000/0x3000)=nil, 0x3000}, 0x1}) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:07 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ff0000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:07 executing program 0: munlock(&(0x7f0000ff2000/0x1000)=nil, 0x1000) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x8}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f00000001c0)) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0x6) (async) syz_io_uring_setup(0x6c8f, &(0x7f0000000080)={0x0, 0xfce5}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x43c, 0x3f3, 0x300, 0x70bd27, 0x25dfdbfd, {0x10, 0x1, 0x1f, [0x5, 0x6, 0x4d, 0x3, 0x10001, 0x1, 0x5, 0x4, 0x5, 0x81, 0x30e, 0x7fff, 0x4, 0x80000000, 0x8, 0x9, 0x5d05, 0x1000, 0x6, 0x9419, 0x1, 0x80000000, 0xe32, 0x33c71d6b, 0x4, 0x100, 0x0, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x6, 0x7, 0x3, 0x807, 0xfff, 0x1, 0x7fff, 0x8, 0x5, 0x9, 0x8, 0x401, 0x100, 0x50, 0x8000, 0x4, 0x7ff, 0x7, 0x8, 0x0, 0x1, 0x2a, 0x4, 0x4, 0x8, 0x7, 0xfffffffc, 0x1, 0x800, 0x2e, 0xffffffde, 0x8387], [0x5, 0x4, 0x8, 0x7, 0x8, 0x8, 0x9, 0x3, 0x9, 0x3, 0x1, 0x7f, 0x3, 0x6, 0x4, 0x200, 0x400, 0x6, 0x20, 0x80, 0xfffffff8, 0x200, 0xfffff290, 0x5, 0x0, 0x80, 0x3, 0x7449, 0xfffffff7, 0x3, 0xff, 0x2, 0x0, 0xb3, 0xffffffff, 0x1ff, 0x4, 0x80, 0xfffffffb, 0xffffffff, 0x5, 0x7, 0x4, 0x3, 0x7, 0x6, 0x9c2, 0x1000, 0xbe, 0x2, 0x0, 0xfffffffc, 0x7, 0x7, 0x6, 0x9, 0xfffffffb, 0x6, 0xfffffffa, 0x0, 0x7, 0x0, 0x2b8, 0xffff0000], [0x1, 0x1, 0x0, 0x2f, 0x1, 0x20, 0x0, 0x3, 0xfffffff7, 0x5, 0x3, 0x6, 0x9, 0xa8, 0xff, 0x1, 0x6e, 0x1ff, 0x1f, 0x3, 0x9, 0x7807ec1f, 0x7, 0x7, 0x7fff, 0x80000001, 0xfffffffe, 0x10001, 0x1800000, 0xfff, 0x4, 0x401, 0x29, 0x4, 0x6, 0x2, 0x1, 0x6, 0xffffffff, 0xfffff801, 0x5, 0x0, 0xe8000000, 0x7, 0x7, 0x400, 0x10000, 0x5, 0x5, 0x71b, 0x6872, 0x0, 0x8001, 0x2, 0x5de3, 0xe8, 0x81, 0x6, 0x4, 0x100, 0x8000, 0x0, 0x5, 0x6], [0x0, 0x3, 0x6, 0x4, 0x5, 0x40, 0x1, 0x6, 0x5, 0x1, 0x7, 0x80000000, 0x2, 0x20, 0x1, 0x81, 0xee20, 0xfff, 0x2, 0x6, 0xffff, 0xc0000, 0x6, 0x9, 0x3, 0x7fffffff, 0xb07, 0x400, 0x0, 0x1, 0x8347, 0x7, 0x95a00000, 0x2, 0x6cdd57f5, 0x5, 0x8, 0x4, 0x3ff, 0x0, 0xffe00000, 0x0, 0x1ff00, 0x8, 0xfffffcde, 0x8, 0x9, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, 0x91d, 0x7, 0x7, 0x2, 0x7, 0x8, 0xc0000000, 0x9, 0x7ff, 0x8, 0x2], 0x1c, ['\x00', '/dev/adsp1\x00', '/dev/adsp1\x00', '\x00', '\x00', '[\x00', '\x00']}, ["", "", "", ""]}, 0x43c}}, 0x800) (async) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x23000) 00:50:07 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ff5000/0x3000)=nil, 0x3000}, 0x1}) 00:50:07 executing program 5: ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000080)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000080)) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ff0000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ff0000/0x3000)=nil, 0x3000}, 0x1}) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:07 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) io_uring_setup(0x3f94, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x9b, 0x0, r0}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) 00:50:07 executing program 4: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)=0x1) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100000001}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000240)={@l2={0x1f, 0x7f, @none, 0x7, 0x2}, {&(0x7f00000001c0)=""/45, 0x2d}, &(0x7f0000000200), 0x30}, 0xa0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 0: munlock(&(0x7f0000ff2000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x8}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f00000001c0)) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0x6) syz_io_uring_setup(0x6c8f, &(0x7f0000000080)={0x0, 0xfce5}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x43c, 0x3f3, 0x300, 0x70bd27, 0x25dfdbfd, {0x10, 0x1, 0x1f, [0x5, 0x6, 0x4d, 0x3, 0x10001, 0x1, 0x5, 0x4, 0x5, 0x81, 0x30e, 0x7fff, 0x4, 0x80000000, 0x8, 0x9, 0x5d05, 0x1000, 0x6, 0x9419, 0x1, 0x80000000, 0xe32, 0x33c71d6b, 0x4, 0x100, 0x0, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x6, 0x7, 0x3, 0x807, 0xfff, 0x1, 0x7fff, 0x8, 0x5, 0x9, 0x8, 0x401, 0x100, 0x50, 0x8000, 0x4, 0x7ff, 0x7, 0x8, 0x0, 0x1, 0x2a, 0x4, 0x4, 0x8, 0x7, 0xfffffffc, 0x1, 0x800, 0x2e, 0xffffffde, 0x8387], [0x5, 0x4, 0x8, 0x7, 0x8, 0x8, 0x9, 0x3, 0x9, 0x3, 0x1, 0x7f, 0x3, 0x6, 0x4, 0x200, 0x400, 0x6, 0x20, 0x80, 0xfffffff8, 0x200, 0xfffff290, 0x5, 0x0, 0x80, 0x3, 0x7449, 0xfffffff7, 0x3, 0xff, 0x2, 0x0, 0xb3, 0xffffffff, 0x1ff, 0x4, 0x80, 0xfffffffb, 0xffffffff, 0x5, 0x7, 0x4, 0x3, 0x7, 0x6, 0x9c2, 0x1000, 0xbe, 0x2, 0x0, 0xfffffffc, 0x7, 0x7, 0x6, 0x9, 0xfffffffb, 0x6, 0xfffffffa, 0x0, 0x7, 0x0, 0x2b8, 0xffff0000], [0x1, 0x1, 0x0, 0x2f, 0x1, 0x20, 0x0, 0x3, 0xfffffff7, 0x5, 0x3, 0x6, 0x9, 0xa8, 0xff, 0x1, 0x6e, 0x1ff, 0x1f, 0x3, 0x9, 0x7807ec1f, 0x7, 0x7, 0x7fff, 0x80000001, 0xfffffffe, 0x10001, 0x1800000, 0xfff, 0x4, 0x401, 0x29, 0x4, 0x6, 0x2, 0x1, 0x6, 0xffffffff, 0xfffff801, 0x5, 0x0, 0xe8000000, 0x7, 0x7, 0x400, 0x10000, 0x5, 0x5, 0x71b, 0x6872, 0x0, 0x8001, 0x2, 0x5de3, 0xe8, 0x81, 0x6, 0x4, 0x100, 0x8000, 0x0, 0x5, 0x6], [0x0, 0x3, 0x6, 0x4, 0x5, 0x40, 0x1, 0x6, 0x5, 0x1, 0x7, 0x80000000, 0x2, 0x20, 0x1, 0x81, 0xee20, 0xfff, 0x2, 0x6, 0xffff, 0xc0000, 0x6, 0x9, 0x3, 0x7fffffff, 0xb07, 0x400, 0x0, 0x1, 0x8347, 0x7, 0x95a00000, 0x2, 0x6cdd57f5, 0x5, 0x8, 0x4, 0x3ff, 0x0, 0xffe00000, 0x0, 0x1ff00, 0x8, 0xfffffcde, 0x8, 0x9, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, 0x91d, 0x7, 0x7, 0x2, 0x7, 0x8, 0xc0000000, 0x9, 0x7ff, 0x8, 0x2], 0x1c, ['\x00', '/dev/adsp1\x00', '/dev/adsp1\x00', '\x00', '\x00', '[\x00', '\x00']}, ["", "", "", ""]}, 0x43c}}, 0x800) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x23000) munlock(&(0x7f0000ff2000/0x1000)=nil, 0x1000) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x8}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (async) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f00000001c0)) (async) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000200)=0x6) (async) syz_io_uring_setup(0x6c8f, &(0x7f0000000080)={0x0, 0xfce5}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) (async) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x43c, 0x3f3, 0x300, 0x70bd27, 0x25dfdbfd, {0x10, 0x1, 0x1f, [0x5, 0x6, 0x4d, 0x3, 0x10001, 0x1, 0x5, 0x4, 0x5, 0x81, 0x30e, 0x7fff, 0x4, 0x80000000, 0x8, 0x9, 0x5d05, 0x1000, 0x6, 0x9419, 0x1, 0x80000000, 0xe32, 0x33c71d6b, 0x4, 0x100, 0x0, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x6, 0x7, 0x3, 0x807, 0xfff, 0x1, 0x7fff, 0x8, 0x5, 0x9, 0x8, 0x401, 0x100, 0x50, 0x8000, 0x4, 0x7ff, 0x7, 0x8, 0x0, 0x1, 0x2a, 0x4, 0x4, 0x8, 0x7, 0xfffffffc, 0x1, 0x800, 0x2e, 0xffffffde, 0x8387], [0x5, 0x4, 0x8, 0x7, 0x8, 0x8, 0x9, 0x3, 0x9, 0x3, 0x1, 0x7f, 0x3, 0x6, 0x4, 0x200, 0x400, 0x6, 0x20, 0x80, 0xfffffff8, 0x200, 0xfffff290, 0x5, 0x0, 0x80, 0x3, 0x7449, 0xfffffff7, 0x3, 0xff, 0x2, 0x0, 0xb3, 0xffffffff, 0x1ff, 0x4, 0x80, 0xfffffffb, 0xffffffff, 0x5, 0x7, 0x4, 0x3, 0x7, 0x6, 0x9c2, 0x1000, 0xbe, 0x2, 0x0, 0xfffffffc, 0x7, 0x7, 0x6, 0x9, 0xfffffffb, 0x6, 0xfffffffa, 0x0, 0x7, 0x0, 0x2b8, 0xffff0000], [0x1, 0x1, 0x0, 0x2f, 0x1, 0x20, 0x0, 0x3, 0xfffffff7, 0x5, 0x3, 0x6, 0x9, 0xa8, 0xff, 0x1, 0x6e, 0x1ff, 0x1f, 0x3, 0x9, 0x7807ec1f, 0x7, 0x7, 0x7fff, 0x80000001, 0xfffffffe, 0x10001, 0x1800000, 0xfff, 0x4, 0x401, 0x29, 0x4, 0x6, 0x2, 0x1, 0x6, 0xffffffff, 0xfffff801, 0x5, 0x0, 0xe8000000, 0x7, 0x7, 0x400, 0x10000, 0x5, 0x5, 0x71b, 0x6872, 0x0, 0x8001, 0x2, 0x5de3, 0xe8, 0x81, 0x6, 0x4, 0x100, 0x8000, 0x0, 0x5, 0x6], [0x0, 0x3, 0x6, 0x4, 0x5, 0x40, 0x1, 0x6, 0x5, 0x1, 0x7, 0x80000000, 0x2, 0x20, 0x1, 0x81, 0xee20, 0xfff, 0x2, 0x6, 0xffff, 0xc0000, 0x6, 0x9, 0x3, 0x7fffffff, 0xb07, 0x400, 0x0, 0x1, 0x8347, 0x7, 0x95a00000, 0x2, 0x6cdd57f5, 0x5, 0x8, 0x4, 0x3ff, 0x0, 0xffe00000, 0x0, 0x1ff00, 0x8, 0xfffffcde, 0x8, 0x9, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, 0x91d, 0x7, 0x7, 0x2, 0x7, 0x8, 0xc0000000, 0x9, 0x7ff, 0x8, 0x2], 0x1c, ['\x00', '/dev/adsp1\x00', '/dev/adsp1\x00', '\x00', '\x00', '[\x00', '\x00']}, ["", "", "", ""]}, 0x43c}}, 0x800) (async) mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x10, 0xffffffffffffffff, 0x23000) (async) 00:50:07 executing program 5: ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000080)) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:07 executing program 1: r0 = syz_io_uring_setup(0x10000000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800000, 0x5c}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe1000/0x1000)=nil, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) bind$isdn(r1, &(0x7f0000000180)={0x22, 0xff, 0x6, 0x7}, 0x6) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x1d1, &(0x7f0000000080)={0x0, 0xce84, 0x800, 0x3, 0x3f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) munmap(&(0x7f0000fe8000/0x4000)=nil, 0x4000) 00:50:07 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) io_uring_setup(0x3f94, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x9b, 0x0, r0}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) io_uring_setup(0x3f94, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x9b, 0x0, r0}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) 00:50:07 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100000001}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000240)={@l2={0x1f, 0x7f, @none, 0x7, 0x2}, {&(0x7f00000001c0)=""/45, 0x2d}, &(0x7f0000000200), 0x30}, 0xa0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fec000/0x1000)=nil, 0x1000}, 0x1}) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x63c7, 0x400, 0x0, 0x53}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) 00:50:07 executing program 1: r0 = syz_io_uring_setup(0x10000000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800000, 0x5c}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe1000/0x1000)=nil, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) bind$isdn(r1, &(0x7f0000000180)={0x22, 0xff, 0x6, 0x7}, 0x6) (async, rerun: 64) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async, rerun: 64) syz_io_uring_setup(0x1d1, &(0x7f0000000080)={0x0, 0xce84, 0x800, 0x3, 0x3f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) munmap(&(0x7f0000fe8000/0x4000)=nil, 0x4000) 00:50:07 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x69) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$usbfs(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x7fff) 00:50:07 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:07 executing program 1: r0 = syz_io_uring_setup(0x10000000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800000, 0x5c}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe1000/0x1000)=nil, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) bind$isdn(r1, &(0x7f0000000180)={0x22, 0xff, 0x6, 0x7}, 0x6) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) syz_io_uring_setup(0x1d1, &(0x7f0000000080)={0x0, 0xce84, 0x800, 0x3, 0x3f, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) munmap(&(0x7f0000fe8000/0x4000)=nil, 0x4000) 00:50:07 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) io_uring_setup(0x3f94, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x9b, 0x0, r0}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) io_uring_setup(0x3f94, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x9b, 0x0, r0}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) 00:50:07 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3c000000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:07 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x69) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$usbfs(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x7fff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x69) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$usbfs(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x7fff) (async) 00:50:07 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:07 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fed000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100000001}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000240)={@l2={0x1f, 0x7f, @none, 0x7, 0x2}, {&(0x7f00000001c0)=""/45, 0x2d}, &(0x7f0000000200), 0x30}, 0xa0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:07 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x69) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$usbfs(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, 0xffffffffffffffff, 0x7fff) 00:50:07 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:07 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000009ff7f0000030000"], 0xc) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6c694b97}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x40012, r1, 0x10000000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) connect$rds(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 00:50:07 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {}, 0x2}, 0x18) syz_io_uring_setup(0x5a85, &(0x7f0000000100)={0x0, 0x5fdf, 0x80, 0x1, 0x34a, 0x0, r0}, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:07 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fed000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:07 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (rerun: 64) 00:50:08 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6c694b97}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x40012, r1, 0x10000000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) connect$rds(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 00:50:08 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000009ff7f0000030000"], 0xc) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {}, 0x2}, 0x18) (async) syz_io_uring_setup(0x5a85, &(0x7f0000000100)={0x0, 0x5fdf, 0x80, 0x1, 0x34a, 0x0, r0}, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fed000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x3b, 0x800, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000300)={{0x7, 0x80000001}, 0x60}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000b14000227bd7040fcdbdf25080001000000000008003f00ff0100000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) 00:50:08 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000009ff7f0000030000"], 0xc) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6c694b97}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x40012, r1, 0x10000000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) connect$rds(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) 00:50:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (rerun: 32) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {}, 0x2}, 0x18) (async, rerun: 32) syz_io_uring_setup(0x5a85, &(0x7f0000000100)={0x0, 0x5fdf, 0x80, 0x1, 0x34a, 0x0, r0}, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (rerun: 32) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fed000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x3b, 0x800, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000300)={{0x7, 0x80000001}, 0x60}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000b14000227bd7040fcdbdf25080001000000000008003f00ff0100000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair(0x3b, 0x800, 0x6, &(0x7f00000002c0)) (async) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000300)={{0x7, 0x80000001}, 0x60}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000b14000227bd7040fcdbdf25080001000000000008003f00ff0100000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) (async) 00:50:08 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3c, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000feb000/0x4000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x0) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fed000/0x3000)=nil, 0x3000}}) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x10000000, 0x800, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe8000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) 00:50:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000feb000/0x4000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000feb000/0x4000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x0) (async) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fed000/0x3000)=nil, 0x3000}}) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x3c, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x3b, 0x800, 0x6, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000300)={{0x7, 0x80000001}, 0x60}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000b14000227bd7040fcdbdf25080001000000000008003f00ff0100000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair(0x3b, 0x800, 0x6, &(0x7f00000002c0)) (async) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000300)={{0x7, 0x80000001}, 0x60}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000b14000227bd7040fcdbdf25080001000000000008003f00ff0100000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) (async) 00:50:08 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x10000000, 0x800, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe8000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x10000000, 0x800, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe8000/0x2000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) (async) 00:50:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000feb000/0x4000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x0) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fed000/0x3000)=nil, 0x3000}}) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:08 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3c, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = syz_io_uring_setup(0x3124, &(0x7f0000000180)={0x0, 0xb6ef, 0x4, 0x3, 0x60, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x2551, &(0x7f0000000280)={0x0, 0x38f8, 0x5c4, 0x0, 0x185, 0x0, r1}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000feb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:50:08 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x49e3) 00:50:08 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = syz_io_uring_setup(0x3124, &(0x7f0000000180)={0x0, 0xb6ef, 0x4, 0x3, 0x60, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x2551, &(0x7f0000000280)={0x0, 0x38f8, 0x5c4, 0x0, 0x185, 0x0, r1}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000feb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x10000000, 0x800, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fe8000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) 00:50:08 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x49e3) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x49e3) (async) 00:50:08 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe3}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:08 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ff0000/0x3000)=nil, 0x3000}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x49e3) (rerun: 32) 00:50:08 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async, rerun: 64) r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r1 = syz_io_uring_setup(0x3124, &(0x7f0000000180)={0x0, 0xb6ef, 0x4, 0x3, 0x60, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x2551, &(0x7f0000000280)={0x0, 0x38f8, 0x5c4, 0x0, 0x185, 0x0, r1}, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000feb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="e100ff030000000000004939", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = syz_io_uring_setup(0x53b6, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x24c, 0x0, r1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000280)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x10000000) 00:50:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mremap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000fdf000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) mmap$snddsp_status(&(0x7f0000ff0000/0x3000)=nil, 0x1000, 0x9, 0x40010, r1, 0x82000000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:50:08 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ff0000/0x3000)=nil, 0x3000}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:08 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="e100ff030000000000004939", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = syz_io_uring_setup(0x53b6, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x24c, 0x0, r1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000280)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x10000000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="e100ff030000000000004939", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) syz_io_uring_setup(0x53b6, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x24c, 0x0, r1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000280)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x10000000) (async) 00:50:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mremap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000fdf000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) mmap$snddsp_status(&(0x7f0000ff0000/0x3000)=nil, 0x1000, 0x9, 0x40010, r1, 0x82000000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mremap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000fdf000/0x2000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) mmap$snddsp_status(&(0x7f0000ff0000/0x3000)=nil, 0x1000, 0x9, 0x40010, r1, 0x82000000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) 00:50:08 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ff0000/0x3000)=nil, 0x3000}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:50:08 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="e100ff030000000000004939", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r2 = syz_io_uring_setup(0x53b6, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x24c, 0x0, r1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000280)) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x10000000) 00:50:08 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:08 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:08 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mremap(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000fdf000/0x2000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) mmap$snddsp_status(&(0x7f0000ff0000/0x3000)=nil, 0x1000, 0x9, 0x40010, r1, 0x82000000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 00:50:08 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$snddsp_status(&(0x7f0000ff6000/0x2000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x82000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x9, 0x8001) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:08 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x64b8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x269}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/197, 0xc5, 0x1, &(0x7f0000000300)=""/107, 0x6b}, &(0x7f00000003c0)=0x40) 00:50:08 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:50:09 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$snddsp_status(&(0x7f0000ff6000/0x2000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x82000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x9, 0x8001) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mmap$snddsp_status(&(0x7f0000ff6000/0x2000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x82000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x9, 0x8001) (async) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r1, 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:09 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x8, 0x1010, r1, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x80, &(0x7f0000ffc000/0x1000)=nil, 0x0) io_uring_setup(0x6c46, &(0x7f0000000080)={0x0, 0x966c, 0xced9eda279096f7d, 0x0, 0x190, 0x0, r0}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x6, 0x8000) 00:50:09 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = syz_io_uring_setup(0x64b8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x269}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/197, 0xc5, 0x1, &(0x7f0000000300)=""/107, 0x6b}, &(0x7f00000003c0)=0x40) 00:50:09 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:50:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x8, 0x1010, r1, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async, rerun: 64) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x80, &(0x7f0000ffc000/0x1000)=nil, 0x0) (rerun: 64) io_uring_setup(0x6c46, &(0x7f0000000080)={0x0, 0x966c, 0xced9eda279096f7d, 0x0, 0x190, 0x0, r0}) (async, rerun: 32) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x6, 0x8000) (rerun: 32) 00:50:09 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x16e4, &(0x7f0000000180)={0x0, 0xc245, 0x0, 0x3, 0x2db, 0x0, r0}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socket(0x21, 0x80000, 0xfff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r2 = syz_io_uring_setup(0x3e04, &(0x7f0000000280)={0x0, 0x29c7, 0x10, 0x3, 0x1fa, 0x0, r1}, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="7fff2e2f66696c65306c58ea0400000086251d707d575da6971aa7c3e046b1ab077dff4727ac835f8994f90701efc0539ab30041b1c7072c3761dd1cc3ae37c8d8c9fca065d7c7607fdd18cffc9ab0a2a47ba9a27b6df639c3037aa696e64def9e08fb98cbf8263752b9b45f27f9a7a81b08807bbba1fa7cbf735d9c2b44305132082bc809cbdf1ce07b4a4a4cca44dde39cf68f02dfc69853aa23f6d126d870fb65c533ffa0e0b4e82ba13d2e7ad79ed5ec082d943f2d216dc7960e78b8a6798639bedb5933f54bd893fc82a6589f0587a318b52d2387e92361b7c0ac299679ffbc33771ea0a73121d19f81cb83bb71d2cee6b357b602397a917c905725db8e9dff9ae40879f371344bfe2a149d88f2e72eca6900000000"]) mmap$usbmon(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x800) 00:50:09 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mmap$snddsp_status(&(0x7f0000ff6000/0x2000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x82000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x9, 0x8001) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mmap$snddsp_status(&(0x7f0000ff6000/0x2000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x82000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x9, 0x8001) (async) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r1, 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:09 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x64b8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x269}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/197, 0xc5, 0x1, &(0x7f0000000300)=""/107, 0x6b}, &(0x7f00000003c0)=0x40) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x64b8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x269}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/197, 0xc5, 0x1, &(0x7f0000000300)=""/107, 0x6b}, &(0x7f00000003c0)=0x40) (async) 00:50:09 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/65, 0x41, 0x1, &(0x7f0000000200)=""/241, 0xf1}, &(0x7f0000000340)=0x40) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) sendmsg$can_j1939(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)="9731fb86c9c7ba56c05d1e3a30a0b4171d6ac9a5fb9560b7206586d8124d3f1aebf8ccba4a1c0b351ebd7319d1cb405672fd3d6894cacb45c0fb90184d14884ff32efcb1d45798b3e0b04c658435b1faa047addf3ff2bfeb61f5eb0a", 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x21) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_USER(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfb, "ba1a31ca76ba980bb2d1663589187a565261e9432ca324f451d21bc704370fd17f51d10d809414871a27594252bb2b1afe0572136ca325562dcfc8fe633d24ce35dfa0d8751200b0d0a9114be89c178f9b1051c9779672cd0bf031693477ba16554d87f765ef975fa02a24da62647ff8bc5f29b5a6700b7c9e8952aac7d256065b9e076e69ebe222a34a2bd0df53c564b80c362fa587001e7bed69e20eeaa1eea48fe37f011ce8860898f69a6056a842b1faadf35cd5b43c2e05e0c941cd903439dcde007ed1", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x8, 0x1010, r1, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x80, &(0x7f0000ffc000/0x1000)=nil, 0x0) io_uring_setup(0x6c46, &(0x7f0000000080)={0x0, 0x966c, 0xced9eda279096f7d, 0x0, 0x190, 0x0, r0}) (async) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x6, 0x8000) 00:50:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x4, 0xb2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$binder(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) 00:50:09 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, r1, 0x80000000) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0xc, 0x80010, r2, 0x10000000) 00:50:09 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (rerun: 32) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/65, 0x41, 0x1, &(0x7f0000000200)=""/241, 0xf1}, &(0x7f0000000340)=0x40) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) sendmsg$can_j1939(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)="9731fb86c9c7ba56c05d1e3a30a0b4171d6ac9a5fb9560b7206586d8124d3f1aebf8ccba4a1c0b351ebd7319d1cb405672fd3d6894cacb45c0fb90184d14884ff32efcb1d45798b3e0b04c658435b1faa047addf3ff2bfeb61f5eb0a", 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x21) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_USER(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfb, "ba1a31ca76ba980bb2d1663589187a565261e9432ca324f451d21bc704370fd17f51d10d809414871a27594252bb2b1afe0572136ca325562dcfc8fe633d24ce35dfa0d8751200b0d0a9114be89c178f9b1051c9779672cd0bf031693477ba16554d87f765ef975fa02a24da62647ff8bc5f29b5a6700b7c9e8952aac7d256065b9e076e69ebe222a34a2bd0df53c564b80c362fa587001e7bed69e20eeaa1eea48fe37f011ce8860898f69a6056a842b1faadf35cd5b43c2e05e0c941cd903439dcde007ed1", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap$binder(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) 00:50:09 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x16e4, &(0x7f0000000180)={0x0, 0xc245, 0x0, 0x3, 0x2db, 0x0, r0}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socket(0x21, 0x80000, 0xfff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r2 = syz_io_uring_setup(0x3e04, &(0x7f0000000280)={0x0, 0x29c7, 0x10, 0x3, 0x1fa, 0x0, r1}, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) (async) mmap$usbmon(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x800) 00:50:09 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x4, 0xb2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000180), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, r1, 0x80000000) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0xc, 0x80010, r2, 0x10000000) 00:50:09 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/65, 0x41, 0x1, &(0x7f0000000200)=""/241, 0xf1}, &(0x7f0000000340)=0x40) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) sendmsg$can_j1939(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)="9731fb86c9c7ba56c05d1e3a30a0b4171d6ac9a5fb9560b7206586d8124d3f1aebf8ccba4a1c0b351ebd7319d1cb405672fd3d6894cacb45c0fb90184d14884ff32efcb1d45798b3e0b04c658435b1faa047addf3ff2bfeb61f5eb0a", 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x21) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_USER(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfb, "ba1a31ca76ba980bb2d1663589187a565261e9432ca324f451d21bc704370fd17f51d10d809414871a27594252bb2b1afe0572136ca325562dcfc8fe633d24ce35dfa0d8751200b0d0a9114be89c178f9b1051c9779672cd0bf031693477ba16554d87f765ef975fa02a24da62647ff8bc5f29b5a6700b7c9e8952aac7d256065b9e076e69ebe222a34a2bd0df53c564b80c362fa587001e7bed69e20eeaa1eea48fe37f011ce8860898f69a6056a842b1faadf35cd5b43c2e05e0c941cd903439dcde007ed1", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/65, 0x41, 0x1, &(0x7f0000000200)=""/241, 0xf1}, &(0x7f0000000340)=0x40) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) sendmsg$can_j1939(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)="9731fb86c9c7ba56c05d1e3a30a0b4171d6ac9a5fb9560b7206586d8124d3f1aebf8ccba4a1c0b351ebd7319d1cb405672fd3d6894cacb45c0fb90184d14884ff32efcb1d45798b3e0b04c658435b1faa047addf3ff2bfeb61f5eb0a", 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x21) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) sendmsg$AUDIT_USER(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfb, "ba1a31ca76ba980bb2d1663589187a565261e9432ca324f451d21bc704370fd17f51d10d809414871a27594252bb2b1afe0572136ca325562dcfc8fe633d24ce35dfa0d8751200b0d0a9114be89c178f9b1051c9779672cd0bf031693477ba16554d87f765ef975fa02a24da62647ff8bc5f29b5a6700b7c9e8952aac7d256065b9e076e69ebe222a34a2bd0df53c564b80c362fa587001e7bed69e20eeaa1eea48fe37f011ce8860898f69a6056a842b1faadf35cd5b43c2e05e0c941cd903439dcde007ed1", [""]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:09 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) mmap$binder(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) 00:50:09 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, r1, 0x80000000) (async, rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0xc, 0x80010, r2, 0x10000000) 00:50:09 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x4, 0xb2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000180), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="f34802207d6c785a67e9c667f8d21f381ac45a5adea57893c14206f062956d47c31985f85920dd9fb7b2880b539e94cc4e20b15c0899cfc875cd91c373e0a65865a38f2f129bcd35d5483d5b7c39f421a2a3414cb8cc00d566e6c3b9f4b188dcc9398b02e0d0c4302818f191a5c7e0578af410dfed44d349a9add99503d48a25ee2d09e217e740da15ff0f60279e45e80d1e4c55", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00010000000000002e2f66696c653000"]) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x810, r1, 0x2e000) 00:50:09 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$usbfs(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2, 0x4010010, 0xffffffffffffffff, 0x6) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (rerun: 32) syz_io_uring_setup(0x16e4, &(0x7f0000000180)={0x0, 0xc245, 0x0, 0x3, 0x2db, 0x0, r0}, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 32) socket(0x21, 0x80000, 0xfff) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r2 = syz_io_uring_setup(0x3e04, &(0x7f0000000280)={0x0, 0x29c7, 0x10, 0x3, 0x1fa, 0x0, r1}, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="7fff2e2f66696c65306c58ea0400000086251d707d575da6971aa7c3e046b1ab077dff4727ac835f8994f90701efc0539ab30041b1c7072c3761dd1cc3ae37c8d8c9fca065d7c7607fdd18cffc9ab0a2a47ba9a27b6df639c3037aa696e64def9e08fb98cbf8263752b9b45f27f9a7a81b08807bbba1fa7cbf735d9c2b44305132082bc809cbdf1ce07b4a4a4cca44dde39cf68f02dfc69853aa23f6d126d870fb65c533ffa0e0b4e82ba13d2e7ad79ed5ec082d943f2d216dc7960e78b8a6798639bedb5933f54bd893fc82a6589f0587a318b52d2387e92361b7c0ac299679ffbc33771ea0a73121d19f81cb83bb71d2cee6b357b602397a917c905725db8e9dff9ae40879f371344bfe2a149d88f2e72eca6900000000"]) (async) mmap$usbmon(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x800) 00:50:09 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ff4000/0x4000)=nil, 0x4000}}) 00:50:09 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$usbfs(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2, 0x4010010, 0xffffffffffffffff, 0x6) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="f34802207d6c785a67e9c667f8d21f381ac45a5adea57893c14206f062956d47c31985f85920dd9fb7b2880b539e94cc4e20b15c0899cfc875cd91c373e0a65865a38f2f129bcd35d5483d5b7c39f421a2a3414cb8cc00d566e6c3b9f4b188dcc9398b02e0d0c4302818f191a5c7e0578af410dfed44d349a9add99503d48a25ee2d09e217e740da15ff0f60279e45e80d1e4c55", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00010000000000002e2f66696c653000"]) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x810, r1, 0x2e000) 00:50:09 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) (async, rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="f34802207d6c785a67e9c667f8d21f381ac45a5adea57893c14206f062956d47c31985f85920dd9fb7b2880b539e94cc4e20b15c0899cfc875cd91c373e0a65865a38f2f129bcd35d5483d5b7c39f421a2a3414cb8cc00d566e6c3b9f4b188dcc9398b02e0d0c4302818f191a5c7e0578af410dfed44d349a9add99503d48a25ee2d09e217e740da15ff0f60279e45e80d1e4c55", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00010000000000002e2f66696c653000"]) (async) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x810, r1, 0x2e000) 00:50:09 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$usbfs(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2, 0x4010010, 0xffffffffffffffff, 0x6) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe2000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fe5000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x180000000) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:09 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ff4000/0x4000)=nil, 0x4000}}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ff4000/0x4000)=nil, 0x4000}}) (async) 00:50:09 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/150, 0x96, 0x1, &(0x7f0000000140)=""/43, 0x2b}, &(0x7f00000001c0)=0x40) 00:50:09 executing program 2: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5000000, 0x10, r0, 0x10000000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000fe7000/0x4000)=nil) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x20010, r1, 0xf89cb000) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffa000/0x1000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0800000000000000492f664d6c653000fa4047dfc4f5633166b49d455ea280bd306893df8640b8790fca313705b60eaf49bd4e68aeeb04efe4e474b9f9c902c7c830c66bcfc9b5a5a5883afc9ee8ef1d63374b2734fbbec7c3f7c20797f52c81da791b119b1f5841e67130179effa00ed1c6d94a44195e1cde6f934a1242f645a4f44d0bd15dfbe561000116615e84c6f76abcda60f8479b31bd307c75a85702b95d9eca269da6951cb0c748e9736f7a0b13a26010f700afd78be2cbecacbf7103388519cbf15b930fd162ddaecf0d1ebce8a6f0ec13a308c15be0e378019e0284366b3bb68472ba4c51688aa102073d6f802385630564710794d9abed7e6cf3648d21452de16937de865404ac1be5fd7945f528de99483861a880506922f3a97f353062afad66759d1453a340eeb61fbf7309235a1e9d4923b3375c2e08b512b8ce2247199019988fcaefd57037cbd1d1"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fe2000/0x1000)=nil, 0x1000, 0x2000009, 0xa2830, r2, 0x10000000) remap_file_pages(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x9, 0x4, 0x4000000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/150, 0x96, 0x1, &(0x7f0000000140)=""/43, 0x2b}, &(0x7f00000001c0)=0x40) 00:50:09 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ff4000/0x4000)=nil, 0x4000}}) 00:50:09 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:09 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0800000000000000492f664d6c653000fa4047dfc4f5633166b49d455ea280bd306893df8640b8790fca313705b60eaf49bd4e68aeeb04efe4e474b9f9c902c7c830c66bcfc9b5a5a5883afc9ee8ef1d63374b2734fbbec7c3f7c20797f52c81da791b119b1f5841e67130179effa00ed1c6d94a44195e1cde6f934a1242f645a4f44d0bd15dfbe561000116615e84c6f76abcda60f8479b31bd307c75a85702b95d9eca269da6951cb0c748e9736f7a0b13a26010f700afd78be2cbecacbf7103388519cbf15b930fd162ddaecf0d1ebce8a6f0ec13a308c15be0e378019e0284366b3bb68472ba4c51688aa102073d6f802385630564710794d9abed7e6cf3648d21452de16937de865404ac1be5fd7945f528de99483861a880506922f3a97f353062afad66759d1453a340eeb61fbf7309235a1e9d4923b3375c2e08b512b8ce2247199019988fcaefd57037cbd1d1"]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fe2000/0x1000)=nil, 0x1000, 0x2000009, 0xa2830, r2, 0x10000000) (async) remap_file_pages(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x9, 0x4, 0x4000000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe2000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fe5000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x180000000) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:09 executing program 2: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5000000, 0x10, r0, 0x10000000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000fe7000/0x4000)=nil) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x20010, r1, 0xf89cb000) (async, rerun: 64) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffa000/0x1000)=nil) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:09 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000e, 0x10, r0, 0x180000000) 00:50:09 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/150, 0x96, 0x1, &(0x7f0000000140)=""/43, 0x2b}, &(0x7f00000001c0)=0x40) 00:50:09 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fe2000/0x1000)=nil, 0x1000, 0x2000009, 0xa2830, r2, 0x10000000) remap_file_pages(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x9, 0x4, 0x4000000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000fe2000/0x1000)=nil, 0x1000, 0x2000009, 0xa2830, r2, 0x10000000) (async) remap_file_pages(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x9, 0x4, 0x4000000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:09 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe2000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fe5000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x180000000) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe2000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000fe5000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x180000000) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x8, 0x80010, r0, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) 00:50:10 executing program 2: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5000000, 0x10, r0, 0x10000000) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000fe7000/0x4000)=nil) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x20010, r1, 0xf89cb000) (async) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffa000/0x1000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 32) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000e, 0x10, r0, 0x180000000) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x8, 0x80010, r0, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x8, 0x80010, r0, 0x10000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) (async) 00:50:10 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mlock(&(0x7f0000ff4000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000fe2000/0x2000)=nil) 00:50:10 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000e, 0x10, r0, 0x180000000) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x5a78, &(0x7f0000000180)={0x0, 0xe2e0, 0x400, 0x3, 0x1cd, 0x0, r0}, &(0x7f0000fe4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mlock(&(0x7f0000ff4000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000fe2000/0x2000)=nil) 00:50:10 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x8, 0x80010, r0, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000fdf000/0x3000)=nil, 0x3000, 0x8, 0x80010, r0, 0x10000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) (async) 00:50:10 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x2, 0x199}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x12a6}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fe3000/0x3000)=nil, 0x3000}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000200)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0, 0x8010, r2, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mlock(&(0x7f0000ff4000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000fe2000/0x2000)=nil) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) mlock(&(0x7f0000ff4000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000fe2000/0x2000)=nil) (async) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) syz_io_uring_setup(0x5a78, &(0x7f0000000180)={0x0, 0xe2e0, 0x400, 0x3, 0x1cd, 0x0, r0}, &(0x7f0000fe4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 1: syz_io_uring_setup(0xfffffffc, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x2, 0x199}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x12a6}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fe3000/0x3000)=nil, 0x3000}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000200)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0, 0x8010, r2, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x2, 0x199}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x12a6}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fe3000/0x3000)=nil, 0x3000}}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000200)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0, 0x8010, r2, 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:10 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_vlan\x00'}) 00:50:10 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000180)=0x5) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 1: syz_io_uring_setup(0xfffffffc, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:10 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_vlan\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_vlan\x00'}) (async) 00:50:10 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) syz_io_uring_setup(0x5a78, &(0x7f0000000180)={0x0, 0xe2e0, 0x400, 0x3, 0x1cd, 0x0, r0}, &(0x7f0000fe4000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x2, 0x199}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x12a6}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fe3000/0x3000)=nil, 0x3000}}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000200)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0, 0x8010, r2, 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 1: syz_io_uring_setup(0xfffffffc, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000180)=0x5) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_vlan\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_vlan\x00'}) (async) 00:50:10 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000fe0000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/136, 0x88, 0x1, &(0x7f0000000140)=""/84, 0x54}, &(0x7f0000000200)=0x40) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$binder(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r1, 0x4fdc5000) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000180)=0x5) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$snddsp(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x5000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r2, 0x0, {0x1}}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x3, {0x1, 0xf0, 0x1}, 0x1}, 0x18) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x2000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) mmap$snddsp(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x5000) (async, rerun: 64) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (rerun: 64) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) mmap$snddsp(&(0x7f0000fe7000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x5000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000fe0000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/136, 0x88, 0x1, &(0x7f0000000140)=""/84, 0x54}, &(0x7f0000000200)=0x40) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$binder(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r1, 0x4fdc5000) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) munlock(&(0x7f0000fe0000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/136, 0x88, 0x1, &(0x7f0000000140)=""/84, 0x54}, &(0x7f0000000200)=0x40) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$binder(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) (async) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r1, 0x4fdc5000) (async) 00:50:10 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x337d, &(0x7f0000000180)={0x0, 0x4003c, 0x8, 0x6, 0x82ec, 0x0, r3}, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ff2000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$tipc(r2, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x1ff}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="89c6ff2e00000078ecb2ccf50164f718be60976e61f600000066696c650300"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x4e00, &(0x7f0000000400)={0x0, 0x31, 0x4, 0x2, 0x1e3, 0x0, r0}, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:10 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000fe0000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/136, 0x88, 0x1, &(0x7f0000000140)=""/84, 0x54}, &(0x7f0000000200)=0x40) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$binder(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r1, 0x4fdc5000) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) munlock(&(0x7f0000fe0000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/136, 0x88, 0x1, &(0x7f0000000140)=""/84, 0x54}, &(0x7f0000000200)=0x40) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$binder(&(0x7f0000fe1000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) (async) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x1000003, 0x10, r1, 0x4fdc5000) (async) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/228, 0xe4, 0x0, &(0x7f00000002c0)=""/40, 0x28}, &(0x7f0000000340)=0x40) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x337d, &(0x7f0000000180)={0x0, 0x4003c, 0x8, 0x6, 0x82ec, 0x0, r3}, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ff2000/0x2000)=nil) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$tipc(r2, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x1ff}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="89c6ff2e00000078ecb2ccf50164f718be60976e61f600000066696c650300"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x4e00, &(0x7f0000000400)={0x0, 0x31, 0x4, 0x2, 0x1e3, 0x0, r0}, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) syz_io_uring_setup(0x337d, &(0x7f0000000180)={0x0, 0x4003c, 0x8, 0x6, 0x82ec, 0x0, r3}, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000002c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) (async) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ff2000/0x2000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) connect$tipc(r2, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x1ff}}, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="89c6ff2e00000078ecb2ccf50164f718be60976e61f600000066696c650300"]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) syz_io_uring_setup(0x4e00, &(0x7f0000000400)={0x0, 0x31, 0x4, 0x2, 0x1e3, 0x0, r0}, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) (async) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r2, 0x0, {0x1}}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x3, {0x1, 0xf0, 0x1}, 0x1}, 0x18) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x2000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/228, 0xe4, 0x0, &(0x7f00000002c0)=""/40, 0x28}, &(0x7f0000000340)=0x40) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000180)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/228, 0xe4, 0x0, &(0x7f00000002c0)=""/40, 0x28}, &(0x7f0000000340)=0x40) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000fde000/0x1000)=nil, 0x2) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) 00:50:10 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r2, 0x0, {0x1}}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x3, {0x1, 0xf0, 0x1}, 0x1}, 0x18) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x2000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 0: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) syz_io_uring_setup(0x337d, &(0x7f0000000180)={0x0, 0x4003c, 0x8, 0x6, 0x82ec, 0x0, r3}, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00000002c0), 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) (async) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ff2000/0x2000)=nil) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 32) connect$tipc(r2, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x1ff}}, 0x10) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="89c6ff2e00000078ecb2ccf50164f718be60976e61f600000066696c650300"]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) syz_io_uring_setup(0x4e00, &(0x7f0000000400)={0x0, 0x31, 0x4, 0x2, 0x1e3, 0x0, r0}, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 00:50:10 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) socketpair(0x21, 0x1, 0xb2e, &(0x7f0000000240)) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x7}, 0x2) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffffff7, 0x37, 0xb1a}) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000180)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000fef000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/228, 0xe4, 0x0, &(0x7f00000002c0)=""/40, 0x28}, &(0x7f0000000340)=0x40) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:10 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000fde000/0x1000)=nil, 0x2) (async, rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (rerun: 32) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) 00:50:10 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) socketpair(0x21, 0x1, 0xb2e, &(0x7f0000000240)) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x7}, 0x2) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (rerun: 32) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffffff7, 0x37, 0xb1a}) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:10 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000fde000/0x1000)=nil, 0x2) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000fde000/0x1000)=nil, 0x2) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) (async) 00:50:10 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa0, 0x464, 0x20, 0x70bd2b, 0x25dfdbfc, "a20cd80d54a997e51566a6897b6ce6523a3ec6cd1a79b148a61ad2ac85054c1176785414e4c608adbd1ff377e854b6a990f00c59fc501e01927aabbdc30a64241b19ecc723c6aab23e4c1c5864170a618217897deaa334576045c243892d012ae508dd2ea64462af927ba04af3b9baa50dd25c6117ae73dcf8641aa2edcdb43fd7b4c026b306c579f66e8ea718", ["", ""]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x100) 00:50:10 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:10 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) socketpair(0x21, 0x1, 0xb2e, &(0x7f0000000240)) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x2, 0x7}, 0x2) (async, rerun: 32) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffffff7, 0x37, 0xb1a}) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:11 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = socket$nl_rdma(0x10, 0x3, 0x14) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xaf0, &(0x7f0000ff4000/0x4000)=nil, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x8010, r1, 0x7da1e000) 00:50:11 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa0, 0x464, 0x20, 0x70bd2b, 0x25dfdbfc, "a20cd80d54a997e51566a6897b6ce6523a3ec6cd1a79b148a61ad2ac85054c1176785414e4c608adbd1ff377e854b6a990f00c59fc501e01927aabbdc30a64241b19ecc723c6aab23e4c1c5864170a618217897deaa334576045c243892d012ae508dd2ea64462af927ba04af3b9baa50dd25c6117ae73dcf8641aa2edcdb43fd7b4c026b306c579f66e8ea718", ["", ""]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x100) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa0, 0x464, 0x20, 0x70bd2b, 0x25dfdbfc, "a20cd80d54a997e51566a6897b6ce6523a3ec6cd1a79b148a61ad2ac85054c1176785414e4c608adbd1ff377e854b6a990f00c59fc501e01927aabbdc30a64241b19ecc723c6aab23e4c1c5864170a618217897deaa334576045c243892d012ae508dd2ea64462af927ba04af3b9baa50dd25c6117ae73dcf8641aa2edcdb43fd7b4c026b306c579f66e8ea718", ["", ""]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x100) (async) 00:50:11 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'veth1_vlan\x00'}) 00:50:11 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xaf0, &(0x7f0000ff4000/0x4000)=nil, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x8010, r1, 0x7da1e000) 00:50:11 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x5}) syz_io_uring_setup(0x731f, &(0x7f0000000200)={0x0, 0x15a, 0x40, 0x1, 0x38d, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000b54000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mremap(&(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) 00:50:11 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = socket$nl_rdma(0x10, 0x3, 0x14) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xaf0, &(0x7f0000ff4000/0x4000)=nil, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x8010, r1, 0x7da1e000) 00:50:11 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa0, 0x464, 0x20, 0x70bd2b, 0x25dfdbfc, "a20cd80d54a997e51566a6897b6ce6523a3ec6cd1a79b148a61ad2ac85054c1176785414e4c608adbd1ff377e854b6a990f00c59fc501e01927aabbdc30a64241b19ecc723c6aab23e4c1c5864170a618217897deaa334576045c243892d012ae508dd2ea64462af927ba04af3b9baa50dd25c6117ae73dcf8641aa2edcdb43fd7b4c026b306c579f66e8ea718", ["", ""]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x100) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000180), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa0, 0x464, 0x20, 0x70bd2b, 0x25dfdbfc, "a20cd80d54a997e51566a6897b6ce6523a3ec6cd1a79b148a61ad2ac85054c1176785414e4c608adbd1ff377e854b6a990f00c59fc501e01927aabbdc30a64241b19ecc723c6aab23e4c1c5864170a618217897deaa334576045c243892d012ae508dd2ea64462af927ba04af3b9baa50dd25c6117ae73dcf8641aa2edcdb43fd7b4c026b306c579f66e8ea718", ["", ""]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x100) (async) 00:50:11 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r2 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fe2000/0x1000)=nil, 0x1000, 0x2000009, 0xa2830, r2, 0x10000000) remap_file_pages(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x9, 0x4, 0x4000000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x5}) (async, rerun: 64) syz_io_uring_setup(0x731f, &(0x7f0000000200)={0x0, 0x15a, 0x40, 0x1, 0x38d, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000b54000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async, rerun: 64) mremap(&(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) 00:50:11 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = socket$nl_rdma(0x10, 0x3, 0x14) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xaf0, &(0x7f0000ff4000/0x4000)=nil, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x8010, r1, 0x7da1e000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xaf0, &(0x7f0000ff4000/0x4000)=nil, 0x3) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, 0x0, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x8010, r1, 0x7da1e000) (async) 00:50:11 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000340)=0x1, 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f00000001c0), &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ff0748ce2ac1e0c6dc80fd9d6804650db447c416178d92c946d1bf5aad16cb2cc31543b0435a200f6f4164720fb741d8505e64f20e8aafa308088f13759871db96854577ec40df6ff43cef5347be4c96", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) io_uring_setup(0x44c2, &(0x7f0000000240)={0x0, 0xe3aa, 0x8, 0x1, 0x395, 0x0, r1}) munmap(&(0x7f0000fe2000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 00:50:11 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x5}) (async) syz_io_uring_setup(0x731f, &(0x7f0000000200)={0x0, 0x15a, 0x40, 0x1, 0x38d, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000b54000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mremap(&(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) 00:50:11 executing program 1: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x7851, &(0x7f0000000000)={0x0, 0x3, 0x80, 0x0, 0x13, 0x0, r3}, &(0x7f0000fdf000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:11 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000340)=0x1, 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f00000001c0), &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ff0748ce2ac1e0c6dc80fd9d6804650db447c416178d92c946d1bf5aad16cb2cc31543b0435a200f6f4164720fb741d8505e64f20e8aafa308088f13759871db96854577ec40df6ff43cef5347be4c96", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) (async, rerun: 32) io_uring_setup(0x44c2, &(0x7f0000000240)={0x0, 0xe3aa, 0x8, 0x1, 0x395, 0x0, r1}) munmap(&(0x7f0000fe2000/0x3000)=nil, 0x3000) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 00:50:11 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_io_uring_setup(0x768c, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x314}, &(0x7f0000fe3000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:11 executing program 4: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="e100ff030000000000004939", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = syz_io_uring_setup(0x53b6, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x24c, 0x0, r1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000280)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x10000000) 00:50:11 executing program 1: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 64) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) syz_io_uring_setup(0x7851, &(0x7f0000000000)={0x0, 0x3, 0x80, 0x0, 0x13, 0x0, r3}, &(0x7f0000fdf000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000340)=0x1, 0x4) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f00000001c0), &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ff0748ce2ac1e0c6dc80fd9d6804650db447c416178d92c946d1bf5aad16cb2cc31543b0435a200f6f4164720fb741d8505e64f20e8aafa308088f13759871db96854577ec40df6ff43cef5347be4c96", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) io_uring_setup(0x44c2, &(0x7f0000000240)={0x0, 0xe3aa, 0x8, 0x1, 0x395, 0x0, r1}) munmap(&(0x7f0000fe2000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000340)=0x1, 0x4) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f00000001c0), &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ff0748ce2ac1e0c6dc80fd9d6804650db447c416178d92c946d1bf5aad16cb2cc31543b0435a200f6f4164720fb741d8505e64f20e8aafa308088f13759871db96854577ec40df6ff43cef5347be4c96", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) (async) io_uring_setup(0x44c2, &(0x7f0000000240)={0x0, 0xe3aa, 0x8, 0x1, 0x395, 0x0, r1}) (async) munmap(&(0x7f0000fe2000/0x3000)=nil, 0x3000) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) 00:50:11 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async, rerun: 32) syz_io_uring_setup(0x768c, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x314}, &(0x7f0000fe3000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 32) 00:50:11 executing program 1: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x7851, &(0x7f0000000000)={0x0, 0x3, 0x80, 0x0, 0x13, 0x0, r3}, &(0x7f0000fdf000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) (async) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) syz_io_uring_setup(0x7851, &(0x7f0000000000)={0x0, 0x3, 0x80, 0x0, 0x13, 0x0, r3}, &(0x7f0000fdf000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) 00:50:11 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2, 0x3013, 0xffffffffffffffff, 0x82000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xa4cd, 0x800, 0x0, 0x2000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) socket$can_raw(0x1d, 0x3, 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) syz_io_uring_setup(0x17c1, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x1, 0x0, 0x0, r0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x3, 0x2, {0x1, 0x0, 0x3}, {0x2, 0xff, 0x2}, 0x1}, {0x3, 0x0, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0xff, 0xff}, {0x3, 0x3, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x2}, 0x1, 0x3}, {0x3, 0x3, {0x1, 0xf0, 0x2}, {0x3, 0xf1, 0x4}, 0xfe, 0xff}, {0x1, 0x1, {0x2, 0x0, 0x4}, {}, 0x0, 0xfd}, {0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x3}, 0xfe}, {0x3, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x3}, 0x3, 0xff}, {0x1, 0x1, {0x1, 0xf0, 0x2}, {0x1, 0xff, 0x3}, 0x0, 0x1}, {0x3, 0x2, {0x1, 0xff, 0x1}, {0x0, 0xff, 0x3}, 0x1, 0xfd}], 0x120) mmap$usbfs(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x3, 0x40092, 0xffffffffffffffff, 0x20) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'pimreg0\x00', 0x7ff}) 00:50:11 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fed000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mmap$snddsp_status(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2, 0x3013, 0xffffffffffffffff, 0x82000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xa4cd, 0x800, 0x0, 0x2000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) (async) syz_io_uring_setup(0x17c1, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x1, 0x0, 0x0, r0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) syz_io_uring_setup(0x768c, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x314}, &(0x7f0000fe3000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:11 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x250c0000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:11 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2, 0x3013, 0xffffffffffffffff, 0x82000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xa4cd, 0x800, 0x0, 0x2000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) (async) syz_io_uring_setup(0x17c1, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x1, 0x0, 0x0, r0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x3, 0x2, {0x1, 0x0, 0x3}, {0x2, 0xff, 0x2}, 0x1}, {0x3, 0x0, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0xff, 0xff}, {0x3, 0x3, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x2}, 0x1, 0x3}, {0x3, 0x3, {0x1, 0xf0, 0x2}, {0x3, 0xf1, 0x4}, 0xfe, 0xff}, {0x1, 0x1, {0x2, 0x0, 0x4}, {}, 0x0, 0xfd}, {0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x3}, 0xfe}, {0x3, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x3}, 0x3, 0xff}, {0x1, 0x1, {0x1, 0xf0, 0x2}, {0x1, 0xff, 0x3}, 0x0, 0x1}, {0x3, 0x2, {0x1, 0xff, 0x1}, {0x0, 0xff, 0x3}, 0x1, 0xfd}], 0x120) mmap$usbfs(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x3, 0x40092, 0xffffffffffffffff, 0x20) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'pimreg0\x00', 0x7ff}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x3, 0x2, {0x1, 0x0, 0x3}, {0x2, 0xff, 0x2}, 0x1}, {0x3, 0x0, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0xff, 0xff}, {0x3, 0x3, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x2}, 0x1, 0x3}, {0x3, 0x3, {0x1, 0xf0, 0x2}, {0x3, 0xf1, 0x4}, 0xfe, 0xff}, {0x1, 0x1, {0x2, 0x0, 0x4}, {}, 0x0, 0xfd}, {0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x3}, 0xfe}, {0x3, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x3}, 0x3, 0xff}, {0x1, 0x1, {0x1, 0xf0, 0x2}, {0x1, 0xff, 0x3}, 0x0, 0x1}, {0x3, 0x2, {0x1, 0xff, 0x1}, {0x0, 0xff, 0x3}, 0x1, 0xfd}], 0x120) (async) mmap$usbfs(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x3, 0x40092, 0xffffffffffffffff, 0x20) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'pimreg0\x00', 0x7ff}) (async) 00:50:11 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x3, 0x2, {0x1, 0x0, 0x3}, {0x2, 0xff, 0x2}, 0x1}, {0x3, 0x0, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0xff, 0xff}, {0x3, 0x3, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x2}, 0x1, 0x3}, {0x3, 0x3, {0x1, 0xf0, 0x2}, {0x3, 0xf1, 0x4}, 0xfe, 0xff}, {0x1, 0x1, {0x2, 0x0, 0x4}, {}, 0x0, 0xfd}, {0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x3}, 0xfe}, {0x3, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x3}, 0x3, 0xff}, {0x1, 0x1, {0x1, 0xf0, 0x2}, {0x1, 0xff, 0x3}, 0x0, 0x1}, {0x3, 0x2, {0x1, 0xff, 0x1}, {0x0, 0xff, 0x3}, 0x1, 0xfd}], 0x120) mmap$usbfs(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x3, 0x40092, 0xffffffffffffffff, 0x20) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'pimreg0\x00', 0x7ff}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x3, 0x2, {0x1, 0x0, 0x3}, {0x2, 0xff, 0x2}, 0x1}, {0x3, 0x0, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0xff, 0xff}, {0x3, 0x3, {0x2, 0xff, 0x4}, {0x0, 0x1, 0x2}, 0x1, 0x3}, {0x3, 0x3, {0x1, 0xf0, 0x2}, {0x3, 0xf1, 0x4}, 0xfe, 0xff}, {0x1, 0x1, {0x2, 0x0, 0x4}, {}, 0x0, 0xfd}, {0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x3}, 0xfe}, {0x3, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x3}, 0x3, 0xff}, {0x1, 0x1, {0x1, 0xf0, 0x2}, {0x1, 0xff, 0x3}, 0x0, 0x1}, {0x3, 0x2, {0x1, 0xff, 0x1}, {0x0, 0xff, 0x3}, 0x1, 0xfd}], 0x120) (async) mmap$usbfs(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x3, 0x40092, 0xffffffffffffffff, 0x20) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000001c0)={'pimreg0\x00', 0x7ff}) (async) 00:50:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0xfffffffa}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:50:11 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x1000005, 0x12, r0, 0x10000000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff2000/0x3000)=nil) 00:50:11 executing program 4: syz_io_uring_setup(0x3fcf, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:11 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:11 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x1000005, 0x12, r0, 0x10000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x1000005, 0x12, r0, 0x10000000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$usbfs(&(0x7f0000fde000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r0, 0x2) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0xfffffffa}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) 00:50:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff2000/0x3000)=nil) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) (async) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff2000/0x3000)=nil) (async) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff2000/0x3000)=nil) 00:50:12 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$usbfs(&(0x7f0000fde000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r0, 0x2) (async) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0xfffffffa}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) syz_io_uring_setup(0x3fd3, &(0x7f0000000200), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x8, 0xfffffffa}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) (async) 00:50:12 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x10000000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x2, &(0x7f0000ffd000/0x3000)=nil, 0x7) r1 = syz_io_uring_setup(0x136b, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) munmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe0000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3}) 00:50:12 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x3e7}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000000), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) r1 = socket$isdn(0x22, 0x3, 0x10) r2 = socket(0x84c7fcc42a4caf9a, 0xe, 0xfffffc01) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x37a, &(0x7f0000000300)={0x0, 0x800000, 0x40, 0x403, 0x2a1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$usbfs(&(0x7f0000fde000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r0, 0x2) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$usbfs(&(0x7f0000fde000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r0, 0x2) (async) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) (async) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff2000/0x3000)=nil) 00:50:12 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x10000000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x2, &(0x7f0000ffd000/0x3000)=nil, 0x7) r1 = syz_io_uring_setup(0x136b, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) munmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe0000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3}) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x10000000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x2, &(0x7f0000ffd000/0x3000)=nil, 0x7) (async) syz_io_uring_setup(0x136b, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) (async) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) munmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe0000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r0, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3}) (async) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x3e7}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000000), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) r1 = socket$isdn(0x22, 0x3, 0x10) r2 = socket(0x84c7fcc42a4caf9a, 0xe, 0xfffffc01) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x37a, &(0x7f0000000300)={0x0, 0x800000, 0x40, 0x403, 0x2a1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x3e7}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000000), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) (async) socket$isdn(0x22, 0x3, 0x10) (async) socket(0x84c7fcc42a4caf9a, 0xe, 0xfffffc01) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async) syz_io_uring_setup(0x37a, &(0x7f0000000300)={0x0, 0x800000, 0x40, 0x403, 0x2a1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) (async) 00:50:12 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) (async) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff2000/0x3000)=nil) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000fde000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) r0 = socket(0x8, 0x3, 0x3) sendto$isdn(r0, &(0x7f0000000080)={0x7, 0x7fffffff, "01441561592def4735c2d40a03a9b818fa51eaab2822f485a391a355ff4a0fb87a3f6caebd60d8a0dd5c06bf081036a6b650232a82bf43a5ebee8cd71b155637e37ecf48c631aeb4ddee3209f7fce89e241f02c820dcfbcbd310cc9344a9d9bb4db43a35f81a4f00798a31f655771cc069071de8c0d54d334089267da45194569b9a9d401b301b4acf3f886c5eb417518356400ea355b5b8d3ccbd4f3d5615392b67ee2d42c52b9e412d45714c88712df6cb"}, 0xba, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:12 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff2000/0x3000)=nil) 00:50:12 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0x10000000}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x2, &(0x7f0000ffd000/0x3000)=nil, 0x7) (async) r1 = syz_io_uring_setup(0x136b, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) munmap(&(0x7f0000fe5000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000fe0000/0x3000)=nil, 0x3000, 0x2000004, 0x10, r0, 0x0) (async, rerun: 64) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x3}) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x3e7}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000000), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) r1 = socket$isdn(0x22, 0x3, 0x10) r2 = socket(0x84c7fcc42a4caf9a, 0xe, 0xfffffc01) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_io_uring_setup(0x37a, &(0x7f0000000300)={0x0, 0x800000, 0x40, 0x403, 0x2a1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x3e7}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000000), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x80) (async) socket$isdn(0x22, 0x3, 0x10) (async) socket(0x84c7fcc42a4caf9a, 0xe, 0xfffffc01) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async) syz_io_uring_setup(0x37a, &(0x7f0000000300)={0x0, 0x800000, 0x40, 0x403, 0x2a1}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fdf000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000001c0)) (async) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000fde000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) r0 = socket(0x8, 0x3, 0x3) sendto$isdn(r0, &(0x7f0000000080)={0x7, 0x7fffffff, "01441561592def4735c2d40a03a9b818fa51eaab2822f485a391a355ff4a0fb87a3f6caebd60d8a0dd5c06bf081036a6b650232a82bf43a5ebee8cd71b155637e37ecf48c631aeb4ddee3209f7fce89e241f02c820dcfbcbd310cc9344a9d9bb4db43a35f81a4f00798a31f655771cc069071de8c0d54d334089267da45194569b9a9d401b301b4acf3f886c5eb417518356400ea355b5b8d3ccbd4f3d5615392b67ee2d42c52b9e412d45714c88712df6cb"}, 0xba, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (rerun: 32) 00:50:12 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:12 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x21001000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000fde000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) r0 = socket(0x8, 0x3, 0x3) sendto$isdn(r0, &(0x7f0000000080)={0x7, 0x7fffffff, "01441561592def4735c2d40a03a9b818fa51eaab2822f485a391a355ff4a0fb87a3f6caebd60d8a0dd5c06bf081036a6b650232a82bf43a5ebee8cd71b155637e37ecf48c631aeb4ddee3209f7fce89e241f02c820dcfbcbd310cc9344a9d9bb4db43a35f81a4f00798a31f655771cc069071de8c0d54d334089267da45194569b9a9d401b301b4acf3f886c5eb417518356400ea355b5b8d3ccbd4f3d5615392b67ee2d42c52b9e412d45714c88712df6cb"}, 0xba, 0x0, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:12 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:12 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = io_uring_setup(0x8ef, &(0x7f0000000180)={0x0, 0x310f, 0x20, 0x0, 0x375, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000c, 0x40010, r1, 0x0) syz_io_uring_setup(0x4533, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x34b, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x1cd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000fdd000/0x4000)=nil, 0x4000}, 0x2}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ff8000/0x3000)=nil) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 32) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:12 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x1cd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (rerun: 64) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000fdd000/0x4000)=nil, 0x4000}, 0x2}) (async, rerun: 32) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ff8000/0x3000)=nil) 00:50:12 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80800) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:12 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x1cd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000fdd000/0x4000)=nil, 0x4000}, 0x2}) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x1cd}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000fdd000/0x4000)=nil, 0x4000}, 0x2}) (async) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) (async) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ff8000/0x3000)=nil) (async) 00:50:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:12 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) (async, rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (rerun: 32) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80800) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:12 executing program 3: syz_io_uring_setup(0x2a04, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000180), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:12 executing program 3: r0 = socket(0xb, 0x2, 0x4) connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}, 0x4}}, 0x10) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x7329, &(0x7f0000000200)={0x0, 0x7ae3, 0x40, 0x3, 0x303}, &(0x7f0000fe0000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000280)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x28ba, &(0x7f00000002c0)={0x0, 0xb902, 0x1, 0x2, 0x106, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) connect$tipc(r1, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f00000000c0)) 00:50:12 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:12 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x22040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, r1, 0x0) syz_io_uring_setup(0x69c9, &(0x7f0000000080)={0x0, 0x3a8f, 0x400, 0x2, 0x1e2, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000200)=""/233, 0xe9}, &(0x7f0000000300), 0x8}, 0x20) 00:50:12 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:12 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:12 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x7329, &(0x7f0000000200)={0x0, 0x7ae3, 0x40, 0x3, 0x303}, &(0x7f0000fe0000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x28ba, &(0x7f00000002c0)={0x0, 0xb902, 0x1, 0x2, 0x106, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) connect$tipc(r1, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f00000000c0)) 00:50:12 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mlock(&(0x7f0000fdf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:12 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x22040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, r1, 0x0) syz_io_uring_setup(0x69c9, &(0x7f0000000080)={0x0, 0x3a8f, 0x400, 0x2, 0x1e2, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000200)=""/233, 0xe9}, &(0x7f0000000300), 0x8}, 0x20) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x7329, &(0x7f0000000200)={0x0, 0x7ae3, 0x40, 0x3, 0x303}, &(0x7f0000fe0000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x28ba, &(0x7f00000002c0)={0x0, 0xb902, 0x1, 0x2, 0x106, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) connect$tipc(r1, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400), &(0x7f00000000c0)) 00:50:13 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000180)) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x22040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, r1, 0x0) syz_io_uring_setup(0x69c9, &(0x7f0000000080)={0x0, 0x3a8f, 0x400, 0x2, 0x1e2, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f0000000200)=""/233, 0xe9}, &(0x7f0000000300), 0x8}, 0x20) 00:50:13 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = inotify_init1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x25a0}}, '\x00'}) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) 00:50:13 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xf25d, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$xdp(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2670, &(0x7f00000001c0)={0x0, 0xd818, 0x80, 0x2, 0x63, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x22040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, r1, 0x0) syz_io_uring_setup(0x69c9, &(0x7f0000000080)={0x0, 0x3a8f, 0x400, 0x2, 0x1e2, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = inotify_init1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x25a0}}, '\x00'}) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) inotify_init1(0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x25a0}}, '\x00'}) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) (async) 00:50:13 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$usbmon(&(0x7f0000fe7000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x4) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x1a, 0xa, 0x4, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x18}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x28}}, 0x0) bind$isdn(r1, &(0x7f00000001c0)={0x22, 0x1, 0x8, 0x3, 0x20}, 0x6) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6000005, 0x20010, r0, 0x54b64000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x22040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, r1, 0x0) syz_io_uring_setup(0x69c9, &(0x7f0000000080)={0x0, 0x3a8f, 0x400, 0x2, 0x1e2, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = inotify_init1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x25a0}}, '\x00'}) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) inotify_init1(0x80000) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x25a0}}, '\x00'}) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) (async) 00:50:13 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x22040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, r0, 0x0) [ 3013.445982][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:50:13 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3dc5, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800000, 0x6, &(0x7f0000800000/0x800000)=nil) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x8010, 0xffffffffffffffff, 0x1) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000e19000/0x2000)=nil, 0x2000}}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f00008e7000/0x3000)=nil, 0x3000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000e77000/0x2000)=nil, 0x2000, 0x8, 0x10010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="01078c000100000018000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000180)) 00:50:13 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000002c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:13 executing program 4: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3dc5, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800000, 0x6, &(0x7f0000800000/0x800000)=nil) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x8010, 0xffffffffffffffff, 0x1) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000e19000/0x2000)=nil, 0x2000}}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f00008e7000/0x3000)=nil, 0x3000) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000e77000/0x2000)=nil, 0x2000, 0x8, 0x10010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="01078c000100000018000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000180)) 00:50:13 executing program 5: syz_io_uring_setup(0x1c0e, &(0x7f0000000000)={0x0, 0xcf46}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 3: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3dc5, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800000, 0x6, &(0x7f0000800000/0x800000)=nil) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x8010, 0xffffffffffffffff, 0x1) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000e19000/0x2000)=nil, 0x2000}}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f00008e7000/0x3000)=nil, 0x3000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000e77000/0x2000)=nil, 0x2000, 0x8, 0x10010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="01078c000100000018000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000180)) [ 3013.619331][ T1386] ieee802154 phy0 wpan0: encryption failed: -22 [ 3013.621050][ T1386] ieee802154 phy1 wpan1: encryption failed: -22 00:50:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:13 executing program 5: syz_io_uring_setup(0x1c0e, &(0x7f0000000000)={0x0, 0xcf46}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x1c0e, &(0x7f0000000000)={0x0, 0xcf46}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:13 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:13 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x3dc5, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800000, 0x6, &(0x7f0000800000/0x800000)=nil) (async) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x8010, 0xffffffffffffffff, 0x1) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000e19000/0x2000)=nil, 0x2000}}) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f00008e7000/0x3000)=nil, 0x3000) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000e77000/0x2000)=nil, 0x2000, 0x8, 0x10010, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="01078c000100000018000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000180)) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 5: syz_io_uring_setup(0x1c0e, &(0x7f0000000000)={0x0, 0xcf46}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:13 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ff0000/0x3000)=nil, 0x3000}}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mremap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 00:50:13 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x611, &(0x7f0000000200)={0x0, 0x4f87, 0x10, 0x2, 0x37b, 0x0, r0}, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mmap$IORING_OFF_SQES(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x4, 0x4000010, 0xffffffffffffffff, 0x10000000) 00:50:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x5f5f, &(0x7f00000002c0)={0x0, 0xb9ef, 0x400, 0x1, 0x2b4, 0x0, r2}, &(0x7f0000f71000/0x2000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:13 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x300000d2}, 0x40000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ff1000/0x1000)=nil, 0x1000}, 0x1}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000280)=0x5) munmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000) 00:50:13 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x611, &(0x7f0000000200)={0x0, 0x4f87, 0x10, 0x2, 0x37b, 0x0, r0}, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) mmap$IORING_OFF_SQES(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x4, 0x4000010, 0xffffffffffffffff, 0x10000000) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:13 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x611, &(0x7f0000000200)={0x0, 0x4f87, 0x10, 0x2, 0x37b, 0x0, r0}, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) mmap$IORING_OFF_SQES(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x4, 0x4000010, 0xffffffffffffffff, 0x10000000) 00:50:13 executing program 1: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:13 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ff0000/0x3000)=nil, 0x3000}}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:13 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000fe5000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x768d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x55}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:14 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x300000d2}, 0x40000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ff1000/0x1000)=nil, 0x1000}, 0x1}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000280)=0x5) munmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x300000d2}, 0x40000) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ff1000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000280)=0x5) (async) munmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000) (async) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x5f5f, &(0x7f00000002c0)={0x0, 0xb9ef, 0x400, 0x1, 0x2b4, 0x0, r2}, &(0x7f0000f71000/0x2000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 1: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munlock(&(0x7f0000fe5000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x768d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x55}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) munlock(&(0x7f0000fe5000/0x4000)=nil, 0x4000) (async) syz_io_uring_setup(0x768d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x55}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:14 executing program 1: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x5f5f, &(0x7f00000002c0)={0x0, 0xb9ef, 0x400, 0x1, 0x2b4, 0x0, r2}, &(0x7f0000f71000/0x2000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ff0000/0x3000)=nil, 0x3000}}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) munlock(&(0x7f0000fe5000/0x4000)=nil, 0x4000) (async) syz_io_uring_setup(0x768d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x55}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:14 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1412, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x300000d2}, 0x40000) (async, rerun: 32) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ff1000/0x1000)=nil, 0x1000}, 0x1}) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000280)=0x5) (async, rerun: 64) munmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000) 00:50:14 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) syz_io_uring_setup(0x5f5f, &(0x7f00000002c0)={0x0, 0xb9ef, 0x400, 0x1, 0x2b4, 0x0, r2}, &(0x7f0000f71000/0x2000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 00:50:14 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x102}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0xca64}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x200000a, 0x2010, r0, 0x10000000) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c5a, &(0x7f00000003c0)={0x0, 0x6d24, 0x80, 0x3, 0x22e}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x666e, &(0x7f0000000180)={0x0, 0x57c3, 0x20, 0x0, 0x369, 0x0, r1}, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x582, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x102}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0xca64}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x200000a, 0x2010, r0, 0x10000000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x102}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0xca64}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) mmap$IORING_OFF_SQES(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x200000a, 0x2010, r0, 0x10000000) (async) 00:50:14 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r1 = syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x102}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0xca64}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000fe5000/0x1000)=nil, 0x1000, 0x200000a, 0x2010, r0, 0x10000000) (rerun: 32) 00:50:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x4c5a, &(0x7f00000003c0)={0x0, 0x6d24, 0x80, 0x3, 0x22e}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x666e, &(0x7f0000000180)={0x0, 0x57c3, 0x20, 0x0, 0x369, 0x0, r1}, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x582, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:14 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4c5a, &(0x7f00000003c0)={0x0, 0x6d24, 0x80, 0x3, 0x22e}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x666e, &(0x7f0000000180)={0x0, 0x57c3, 0x20, 0x0, 0x369, 0x0, r1}, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x582, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) syz_io_uring_setup(0x4c5a, &(0x7f00000003c0)={0x0, 0x6d24, 0x80, 0x3, 0x22e}, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480)) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0x666e, &(0x7f0000000180)={0x0, 0x57c3, 0x20, 0x0, 0x369, 0x0, r1}, &(0x7f0000fe4000/0x3000)=nil, &(0x7f0000fe0000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x582, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140b, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:14 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f00000002c0), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x151a, &(0x7f0000000200)={0x0, 0x931b, 0x80, 0x1, 0x299, 0x0, r0}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe0000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) munlock(&(0x7f0000ff1000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd, 0x0, r3}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:14 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:14 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:14 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:50:14 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f00000002c0), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x151a, &(0x7f0000000200)={0x0, 0x931b, 0x80, 0x1, 0x299, 0x0, r0}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe0000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) munlock(&(0x7f0000ff1000/0x1000)=nil, 0x1000) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:15 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd, 0x0, r3}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) (async) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd, 0x0, r3}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) 00:50:15 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f00000002c0), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x151a, &(0x7f0000000200)={0x0, 0x931b, 0x80, 0x1, 0x299, 0x0, r0}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe0000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) munlock(&(0x7f0000ff1000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f00000002c0), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x151a, &(0x7f0000000200)={0x0, 0x931b, 0x80, 0x1, 0x299, 0x0, r0}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fe0000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) (async) munlock(&(0x7f0000ff1000/0x1000)=nil, 0x1000) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:15 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:50:15 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:15 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000fe6000/0x14000)=nil) 00:50:15 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:50:15 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:15 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd, 0x0, r3}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:15 executing program 5: syz_io_uring_setup(0x3fd6, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:15 executing program 5: syz_io_uring_setup(0x3fd6, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:15 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) (async) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd, 0x0, r3}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:15 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd, 0x0, r3}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:15 executing program 5: syz_io_uring_setup(0x3fd6, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x4000031, 0xffffffffffffffff, 0x0) 00:50:15 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) io_uring_setup(0x1721, &(0x7f0000000200)={0x0, 0xd220, 0x8, 0x2, 0x58, 0x0, r0}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="0000f91e5206419c10077f7074a3b70037f4e1c8a6ebca11a80b9477113682cd062ab8e10e7db75f6e960711cdde4d09567aace7803a50d853cf0000dd2805596aae1029d6777493b6ffddae6d27419f20bbdb9fea871339ee79c2f974616f5de091ce58b202a8a1de5615a129c5b15e1621c3d099a24dfd11f8208d1a980273d68a0a3952b4846a9a5d4bd531ab5753b751d217747c0b30fb2a1b6c06617a06c61906379ec3b1a0658bf5f2f145875f7a6354ee9bcf3ad17cd55122", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300072233d8a9677ddb06bd94eb4ebadb91b381b07d9666c702cf77fae1adad3b3160ebcfd76d98c071002dfa0860a7312503e58c84aaba3e8b6ba9d28d3b94ce0ff6887b2ef2868ad4f5ea182b5fa47585e49b88e7b44c213087536ed0afc"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80800) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fd8000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/148, 0x94, 0x1, &(0x7f0000000180)=""/187, 0xbb}, &(0x7f0000000280)=0x40) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:15 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x140f, 0x2, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x60, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x0, 0x10015e}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$binder(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) 00:50:15 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd, 0x0, r3}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:15 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:15 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) io_uring_setup(0x1721, &(0x7f0000000200)={0x0, 0xd220, 0x8, 0x2, 0x58, 0x0, r0}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) io_uring_setup(0x1721, &(0x7f0000000200)={0x0, 0xd220, 0x8, 0x2, 0x58, 0x0, r0}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:15 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x281780, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x6fd3, &(0x7f0000000180)={0x0, 0x6433, 0x0, 0x0, 0x2af, 0x0, r0}, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:15 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd, 0x0, r3}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:15 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) io_uring_setup(0x1721, &(0x7f0000000200)={0x0, 0xd220, 0x8, 0x2, 0x58, 0x0, r0}) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x140f, 0x2, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x60, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x0, 0x10015e}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$binder(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) 00:50:15 executing program 0: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:15 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:15 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1500}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 0: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:15 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:15 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x140f, 0x2, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x60, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x0, 0x10015e}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$binder(&(0x7f0000fe0000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x1) 00:50:15 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000200)) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:15 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x1000, 0xb, &(0x7f0000ff3000/0x1000)=nil) 00:50:15 executing program 0: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000200)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:15 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x80}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00/file0\x00']) 00:50:15 executing program 4: syz_io_uring_setup(0x3fd2, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ff8000/0x4000)=nil) syz_io_uring_setup(0x41, &(0x7f0000000080), &(0x7f0000fe0000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) 00:50:15 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:15 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:15 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:16 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x440a, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:16 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc00}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:16 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x80}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00/file0\x00']) syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x80}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00/file0\x00']) (async) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x3a) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x440a, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000fe2000/0x4000)=nil, 0x4000}}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:16 executing program 3: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x80}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00/file0\x00']) syz_io_uring_setup(0x3fd3, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x80}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fed000/0x10000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00/file0\x00']) (async) 00:50:16 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x440a, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) socket$nl_rdma(0x10, 0x3, 0x14) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x900}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:16 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:16 executing program 3: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7000}) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 4: r0 = syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") mmap$binder(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="03000000000000002e2f66696c653100"]) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/186, 0xba, 0x1, &(0x7f0000000280)=""/191, 0xbf}, &(0x7f00000003c0)=0x40) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f00000001c0)={0x0, 0xd6ee, 0x80, 0x0, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66698965300084b78eaf19a342cfaeb000"]) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) 00:50:16 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 4: r0 = syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") mmap$binder(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="03000000000000002e2f66696c653100"]) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/186, 0xba, 0x1, &(0x7f0000000280)=""/191, 0xbf}, &(0x7f00000003c0)=0x40) 00:50:16 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800000038ff40fc10216ec38a93e682ab017a9baa73a18a01556b3b284f59e06bc12042c07b53eb4ab2e67a2cd13fa2565a3d18734ef4c158ed8afb272f033b50fc030ede822a724ac2dd46d876613c884f643f7d9806395da26eb2b9f495ec55ee7ae3fdb5fb40caa200", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x901) syz_io_uring_setup(0x243, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000080), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$binder(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1000, 0x4) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 3: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 4: r0 = syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") mmap$binder(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="03000000000000002e2f66696c653100"]) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/186, 0xba, 0x1, &(0x7f0000000280)=""/191, 0xbf}, &(0x7f00000003c0)=0x40) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800000038ff40fc10216ec38a93e682ab017a9baa73a18a01556b3b284f59e06bc12042c07b53eb4ab2e67a2cd13fa2565a3d18734ef4c158ed8afb272f033b50fc030ede822a724ac2dd46d876613c884f643f7d9806395da26eb2b9f495ec55ee7ae3fdb5fb40caa200", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) (async, rerun: 64) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x901) (async, rerun: 64) syz_io_uring_setup(0x243, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000080), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$binder(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1000, 0x4) 00:50:16 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f00000001c0)={0x0, 0xd6ee, 0x80, 0x0, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66698965300084b78eaf19a342cfaeb000"]) (async, rerun: 64) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) (rerun: 64) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800000038ff40fc10216ec38a93e682ab017a9baa73a18a01556b3b284f59e06bc12042c07b53eb4ab2e67a2cd13fa2565a3d18734ef4c158ed8afb272f033b50fc030ede822a724ac2dd46d876613c884f643f7d9806395da26eb2b9f495ec55ee7ae3fdb5fb40caa200", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x901) syz_io_uring_setup(0x243, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000080), 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) mmap$binder(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1000, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800000038ff40fc10216ec38a93e682ab017a9baa73a18a01556b3b284f59e06bc12042c07b53eb4ab2e67a2cd13fa2565a3d18734ef4c158ed8afb272f033b50fc030ede822a724ac2dd46d876613c884f643f7d9806395da26eb2b9f495ec55ee7ae3fdb5fb40caa200", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) (async) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x901) (async) syz_io_uring_setup(0x243, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000080), 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) mmap$binder(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x1000, 0x4) (async) 00:50:16 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:16 executing program 4: r0 = syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") mmap$binder(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="03000000000000002e2f66696c653100"]) 00:50:16 executing program 2: r0 = syz_io_uring_setup(0x3fd3, &(0x7f00000001c0)={0x0, 0xd6ee, 0x80, 0x0, 0x2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66698965300084b78eaf19a342cfaeb000"]) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") mmap$binder(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) 00:50:16 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000080), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff6000/0x3000)=nil, 0x3000}) clock_gettime(0x4, &(0x7f0000000200)) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") mmap$binder(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) 00:50:16 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:16 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x2, {0x2, 0x0, 0x4}, {0x2, 0xf0, 0x1}, 0xfd, 0xfe}], 0x20) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe0000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0xc069, 0x800, 0x1, 0x3ae, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x4000010, r0, 0x3) 00:50:16 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000080), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff6000/0x3000)=nil, 0x3000}) clock_gettime(0x4, &(0x7f0000000200)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000080), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff6000/0x3000)=nil, 0x3000}) (async) clock_gettime(0x4, &(0x7f0000000200)) (async) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:16 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") mmap$binder(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6) 00:50:16 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:16 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") 00:50:17 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000080), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff6000/0x3000)=nil, 0x3000}) clock_gettime(0x4, &(0x7f0000000200)) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) 00:50:17 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x2, {0x2, 0x0, 0x4}, {0x2, 0xf0, 0x1}, 0xfd, 0xfe}], 0x20) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe0000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0xc069, 0x800, 0x1, 0x3ae, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x4000010, r0, 0x3) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:50:17 executing program 1: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 3: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 00:50:17 executing program 1: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:17 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x2, {0x2, 0x0, 0x4}, {0x2, 0xf0, 0x1}, 0xfd, 0xfe}], 0x20) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe0000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0xc069, 0x800, 0x1, 0x3ae, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000000200), 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x4000010, r0, 0x3) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 1: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:17 executing program 3: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 5: inotify_rm_watch(0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:17 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fed000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) semget(0x0, 0x0, 0x211) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 3: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 5: r0 = syz_io_uring_setup(0x5319, &(0x7f0000000300)={0x0, 0x4, 0x10, 0x0, 0x350}, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$AUDIT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x94880800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x100, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x84) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fed000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) semget(0x0, 0x0, 0x211) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 5: r0 = syz_io_uring_setup(0x5319, &(0x7f0000000300)={0x0, 0x4, 0x10, 0x0, 0x350}, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$AUDIT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x94880800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x100, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x84) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 1: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 5: r0 = syz_io_uring_setup(0x5319, &(0x7f0000000300)={0x0, 0x4, 0x10, 0x0, 0x350}, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$AUDIT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x94880800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x100, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x84) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 1: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fed000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) semget(0x0, 0x0, 0x211) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fed000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) semget(0x0, 0x0, 0x211) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:17 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1410, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4890) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x20cf, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 1: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1410, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4890) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, 0x0, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 4: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1410, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4890) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:17 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:17 executing program 2: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:17 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, 0x0, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) mmap$usbmon(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x200000c, 0x12, 0xffffffffffffffff, 0x8001) mmap$snddsp(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r1, 0xd000) 00:50:18 executing program 4: munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, 0x0, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) mmap$usbmon(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x200000c, 0x12, 0xffffffffffffffff, 0x8001) (async) mmap$snddsp(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r1, 0xd000) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 4: munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 2: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 32) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 4: munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 5: r0 = syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) mmap$usbmon(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x200000c, 0x12, 0xffffffffffffffff, 0x8001) (async) mmap$snddsp(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r1, 0xd000) 00:50:18 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 2: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x0, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 5: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:18 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 5: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 5: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:18 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, '\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000fe5000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x10000000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xd4c, 0x40102) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000300)={@ll={0x11, 0x11, r4, 0x1, 0x9, 0x6, @random="e5184a952b43"}, {&(0x7f0000000240)=""/82, 0x52}, &(0x7f00000002c0), 0x20}, 0xa0) mmap$snddsp_status(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x200000a, 0x20010, r2, 0x82000000) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r0, 0x10000000) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, '\x00'}) (rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000fe5000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x10000000) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xd4c, 0x40102) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000003c0)) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000300)={@ll={0x11, 0x11, r4, 0x1, 0x9, 0x6, @random="e5184a952b43"}, {&(0x7f0000000240)=""/82, 0x52}, &(0x7f00000002c0), 0x20}, 0xa0) (async) mmap$snddsp_status(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x200000a, 0x20010, r2, 0x82000000) 00:50:18 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) 00:50:18 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:18 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:18 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x400}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r0, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, '\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000fe5000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x10000000) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xd4c, 0x40102) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000300)={@ll={0x11, 0x11, r4, 0x1, 0x9, 0x6, @random="e5184a952b43"}, {&(0x7f0000000240)=""/82, 0x52}, &(0x7f00000002c0), 0x20}, 0xa0) mmap$snddsp_status(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x200000a, 0x20010, r2, 0x82000000) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3695, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x5, 0x80600) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), 0x0) 00:50:19 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (rerun: 64) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x5, 0x80600) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x3695, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), 0x0) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, 0x0, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3695, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), 0x0) 00:50:19 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x5, 0x80600) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, 0x0, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x3695, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000051400022abd7000fddb01000080010000000000080003000200000008000100000000000800030003009a2e64c9c38f04b29fe74ce0e00e000025000100020000000800030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x4080040) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, 0x0, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000051400022abd7000fddb01000080010000000000080003000200000008000100000000000800030003009a2e64c9c38f04b29fe74ce0e00e000025000100020000000800030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x4080040) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) 00:50:19 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x3, 0x800}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x3, 0x800}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x3, 0x800}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:19 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, 0x0, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:19 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:19 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000051400022abd7000fddb01000080010000000000080003000200000008000100000000000800030003009a2e64c9c38f04b29fe74ce0e00e000025000100020000000800030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x4080040) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000051400022abd7000fddb01000080010000000000080003000200000008000100000000000800030003009a2e64c9c38f04b29fe74ce0e00e000025000100020000000800030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x4080040) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) 00:50:20 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x3, 0x800}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000200)={0x0, 0x3, 0x800}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 5: get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x6, &(0x7f0000fe8000/0x2000)=nil, 0x7) mlock(&(0x7f0000fe8000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$fb(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc, 0x10, 0xffffffffffffffff, 0x43000) syz_io_uring_setup(0x4e83, &(0x7f00000000c0)={0x0, 0x0, 0x880, 0x3, 0x6c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fe1000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) 00:50:20 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:20 executing program 5: get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x6, &(0x7f0000fe8000/0x2000)=nil, 0x7) (async) mlock(&(0x7f0000fe8000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$fb(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc, 0x10, 0xffffffffffffffff, 0x43000) syz_io_uring_setup(0x4e83, &(0x7f00000000c0)={0x0, 0x0, 0x880, 0x3, 0x6c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fe1000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) 00:50:20 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x3ae2, &(0x7f0000000180)={0x0, 0x0, 0x800, 0x1, 0x1aa, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:50:20 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x2, 0x2) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 5: get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x6, &(0x7f0000fe8000/0x2000)=nil, 0x7) mlock(&(0x7f0000fe8000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$fb(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc, 0x10, 0xffffffffffffffff, 0x43000) syz_io_uring_setup(0x4e83, &(0x7f00000000c0)={0x0, 0x0, 0x880, 0x3, 0x6c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fe1000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x6, &(0x7f0000fe8000/0x2000)=nil, 0x7) (async) mlock(&(0x7f0000fe8000/0x2000)=nil, 0x2000) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$fb(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc, 0x10, 0xffffffffffffffff, 0x43000) (async) syz_io_uring_setup(0x4e83, &(0x7f00000000c0)={0x0, 0x0, 0x880, 0x3, 0x6c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fe1000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000240)) (async) 00:50:20 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x2, {0x2, 0x0, 0x4}, {0x2, 0xf0, 0x1}, 0xfd, 0xfe}], 0x20) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe0000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080)={0x0, 0xc069, 0x800, 0x1, 0x3ae, 0x0, r1}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x4000010, r0, 0x3) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x768b, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x6, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) 00:50:20 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x2, 0x2) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x0, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 0: syz_io_uring_setup(0x3fd1, &(0x7f0000000400)={0x0, 0x0, 0x8, 0xffffffff, 0xf9}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000fed000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000540)={'geneve0\x00'}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000480)="70301cadc9bccda56db81e766396a2c1d7e38852bf34b9ea05941bd47b1c8174982adf00708912e71d75fb4f1fd8fd5251ebfcf57f180b73c546a5c1afc84ad6d7d3d6d7b048d59f68db1714663e1e91dd807b906731b31998a01ce0a4703a3028bfe16f03f1a6a10e7784934197ed") mmap$binder(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000200)) 00:50:20 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) syz_io_uring_setup(0x768b, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x6, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) (async) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x768b, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x6, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) (async) 00:50:20 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000200)) 00:50:20 executing program 0: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0xa, 0x2, 0x6, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x2, 0x2) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) syz_io_uring_setup(0x768b, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x6, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, &(0x7f0000000200)) 00:50:20 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:20 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x62000, 0x0) 00:50:20 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), 0x0) 00:50:20 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 64) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:20 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:20 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), 0x0) 00:50:20 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:20 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x62000, 0x0) 00:50:20 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:20 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x62000, 0x0) 00:50:20 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:21 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), 0x0) 00:50:21 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$qrtrtun(&(0x7f0000fe5000/0x3000)=nil, 0x3000, 0x5, 0x100010, 0xffffffffffffffff, 0x6) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3d2}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x60}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0x100d, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:21 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x62000, 0x0) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x62000, 0x0) (async) 00:50:21 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$qrtrtun(&(0x7f0000fe5000/0x3000)=nil, 0x3000, 0x5, 0x100010, 0xffffffffffffffff, 0x6) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$qrtrtun(&(0x7f0000fe5000/0x3000)=nil, 0x3000, 0x5, 0x100010, 0xffffffffffffffff, 0x6) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:21 executing program 0: syz_io_uring_setup(0x3fcf, &(0x7f0000000000)={0x0, 0x958f, 0x800, 0x0, 0x1}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:21 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 1: syz_io_uring_setup(0x4ec2, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:21 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x15}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 2: syz_io_uring_setup(0x3fcf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2b2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0xe000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:21 executing program 5: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$qrtrtun(&(0x7f0000fe5000/0x3000)=nil, 0x3000, 0x5, 0x100010, 0xffffffffffffffff, 0x6) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) mmap$qrtrtun(&(0x7f0000fe5000/0x3000)=nil, 0x3000, 0x5, 0x100010, 0xffffffffffffffff, 0x6) (async) syz_io_uring_setup(0x768b, &(0x7f0000000140), &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async) 00:50:21 executing program 4: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4000, 0xa00, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:21 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000200)={'veth0\x00'}) syz_io_uring_setup(0x3fd1, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x1c76, &(0x7f0000000000), &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 00:50:21 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0xffffdf006000) 00:50:21 executing program 4: syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) syz_io_uring_setup(0x58a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x30b}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) syz_io_uring_setup(0x7689, &(0x7f00000002c0)={0x0, 0xd053, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000002, 0x1010, r1, 0x10000000) 00:50:21 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 2: syz_io_uring_setup(0x3fcf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2b2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async, rerun: 32) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) (async, rerun: 32) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0xe000) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:21 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x1b0c12f000) 00:50:21 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) syz_io_uring_setup(0x58a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x30b}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) (async, rerun: 64) syz_io_uring_setup(0x7689, &(0x7f00000002c0)={0x0, 0xd053, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) (rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000002, 0x1010, r1, 0x10000000) 00:50:21 executing program 4: syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 4: syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 1: syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mremap(&(0x7f0000fdd000/0x4000)=nil, 0x4009, 0x1000, 0x3, &(0x7f0000ff3000/0x1000)=nil) 00:50:21 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffaffe20}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 2: syz_io_uring_setup(0x3fcf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2b2}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0xe000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 00:50:21 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xff4fff20}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 3: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0xffffdf006000) 00:50:21 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xff4f1f21}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) (async) syz_io_uring_setup(0x58a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x30b}, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x601740, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) (async, rerun: 64) syz_io_uring_setup(0x7689, &(0x7f00000002c0)={0x0, 0xd053, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000fe5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000000)) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1000002, 0x1010, r1, 0x10000000) 00:50:21 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000140)={0x0, 0x4, 0x80}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000100), 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) 00:50:21 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x768b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xff4f1f21}, &(0x7f0000fe0000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 00:50:21 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:21 executing program 1: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (fail_nth: 1) [ 3022.014636][ T8766] FAULT_INJECTION: forcing a failure. [ 3022.014636][ T8766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3022.039817][ T8766] CPU: 1 PID: 8766 Comm: syz-executor.1 Not tainted 6.1.0-rc7-syzkaller-33097-ge3cb714fb489 #0 [ 3022.042600][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 3022.045167][ T8766] Call trace: [ 3022.046039][ T8766] dump_backtrace+0x1c4/0x1f0 [ 3022.047303][ T8766] show_stack+0x2c/0x54 [ 3022.048383][ T8766] dump_stack_lvl+0x104/0x16c [ 3022.049631][ T8766] dump_stack+0x1c/0x58 [ 3022.050713][ T8766] should_fail_ex+0x1d8/0x1fc [ 3022.051931][ T8766] should_fail+0x14/0x24 [ 3022.053023][ T8766] should_fail_usercopy+0x20/0x30 [ 3022.054314][ T8766] __arm64_sys_io_uring_setup+0x68/0x1e4 [ 3022.055832][ T8766] el0_svc_common+0x138/0x220 [ 3022.057082][ T8766] do_el0_svc+0x48/0x140 [ 3022.058212][ T8766] el0_svc+0x58/0x150 [ 3022.059272][ T8766] el0t_64_sync_handler+0x84/0xf0 [ 3022.060607][ T8766] el0t_64_sync+0x190/0x194 00:50:22 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) 00:50:22 executing program 2: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) (async) syz_io_uring_setup(0x40, &(0x7f0000000140)={0x0, 0x4, 0x80}, &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000100), 0x0) (async) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) 00:50:22 executing program 0: syz_io_uring_setup(0x3fd3, &(0x7f0000000000), &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (fail_nth: 1) 00:50:22 executing program 4: syz_io_uring_setup(0x3fd3, 0x0, &(0x7f0000fe0000/0x11000)=nil, &(0x7f0000feb000/0x14000)=nil, 0x0, 0x0) syz_io_uring_setup(0x40, &(0x7f0000000080), &(0x7f0000fe5000/0x2000)=nil, &(0x7f0000fea000/0x3000)=nil, &(0x7f0000000140), 0x0) munmap(&(0x7f0000fee000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x1145, &(0x7f0000000180)={0x0, 0xc09a, 0x2, 0x1, 0x1cd}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000200)) [ 3022.160845][ T8778] FAULT_INJECTION: forcing a failure. [ 3022.160845][ T8778] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.199087][ T8778] CPU: 1 PID: 8778 Comm: syz-executor.0 Not tainted 6.1.0-rc7-syzkaller-33097-ge3cb714fb489 #0 [ 3022.201847][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 3022.204423][ T8778] Call trace: [ 3022.205267][ T8778] dump_backtrace+0x1c4/0x1f0 [ 3022.206482][ T8778] show_stack+0x2c/0x54 [ 3022.207527][ T8778] dump_stack_lvl+0x104/0x16c [ 3022.208705][ T8778] dump_stack+0x1c/0x58 [ 3022.209779][ T8778] should_fail_ex+0x1d8/0x1fc [ 3022.210982][ T8778] __should_failslab+0x68/0x7c [ 3022.212265][ T8778] should_failslab+0x10/0x28 [ 3022.213713][ T8778] kmem_cache_alloc+0x8c/0x340 [ 3022.214941][ T8778] mas_alloc_nodes+0x120/0x2e8 [ 3022.216148][ T8778] mas_preallocate+0x9c/0x180 [ 3022.217344][ T8778] do_mas_align_munmap+0xa4/0x894 [ 3022.218683][ T8778] __vm_munmap+0x174/0x284 [ 3022.219865][ T8778] __arm64_sys_munmap+0x2c/0x40 [ 3022.221155][ T8778] el0_svc_common+0x138/0x220 [ 3022.222375][ T8778] do_el0_svc+0x48/0x140 [ 3022.223486][ T8778] el0_svc+0x58/0x150 [ 3022.224531][ T8778] el0t_64_sync_handler+0x84/0xf0 [ 3022.225797][ T8778] el0t_64_sync+0x190/0x194 [ 3069.299136][ T27] INFO: task syz-executor.2:497 blocked for more than 143 seconds. [ 3069.301216][ T27] Not tainted 6.1.0-rc7-syzkaller-33097-ge3cb714fb489 #0 [ 3069.303133][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3069.305384][ T27] task:syz-executor.2 state:D stack:0 pid:497 ppid:3098 flags:0x00000000 [ 3069.307819][ T27] Call trace: [ 3069.308682][ T27] __switch_to+0x180/0x298 [ 3069.319015][ T27] __schedule+0x408/0x594 [ 3069.320192][ T27] schedule+0x64/0xa4 [ 3069.321200][ T27] rwsem_down_read_slowpath+0x228/0x444 [ 3069.322608][ T27] __down_read_common+0x48/0x154 [ 3069.323920][ T27] down_read+0x68/0x78 [ 3069.324963][ T27] exit_mm+0x4c/0x1c0 [ 3069.326071][ T27] do_exit+0x264/0xcac [ 3069.327137][ T27] __arm64_sys_exit_group+0x0/0x18 [ 3069.328595][ T27] __wake_up_parent+0x0/0x40 [ 3069.339040][ T27] el0_svc_common+0x138/0x220 [ 3069.340254][ T27] do_el0_svc+0x48/0x140 [ 3069.341369][ T27] el0_svc+0x58/0x150 [ 3069.342366][ T27] el0t_64_sync_handler+0x84/0xf0 [ 3069.343808][ T27] el0t_64_sync+0x190/0x194 [ 3069.359002][ T27] [ 3069.359002][ T27] Showing all locks held in the system: [ 3069.361050][ T27] 1 lock held by rcu_tasks_kthre/11: [ 3069.362407][ T27] #0: ffff80000d4a4768 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 [ 3069.365226][ T27] 1 lock held by rcu_tasks_trace/12: [ 3069.366617][ T27] #0: ffff80000d4a4db8 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x3c/0x450 [ 3069.379038][ T27] 1 lock held by khungtaskd/27: [ 3069.380307][ T27] #0: ffff80000d4a4640 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x4/0x48 [ 3069.382749][ T27] 2 locks held by getty/2758: [ 3069.383973][ T27] #0: ffff0000c8006098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x28/0x58 [ 3069.386471][ T27] #1: ffff80000f6be2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x19c/0x89c [ 3069.398989][ T27] 3 locks held by kworker/u4:52/2966: [ 3069.400400][ T27] 1 lock held by syz-executor.2/497: [ 3069.401745][ T27] #0: ffff0000e52c1b88 (&mm->mmap_lock){++++}-{3:3}, at: exit_mm+0x4c/0x1c0 [ 3069.404207][ T27] 1 lock held by syz-executor.2/499: [ 3069.405568][ T27] 1 lock held by syz-executor.3/8754: [ 3069.407036][ T27] #0: ffff0000e52c0148 (&mm->mmap_lock){++++}-{3:3}, at: do_page_fault+0x3c8/0x79c [ 3069.418987][ T27] 1 lock held by syz-executor.3/8757: [ 3069.420409][ T27] [ 3069.420997][ T27] ============================================= [ 3069.420997][ T27] [ 3069.423052][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 3069.424788][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.0-rc7-syzkaller-33097-ge3cb714fb489 #0 [ 3069.427302][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 3069.429910][ T27] Call trace: [ 3069.430754][ T27] dump_backtrace+0x1c4/0x1f0 [ 3069.431972][ T27] show_stack+0x2c/0x54 [ 3069.433099][ T27] dump_stack_lvl+0x104/0x16c [ 3069.434316][ T27] dump_stack+0x1c/0x58 [ 3069.435414][ T27] panic+0x218/0x508 [ 3069.436469][ T27] hung_task_panic+0x0/0x2c [ 3069.437646][ T27] kthread+0x12c/0x158 [ 3069.438701][ T27] ret_from_fork+0x10/0x20 [ 3069.439870][ T27] SMP: stopping secondary CPUs [ 3069.441121][ T27] Kernel Offset: disabled [ 3069.442241][ T27] CPU features: 0x00000,040e0108,4c017203 [ 3069.443714][ T27] Memory Limit: none [ 3070.146894][ T27] Rebooting in 86400 seconds..