0002c0)}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @private1, 0x2}, 0x1c) (async) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000240)={r6}, 0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x2, 0x10}, 0xc) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:26:37 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x9, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r2, 0x19}, 0x10) sendmsg$rds(r2, &(0x7f0000001800)={&(0x7f0000000140)={0x2, 0x81, @rand_addr=0x64010102}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000001400)=""/240, 0xf0}], 0x5, &(0x7f0000001740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x9}, &(0x7f0000000380)=0xa, &(0x7f0000001580)=0x80000001, 0x4, 0x9f9, 0x9e0, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x400, 0x2}, {&(0x7f0000001ac0)=""/4096, 0x1000}, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/35, 0x23}, {&(0x7f0000001600)=""/76, 0x4c}, {&(0x7f0000001680)=""/33, 0x21}, {&(0x7f00000016c0)=""/33, 0x21}], 0x4, 0x20, 0x1}}], 0xa0, 0x48c1}, 0x80) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x48e580, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000080)={0x90000018}) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 17:26:37 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580), 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:38 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39582, 0x102}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', r4, 0x2f, 0x18, 0xff, 0x8001, 0x10, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x700, 0x8, 0x101}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=@bridge_getlink={0xa4, 0x12, 0x200, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x400, 0x40}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_PHYS_SWITCH_ID={0xc, 0x24, "16d31e12651b49cc"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0xbe}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x20}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5b08}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x44800) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39582, 0x102}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', r4, 0x2f, 0x18, 0xff, 0x8001, 0x10, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x700, 0x8, 0x101}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=@bridge_getlink={0xa4, 0x12, 0x200, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x400, 0x40}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_PHYS_SWITCH_ID={0xc, 0x24, "16d31e12651b49cc"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'sit0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0xbe}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x20}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5b08}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x44800) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:26:38 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x4c000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:38 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:38 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:38 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x52, 0xba, 0x5, 0xff, 0x0, 0x8, 0x80010, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x28000000, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x1, 0x3f, 0x7, 0x3, 0x3ff, 0x8, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @private1, 0x2}, 0x1c) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000240)={r6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x2, 0x10}, 0xc) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x52, 0xba, 0x5, 0xff, 0x0, 0x8, 0x80010, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x28000000, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x1, 0x3f, 0x7, 0x3, 0x3ff, 0x8, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @private1, 0x2}, 0x1c) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000240)={r6}, 0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x2, 0x10}, 0xc) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:26:38 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x9, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r2, 0x19}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000001800)={&(0x7f0000000140)={0x2, 0x81, @rand_addr=0x64010102}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000001400)=""/240, 0xf0}], 0x5, &(0x7f0000001740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x9}, &(0x7f0000000380)=0xa, &(0x7f0000001580)=0x80000001, 0x4, 0x9f9, 0x9e0, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x400, 0x2}, {&(0x7f0000001ac0)=""/4096, 0x1000}, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/35, 0x23}, {&(0x7f0000001600)=""/76, 0x4c}, {&(0x7f0000001680)=""/33, 0x21}, {&(0x7f00000016c0)=""/33, 0x21}], 0x4, 0x20, 0x1}}], 0xa0, 0x48c1}, 0x80) (async) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x48e580, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000080)={0x90000018}) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 17:26:38 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x8000, 0x81, 0x9}}) syz_io_uring_setup(0x2f84, &(0x7f0000000080)={0x0, 0x1ec6, 0x4, 0x2, 0x3de, 0x0, r0}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) syz_io_uring_submit(r4, r2, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r6, 0x7fffffff, 0x0, 0x7}, 0xc41a) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:38 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x8000, 0x81, 0x9}}) syz_io_uring_setup(0x2f84, &(0x7f0000000080)={0x0, 0x1ec6, 0x4, 0x2, 0x3de, 0x0, r0}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r6, 0x7fffffff, 0x0, 0x7}, 0xc41a) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x5c000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:39 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r1, 0x9, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) (async, rerun: 64) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) (rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r2, 0x19}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000001800)={&(0x7f0000000140)={0x2, 0x81, @rand_addr=0x64010102}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000001400)=""/240, 0xf0}], 0x5, &(0x7f0000001740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x9}, &(0x7f0000000380)=0xa, &(0x7f0000001580)=0x80000001, 0x4, 0x9f9, 0x9e0, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x400, 0x2}, {&(0x7f0000001ac0)=""/4096, 0x1000}, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/35, 0x23}, {&(0x7f0000001600)=""/76, 0x4c}, {&(0x7f0000001680)=""/33, 0x21}, {&(0x7f00000016c0)=""/33, 0x21}], 0x4, 0x20, 0x1}}], 0xa0, 0x48c1}, 0x80) (async) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x48e580, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000080)={0x90000018}) (async) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 17:26:39 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x8000, 0x81, 0x9}}) (async) syz_io_uring_setup(0x2f84, &(0x7f0000000080)={0x0, 0x1ec6, 0x4, 0x2, 0x3de, 0x0, r0}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r6, 0x7fffffff, 0x0, 0x7}, 0xc41a) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{0x0}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="b8138008226f000ae40282bb4814d59f7a0aa5a1ee13bb751b2909d54a9256afa9e08fcc93d756c45f35872777d4a1034129395960b4af2e5e12da2cfd4126e0bece9a5cd919737eed774e4de0799dbe3c0dd193965373ef799b50698e2c8394a9cdc07865fce00223818fd8f3f6f60503f0029d16", 0x75}, {&(0x7f0000000440)="b1d926b013ddf87d830d20c256ba6bb9a295c26489b96c7086bab10647fe38505144959137aa74fa08cc5b9182b17a2bb93cd10a54ba91e701ea6052ba6bf65109ac4bb0d88d9b88d3e9543bc6489b732595a6ed426b1093bfa50dc3e847d9dbfe3d4bc7c9a6cff876606d640e93dbac2aa5eb9e3b18a133d69887a212e05b3ce7fcd619ab5d275caf195e89e729e15aa7faaba32f474034f200cbb5b476897b240efaae60417084c4dd5117520359b7888d4f684461039e0d02351a52e418240eb1cd72694a269cf296995e9fad6c9fee4de6d2c9affe0dfa05661af7091332fae4583e770721584c", 0xe9}, {&(0x7f00000000c0)="82aa", 0x2}, {&(0x7f0000000580)="b47258dba17c54671f929b8f906e79243bcbbae45acad91608c90e23f3c0ccdd2a3d37fa390f111734b1974d440dc34f3cc0307564182c3a7938352667f8851292eeb764ed8e514f02c063714e9bd51c917f09fcad56be5b540e6368292a8a3da44b75dd34f9d7735af41246950399650c68aec81397774b5e48966646eed8f5de989d0ef0cf3b77d7281bd914570ea8a7395004d7ba73c358203faf352263d300166c730dcac62a068cdeec1d2779f3ebb8e3", 0xb3}, {&(0x7f0000000200)="92399765ef1f5f439ac7375da8", 0xd}, {&(0x7f0000000640)="6005ae0949ce348b4d2af3ded91bc2cfbbd0f0ab337500a5a836c39bf0102b1c493a455e9a2c778dc9f5b8b89bc38b24b7207b0e888af814f8357c9fa1524ca69b63f1a54a163d1fed2fbc8abceb32502535f6eb2572e555ceaeab63438f865e0b0350622ac3d2211edfb8563b782119cddfb2918bb1c0c3fb3a9e8aa1a9122354390b0ccf889957722162fb7ce3e782371f107b255f5250be56ac6a72fff2b259ae5df1258e6f12dc6363555e52d6b17de5941c4bccb24ea52f2771f16734841e32fd6590949f973f1d8a6fcf4883ebd708d368abcd5440114a79b18e0b96bfbb5e24abdaaba5862c101eb1effa0e969daf", 0xf2}], 0x6, 0x10000, 0x1) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:39 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{0x0}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:39 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xa43) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r5 = dup2(r4, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000036c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003600)="0bee14e4e62552d5334364b30e80a0cd9ccafee373f478fa9a4d76724e3921ebb34ba7a4816bdc98836b640dbee67295fcea5f381d3f0abb8a44ad9a26d3ca5780bd481adea8fbaddc64bae7d7f449df1618e38b9d8e63df80734c76e5cb4ece6e7bcbc57f05531d1cc7c6e972d71e9920ff256df71a83c49a6a9c0f3b0e9d73379aa05732f786475f2e3872aa76979b382803910ba73b9ca4e405b192b85a8a100c5d55fed64627f005fda910a8ecd8e23c5a1bac8bb7", 0xb7, r0}, 0x68) recvmmsg$unix(r5, &(0x7f0000003380)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000000440)=""/202, 0xca}], 0x3}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/13, 0xd}, {&(0x7f0000000800)=""/109, 0x6d}], 0x3, &(0x7f00000008c0)}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/104, 0x68}, {&(0x7f0000000b00)=""/104, 0x68}, {&(0x7f0000000b80)=""/99, 0x63}, {&(0x7f0000000c00)=""/45, 0x2d}], 0x5, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/235, 0xeb}], 0x1, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/177, 0xb1}, {&(0x7f0000001200)=""/5, 0x5}], 0x3, &(0x7f0000001280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/250, 0xfa}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/37, 0x25}], 0x3, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001740)=""/231, 0xe7}, {&(0x7f0000001840)=""/44, 0x2c}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3, &(0x7f0000001980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/218, 0xda}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000003240)=[{&(0x7f0000002e00)=""/63, 0x3f}, {&(0x7f0000002e40)=""/179, 0xb3}, {&(0x7f0000002f00)=""/11, 0xb}, {&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/65, 0x41}, {&(0x7f00000030c0)=""/184, 0xb8}, {&(0x7f0000003180)=""/104, 0x68}, {&(0x7f0000003200)=""/2, 0x2}], 0x8, &(0x7f00000032c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x9, 0x2, &(0x7f00000035c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3357.231716][T32359] binder: 32355:32359 ioctl c0306201 20001480 returned -14 17:26:40 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{0x0}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:40 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="b8138008226f000ae40282bb4814d59f7a0aa5a1ee13bb751b2909d54a9256afa9e08fcc93d756c45f35872777d4a1034129395960b4af2e5e12da2cfd4126e0bece9a5cd919737eed774e4de0799dbe3c0dd193965373ef799b50698e2c8394a9cdc07865fce00223818fd8f3f6f60503f0029d16", 0x75}, {&(0x7f0000000440)="b1d926b013ddf87d830d20c256ba6bb9a295c26489b96c7086bab10647fe38505144959137aa74fa08cc5b9182b17a2bb93cd10a54ba91e701ea6052ba6bf65109ac4bb0d88d9b88d3e9543bc6489b732595a6ed426b1093bfa50dc3e847d9dbfe3d4bc7c9a6cff876606d640e93dbac2aa5eb9e3b18a133d69887a212e05b3ce7fcd619ab5d275caf195e89e729e15aa7faaba32f474034f200cbb5b476897b240efaae60417084c4dd5117520359b7888d4f684461039e0d02351a52e418240eb1cd72694a269cf296995e9fad6c9fee4de6d2c9affe0dfa05661af7091332fae4583e770721584c", 0xe9}, {&(0x7f00000000c0)="82aa", 0x2}, {&(0x7f0000000580)="b47258dba17c54671f929b8f906e79243bcbbae45acad91608c90e23f3c0ccdd2a3d37fa390f111734b1974d440dc34f3cc0307564182c3a7938352667f8851292eeb764ed8e514f02c063714e9bd51c917f09fcad56be5b540e6368292a8a3da44b75dd34f9d7735af41246950399650c68aec81397774b5e48966646eed8f5de989d0ef0cf3b77d7281bd914570ea8a7395004d7ba73c358203faf352263d300166c730dcac62a068cdeec1d2779f3ebb8e3", 0xb3}, {&(0x7f0000000200)="92399765ef1f5f439ac7375da8", 0xd}, {&(0x7f0000000640)="6005ae0949ce348b4d2af3ded91bc2cfbbd0f0ab337500a5a836c39bf0102b1c493a455e9a2c778dc9f5b8b89bc38b24b7207b0e888af814f8357c9fa1524ca69b63f1a54a163d1fed2fbc8abceb32502535f6eb2572e555ceaeab63438f865e0b0350622ac3d2211edfb8563b782119cddfb2918bb1c0c3fb3a9e8aa1a9122354390b0ccf889957722162fb7ce3e782371f107b255f5250be56ac6a72fff2b259ae5df1258e6f12dc6363555e52d6b17de5941c4bccb24ea52f2771f16734841e32fd6590949f973f1d8a6fcf4883ebd708d368abcd5440114a79b18e0b96bfbb5e24abdaaba5862c101eb1effa0e969daf", 0xf2}], 0x6, 0x10000, 0x1) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="b8138008226f000ae40282bb4814d59f7a0aa5a1ee13bb751b2909d54a9256afa9e08fcc93d756c45f35872777d4a1034129395960b4af2e5e12da2cfd4126e0bece9a5cd919737eed774e4de0799dbe3c0dd193965373ef799b50698e2c8394a9cdc07865fce00223818fd8f3f6f60503f0029d16", 0x75}, {&(0x7f0000000440)="b1d926b013ddf87d830d20c256ba6bb9a295c26489b96c7086bab10647fe38505144959137aa74fa08cc5b9182b17a2bb93cd10a54ba91e701ea6052ba6bf65109ac4bb0d88d9b88d3e9543bc6489b732595a6ed426b1093bfa50dc3e847d9dbfe3d4bc7c9a6cff876606d640e93dbac2aa5eb9e3b18a133d69887a212e05b3ce7fcd619ab5d275caf195e89e729e15aa7faaba32f474034f200cbb5b476897b240efaae60417084c4dd5117520359b7888d4f684461039e0d02351a52e418240eb1cd72694a269cf296995e9fad6c9fee4de6d2c9affe0dfa05661af7091332fae4583e770721584c", 0xe9}, {&(0x7f00000000c0)="82aa", 0x2}, {&(0x7f0000000580)="b47258dba17c54671f929b8f906e79243bcbbae45acad91608c90e23f3c0ccdd2a3d37fa390f111734b1974d440dc34f3cc0307564182c3a7938352667f8851292eeb764ed8e514f02c063714e9bd51c917f09fcad56be5b540e6368292a8a3da44b75dd34f9d7735af41246950399650c68aec81397774b5e48966646eed8f5de989d0ef0cf3b77d7281bd914570ea8a7395004d7ba73c358203faf352263d300166c730dcac62a068cdeec1d2779f3ebb8e3", 0xb3}, {&(0x7f0000000200)="92399765ef1f5f439ac7375da8", 0xd}, {&(0x7f0000000640)="6005ae0949ce348b4d2af3ded91bc2cfbbd0f0ab337500a5a836c39bf0102b1c493a455e9a2c778dc9f5b8b89bc38b24b7207b0e888af814f8357c9fa1524ca69b63f1a54a163d1fed2fbc8abceb32502535f6eb2572e555ceaeab63438f865e0b0350622ac3d2211edfb8563b782119cddfb2918bb1c0c3fb3a9e8aa1a9122354390b0ccf889957722162fb7ce3e782371f107b255f5250be56ac6a72fff2b259ae5df1258e6f12dc6363555e52d6b17de5941c4bccb24ea52f2771f16734841e32fd6590949f973f1d8a6fcf4883ebd708d368abcd5440114a79b18e0b96bfbb5e24abdaaba5862c101eb1effa0e969daf", 0xf2}], 0x6, 0x10000, 0x1) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:26:40 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xa43) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r5 = dup2(r4, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000036c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003600)="0bee14e4e62552d5334364b30e80a0cd9ccafee373f478fa9a4d76724e3921ebb34ba7a4816bdc98836b640dbee67295fcea5f381d3f0abb8a44ad9a26d3ca5780bd481adea8fbaddc64bae7d7f449df1618e38b9d8e63df80734c76e5cb4ece6e7bcbc57f05531d1cc7c6e972d71e9920ff256df71a83c49a6a9c0f3b0e9d73379aa05732f786475f2e3872aa76979b382803910ba73b9ca4e405b192b85a8a100c5d55fed64627f005fda910a8ecd8e23c5a1bac8bb7", 0xb7, r0}, 0x68) recvmmsg$unix(r5, &(0x7f0000003380)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000000440)=""/202, 0xca}], 0x3}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/13, 0xd}, {&(0x7f0000000800)=""/109, 0x6d}], 0x3, &(0x7f00000008c0)}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/104, 0x68}, {&(0x7f0000000b00)=""/104, 0x68}, {&(0x7f0000000b80)=""/99, 0x63}, {&(0x7f0000000c00)=""/45, 0x2d}], 0x5, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/235, 0xeb}], 0x1, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/177, 0xb1}, {&(0x7f0000001200)=""/5, 0x5}], 0x3, &(0x7f0000001280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/250, 0xfa}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/37, 0x25}], 0x3, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001740)=""/231, 0xe7}, {&(0x7f0000001840)=""/44, 0x2c}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3, &(0x7f0000001980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/218, 0xda}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000003240)=[{&(0x7f0000002e00)=""/63, 0x3f}, {&(0x7f0000002e40)=""/179, 0xb3}, {&(0x7f0000002f00)=""/11, 0xb}, {&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/65, 0x41}, {&(0x7f00000030c0)=""/184, 0xb8}, {&(0x7f0000003180)=""/104, 0x68}, {&(0x7f0000003200)=""/2, 0x2}], 0x8, &(0x7f00000032c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x9, 0x2, &(0x7f00000035c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xa43) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) dup2(r4, r0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000036c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003600)="0bee14e4e62552d5334364b30e80a0cd9ccafee373f478fa9a4d76724e3921ebb34ba7a4816bdc98836b640dbee67295fcea5f381d3f0abb8a44ad9a26d3ca5780bd481adea8fbaddc64bae7d7f449df1618e38b9d8e63df80734c76e5cb4ece6e7bcbc57f05531d1cc7c6e972d71e9920ff256df71a83c49a6a9c0f3b0e9d73379aa05732f786475f2e3872aa76979b382803910ba73b9ca4e405b192b85a8a100c5d55fed64627f005fda910a8ecd8e23c5a1bac8bb7", 0xb7, r0}, 0x68) (async) recvmmsg$unix(r5, &(0x7f0000003380)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000000440)=""/202, 0xca}], 0x3}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/13, 0xd}, {&(0x7f0000000800)=""/109, 0x6d}], 0x3, &(0x7f00000008c0)}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/104, 0x68}, {&(0x7f0000000b00)=""/104, 0x68}, {&(0x7f0000000b80)=""/99, 0x63}, {&(0x7f0000000c00)=""/45, 0x2d}], 0x5, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/235, 0xeb}], 0x1, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/177, 0xb1}, {&(0x7f0000001200)=""/5, 0x5}], 0x3, &(0x7f0000001280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/250, 0xfa}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/37, 0x25}], 0x3, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001740)=""/231, 0xe7}, {&(0x7f0000001840)=""/44, 0x2c}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3, &(0x7f0000001980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/218, 0xda}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000003240)=[{&(0x7f0000002e00)=""/63, 0x3f}, {&(0x7f0000002e40)=""/179, 0xb3}, {&(0x7f0000002f00)=""/11, 0xb}, {&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/65, 0x41}, {&(0x7f00000030c0)=""/184, 0xb8}, {&(0x7f0000003180)=""/104, 0x68}, {&(0x7f0000003200)=""/2, 0x2}], 0x8, &(0x7f00000032c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x9, 0x2, &(0x7f00000035c0)) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:26:40 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3357.555044][T32371] binder: 32368:32371 ioctl c0306201 20001480 returned -14 17:26:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x60000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:40 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3357.782198][T32383] binder: 32368:32383 unknown command 0 [ 3357.822065][T32385] binder: 32368:32385 ioctl c0306201 200003c0 returned -14 [ 3357.956362][T32384] binder: 32368:32384 ioctl c0306201 20001480 returned -14 17:26:40 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="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", 0x1000, 0x4, &(0x7f0000001000)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80000) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000010c0)='tunl0\x00') 17:26:40 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:40 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xa43) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r5 = dup2(r4, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000036c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003600)="0bee14e4e62552d5334364b30e80a0cd9ccafee373f478fa9a4d76724e3921ebb34ba7a4816bdc98836b640dbee67295fcea5f381d3f0abb8a44ad9a26d3ca5780bd481adea8fbaddc64bae7d7f449df1618e38b9d8e63df80734c76e5cb4ece6e7bcbc57f05531d1cc7c6e972d71e9920ff256df71a83c49a6a9c0f3b0e9d73379aa05732f786475f2e3872aa76979b382803910ba73b9ca4e405b192b85a8a100c5d55fed64627f005fda910a8ecd8e23c5a1bac8bb7", 0xb7, r0}, 0x68) recvmmsg$unix(r5, &(0x7f0000003380)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000000440)=""/202, 0xca}], 0x3}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/13, 0xd}, {&(0x7f0000000800)=""/109, 0x6d}], 0x3, &(0x7f00000008c0)}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/104, 0x68}, {&(0x7f0000000b00)=""/104, 0x68}, {&(0x7f0000000b80)=""/99, 0x63}, {&(0x7f0000000c00)=""/45, 0x2d}], 0x5, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/235, 0xeb}], 0x1, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/177, 0xb1}, {&(0x7f0000001200)=""/5, 0x5}], 0x3, &(0x7f0000001280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/250, 0xfa}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/37, 0x25}], 0x3, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001740)=""/231, 0xe7}, {&(0x7f0000001840)=""/44, 0x2c}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3, &(0x7f0000001980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/218, 0xda}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000003240)=[{&(0x7f0000002e00)=""/63, 0x3f}, {&(0x7f0000002e40)=""/179, 0xb3}, {&(0x7f0000002f00)=""/11, 0xb}, {&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/65, 0x41}, {&(0x7f00000030c0)=""/184, 0xb8}, {&(0x7f0000003180)=""/104, 0x68}, {&(0x7f0000003200)=""/2, 0x2}], 0x8, &(0x7f00000032c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x9, 0x2, &(0x7f00000035c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xa43) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) dup2(r4, r0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000036c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003600)="0bee14e4e62552d5334364b30e80a0cd9ccafee373f478fa9a4d76724e3921ebb34ba7a4816bdc98836b640dbee67295fcea5f381d3f0abb8a44ad9a26d3ca5780bd481adea8fbaddc64bae7d7f449df1618e38b9d8e63df80734c76e5cb4ece6e7bcbc57f05531d1cc7c6e972d71e9920ff256df71a83c49a6a9c0f3b0e9d73379aa05732f786475f2e3872aa76979b382803910ba73b9ca4e405b192b85a8a100c5d55fed64627f005fda910a8ecd8e23c5a1bac8bb7", 0xb7, r0}, 0x68) (async) recvmmsg$unix(r5, &(0x7f0000003380)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f0000000440)=""/202, 0xca}], 0x3}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/13, 0xd}, {&(0x7f0000000800)=""/109, 0x6d}], 0x3, &(0x7f00000008c0)}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/104, 0x68}, {&(0x7f0000000b00)=""/104, 0x68}, {&(0x7f0000000b80)=""/99, 0x63}, {&(0x7f0000000c00)=""/45, 0x2d}], 0x5, &(0x7f0000000cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/235, 0xeb}], 0x1, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/177, 0xb1}, {&(0x7f0000001200)=""/5, 0x5}], 0x3, &(0x7f0000001280)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/250, 0xfa}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/37, 0x25}], 0x3, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001740)=""/231, 0xe7}, {&(0x7f0000001840)=""/44, 0x2c}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3, &(0x7f0000001980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/218, 0xda}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000003240)=[{&(0x7f0000002e00)=""/63, 0x3f}, {&(0x7f0000002e40)=""/179, 0xb3}, {&(0x7f0000002f00)=""/11, 0xb}, {&(0x7f0000002f40)=""/224, 0xe0}, {&(0x7f0000003040)=""/65, 0x41}, {&(0x7f00000030c0)=""/184, 0xb8}, {&(0x7f0000003180)=""/104, 0x68}, {&(0x7f0000003200)=""/2, 0x2}], 0x8, &(0x7f00000032c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x9, 0x2, &(0x7f00000035c0)) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 3358.146299][T32383] binder: 32368:32383 ioctl c0306201 20000080 returned -22 17:26:41 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:41 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="b8138008226f000ae40282bb4814d59f7a0aa5a1ee13bb751b2909d54a9256afa9e08fcc93d756c45f35872777d4a1034129395960b4af2e5e12da2cfd4126e0bece9a5cd919737eed774e4de0799dbe3c0dd193965373ef799b50698e2c8394a9cdc07865fce00223818fd8f3f6f60503f0029d16", 0x75}, {&(0x7f0000000440)="b1d926b013ddf87d830d20c256ba6bb9a295c26489b96c7086bab10647fe38505144959137aa74fa08cc5b9182b17a2bb93cd10a54ba91e701ea6052ba6bf65109ac4bb0d88d9b88d3e9543bc6489b732595a6ed426b1093bfa50dc3e847d9dbfe3d4bc7c9a6cff876606d640e93dbac2aa5eb9e3b18a133d69887a212e05b3ce7fcd619ab5d275caf195e89e729e15aa7faaba32f474034f200cbb5b476897b240efaae60417084c4dd5117520359b7888d4f684461039e0d02351a52e418240eb1cd72694a269cf296995e9fad6c9fee4de6d2c9affe0dfa05661af7091332fae4583e770721584c", 0xe9}, {&(0x7f00000000c0)="82aa", 0x2}, {&(0x7f0000000580)="b47258dba17c54671f929b8f906e79243bcbbae45acad91608c90e23f3c0ccdd2a3d37fa390f111734b1974d440dc34f3cc0307564182c3a7938352667f8851292eeb764ed8e514f02c063714e9bd51c917f09fcad56be5b540e6368292a8a3da44b75dd34f9d7735af41246950399650c68aec81397774b5e48966646eed8f5de989d0ef0cf3b77d7281bd914570ea8a7395004d7ba73c358203faf352263d300166c730dcac62a068cdeec1d2779f3ebb8e3", 0xb3}, {&(0x7f0000000200)="92399765ef1f5f439ac7375da8", 0xd}, {&(0x7f0000000640)="6005ae0949ce348b4d2af3ded91bc2cfbbd0f0ab337500a5a836c39bf0102b1c493a455e9a2c778dc9f5b8b89bc38b24b7207b0e888af814f8357c9fa1524ca69b63f1a54a163d1fed2fbc8abceb32502535f6eb2572e555ceaeab63438f865e0b0350622ac3d2211edfb8563b782119cddfb2918bb1c0c3fb3a9e8aa1a9122354390b0ccf889957722162fb7ce3e782371f107b255f5250be56ac6a72fff2b259ae5df1258e6f12dc6363555e52d6b17de5941c4bccb24ea52f2771f16734841e32fd6590949f973f1d8a6fcf4883ebd708d368abcd5440114a79b18e0b96bfbb5e24abdaaba5862c101eb1effa0e969daf", 0xf2}], 0x6, 0x10000, 0x1) (async, rerun: 64) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 32) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:26:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x68000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3358.621746][T32411] binder: 32410:32411 ioctl c0306201 20001480 returned -14 17:26:41 executing program 4: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x80, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000400)={r5, 0x200}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000380)={0x0, 0x3}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 17:26:41 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index=0xa, 0x2, &(0x7f00000002c0)="18a68f1692f058c8fd2a022a6a37ea195dc988f145de6b7d50fc7264257f1163cd812799ed583f5a4cb1451031b2df1af2e7a0e3263161ad5fa7aa0f2ddb09d703dfad2d12e0a5f0c039aedb560fcbe6cff05cbb94b4e5b40cc30f223f96f50f51efcc0acbe136269aef95db3d2b1b76718fe11ff074bd2d750ac5b574ba5d0e97ce36f2ee7a1b3f1b0f2e6b0fb6fd16b2b2fa842a877349c4b83e6571f0fa5572e8bbf5b4b729d956c5420a5945459760d86376be3922f6650c947b0a9560157e42a661d6f8b4c11fe51e91410aa9d17e45b8", 0xd3, 0x2, 0x1, {0x0, r7}}, 0x20) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:41 executing program 4: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x80, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000400)={r5, 0x200}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000380)={0x0, 0x3}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x80, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000400)={r5, 0x200}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000380)={0x0, 0x3}) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) (async) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) 17:26:41 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="0e3d2606bd4c852908e980ebdd0301e460cf51be957277cbbeec022adbb143262ecd97cff755749b258a7906342519aa56310ec9952f18a58cce742fdd48afe7c95a34ed3f1e7f9b82970f383582b05667a4757f3266820d0f151ca98f0436c86fd73d021c95f8af690c3b883cc8a698e26a03ddec5fe9c6db9d39abef698af8c34923362688961336bfa040dc767dd50d3eb99e8f98065a01d6d966006166ac228bcf2bf649cf357a2a1e64b95d7a2058ab44edea70ae8c4bc86506473469ae3b3c9898a77b3a7e6d2458a71bf6975976f53c9a357dab4199e62f945344efc69d34e674eb1c15d0fa8ab705024f3f6146e0dc7ae6757c8cb8524e09181b058967ab987eb7b876fcc31ff01f9a1cd4b13c3978b039e37f26b3c6aa06015c338ddd75c43b35584e968c57ca52f0d00cdf1e8ab736bcaf809bdce729e4b909884ea55a28c20dfd1981fbd39b90efa77345b6d125c34a62e0925ff6f6c6d12175a06a0a9ad87ef4103f82b6de5d22a9140950b0ea01355d1fac3146dec6cb949ca3b9667c482ccd99345dc6f477999d8ad2fc61750d03b694f86a158fbd0a084148099e176859887e9686c796bc1c3d7bab0ab3a42811ec3a11521dd966b84f06d3db5090da911f50892e63abb0f85071ef6536bdeadb524891269e2bab6d5b911d369c52bfd16d69becba3f2603b5aa147d790d387ad5283a24a786f45a342ae4c1069c931c754769d585f7337eb21be7f80da9afc4b1aeb5343761402c557f0a8348f24e4fadc745e2d5f01102bceba6d6272a2e4e0427e2a6f9985b980b31711a29e8627aab8a3a338b1d7c71ef8fb6803a88af3f55dd91fddc7607a7462898283dcd8e20fcf8be87bdfe1d3cad305d56fbcc9304af5c0ce2b85e1ba0e66d043d7e880e156aaf84537ab4d12ebe53ef2d4c82f117844722503d2f6d2bf4885542c304fb52b835216907a4dc43fbb5fa8ed7f1d49cfdb958daca37126c15306eb8247b5c1bd099ba31d8da5152e5ee7e93ede2d7c397be52b27680f9b1983483538886de37372667f51c6de0721eb319e5cef3be157d7c76b95a509f3c1a207c3d3a7bbc9d17d87fdcd68dd28a31d6207f85457b3a175e1c165be66bb6c54cffabc18734278859859789c1e30f95db0669e702a5961a61d0d445df454551a9558a248e68d01f61278b4279f8808c0155df27e186c9c26455bf687bbf0e3238262149c2741ab6c599d3fcde7fb964913c6bbfc8d11c68ff63faf25e6e330fe60e34b34f8ff88998b4c26f5d7d18b1b45eecd8e1e3c90d745d52d6190061c7334e44cfc8b3c0e92c56ef99e63e579338d3b2552f399170c15b10d87401fe5b45cc9b387579b3edf1b17448a0093d0d65c579b6d49eb1eddb6cdeafb5371aaca02a14fba275a49d3af43f21bdfa839a4564596ad96719a076bd094e184e90f63333a3d73589469d66d4e332c6125313d4e117777cfcdb50c8ed91aa6ce9578a9f13d58882fe9d2f1ff1025116e5f0bde43343079034f95c017bff7a3478b8c8b7be603f02ffbc6cb65e8b137bd30aef6626ce875d094df84995cf1246c42cab70c25c7bbb0dfc112c49ebb69bfa611a2a3033dae99725c96c09d1354d0ad5286f14755dfe088ed3aee239eb03611b1eb6bc255ed18d84106c3fbe6acaf5885a22de88c54b5c9f5347b7e860428aeff17dc388dd6ef8099e8b2a3365a18d84803b51118fd340369a3f59191ef5b0af2eb8acc867cb7a191feae469d25450ff9a019333f1b4e9f951723ee79380e3f56e9bdd66a7ecba09ebcf9b315e8ee9ff0bef88375e562c2f4ed1efb4ae2a5c3a46f0b20b95bbd2770fe6319f1a45222783728d1582c388dd651afac67bfbcfdf460932f1c85046964b81d267834ac88e354137cbd9e5d76c1fb406886d5ab6977bd2ad7d63ed187d38d36fa8dba2b7fd2b5ba3514a43ea212678266c5ce4d0f5f2cbe047a1f6f5255a3d3295d22242cfae19c5f1bb1f111f8f5ef38393185c90a02ed90b78039422e0b48338093058c2c46430d0b3c7b1ace547f78228534b7189a001f67a5c151ef3b90710641f40bd28279f1d4b4189becf385f2701d55af215cc9700da50ffb925fe2a4b677d28b0953ced5007e7b403a1d4bd43c75f6d02b3f8ee7c15e58df77daec5050093f2ab38bcd0ad3f6bbda32642bf25178ce68d27efa1ed5697e7ace0a9e2c838b028b780138bea810f7fb078b16a7a4f13723f8d58fc43ea217566b8d1e9aa8bb3166c8f602e2e943df4e3c14fb0f4257dde52d3999aa2a530ff87e2ccbd5490abebbccaaf7674b2fd33b5d41dc6a26efe05cbc21c731ade471f4aea1419c0c9464c6b9506a168ca909424454b3f93bcb82300a3e15ccd91f0086d20fb4e6db81bd115485e9f180e77cff0e94f3f96b3ec3b3838fb32c83dcd15b9e68b1719d8ec7fe6e24bfc8db17858264b3da4bdbc5e705ad7585b79f6e267531ad90994640caa73513a31f50ee2efd3680838154ed888476741524c21956bd47fe183181ebcd7c7258271b3b77274d13f259735478b73e4190c35ae1c27654c3e507614c6a50166b8890121c0a6ce71ec39b2f1bde96f47702cdbf3b60b288fab5d2b3cde90131c31208cedf8c41ac6d8e7c98d2b6fa874f86cd6d61b5e37e0b35c711f730f6cda425bc0f8f8d1504e59d2816b7efce632ad7cbb1c20857433ac05bcd0e79125894e5f2205ee57148465e4da85cc89258264d80879c91126dfa617b2b2de75465841dbbd36b3696c18112783bbc87ea34ce7e5cc02f526e4f8d458e81b496be96693dc5c7d0c27ee3c220ce7640ea9e272b2d293ae74a6adb2638dd376efff1e2e64ad5a168917f1f6a21e5cacbcc09d5a923a35ba089315d087eb30415597ab4cbb98221603d332511c6773ab7b5a3e51673788fc0fcc91689a3645fb549848ac0bb81980ef95e634749d7787fa219727235f99db82b05ff47016752a6ee699f4745d8ce3db7a1eda6458a0f28c4ba2c7052f9ca2d376bb8875adfcca111e1ad131c90a0631c9016e336281989c598c94c9e4492780e08e40e83c9aba1ba7b4765639674c1ba045ecf506800bf459d0b2d23a930c2763bddd665f8f5638d2e5a4e282f6acb7ce04f82f671bd830acd819f1dc7e5277a2f14ee4de7c2457b42b6dfc6e6a8ef028dcb9169afb57094f27bb7316f72ab42b72d8403bdda0aa4b058789644b6e3f08dae2fda311803f02ffc21fc16afc16817512f1f08c14b88dd5e5a931423421c883ff1fc781e43d80dfd447fe505fe3198d28dc23814c97eb4120ad63b53a6467f2dca63ef3f249d4f320046732106356e9010d8e21db84a494f851655498ce7283b7fca83bb3f2f73e0135d6a9ae79474e8ecbf770bfaf6402c84986d344254857fabe0cd33455950233ed7767163da7053fbea987583dadc0351dcb1609ce5f626a7a9b3e58a38aef24a3322d2d57442ff14a10435eac076601d36f289bc0323a96c52fdcbac5e157de01b96911faffaeb85490769ed7ad871a75c2c57733c7f14b117649fb214de6c8eab77a9b04646c78bec37bd2f83ed8761a951cd571d8afd8bd2ac1aa29dfcd7a5f81de047f65e8710ab065eff5856b41addd082e6572a9963a75ac44835bdacdcb7534475b16c16847f7d2cb5016f773a0946b6c87c155bf35b3978fe68a6df3f3310239e1121a566a79b5e3f167f367cd5e8dbb28654d8b1f6a2aee9c21ff3722872f5d2bd4430ba33ce9815bae43e99967fcad81bba86af63fa2ec19edb569ffd272e310b6b0f220f3f827dc9e311dfbf6f856ac13eb89cd26217179c4d4f394b7a698ba2e43e280efc59d3f3d7f63822015f897661e9449eb02df9a4ece7b317001fc128bcaa034b1e9edd8e0c299a71bbf9adafc5dd22ad62912e8643240feceea5667b218d987ac306592d5b44cf24203963b5a41518f4ecf603cc8e1bab0ad9134393fa606284c80fa7d1f84bffd562e85d2746e07d82688969ccdaf6d1e2c2f7fd156b19e74b6aa03f8aec9d73c25f4247037cfd803335eec1a77c26a8a97bf2f97faa995eb136431cafc01e7584e9f4142bbf518097c09f4f6f12a1329385a944cad783f8bab7ed37c7207a86874cb5115bfc352d3352117123b728bd7f9c7dfc71ee4849e777c3ad75b0e62cdb50ce74b0393673124f641fccfce35752e076bad9514f907ff01b6260ebd2668e940651b4dd6408abca3c8947d3eb54a2bde9f4fe5e4da8bbaaab2339d0717f214b437446a7688bd17f64f82db14a0010e21fd31e03c1c8ba23e56c0b899501c04c8a8a5ca2c8374b604d3e0820a577f1f7f5aea6b4b9b71d29d6b67a2dab519d939617673d66b35f50756dbd4fd867966682975713cb2a85eb5603413e8252fe3935347c291d304bea1cb41ef67a48ea6b10898dcb08e9b7f16471ae2fddd0f977d20f837c366c0acbd9e119866517926431ea72b3d0fc86f6c0f7a5232d7e03156b006f643b2b527fff23f474fd32d9cbc2667d7280b4aa600713e09af131043664fa11cce1a4825f762c5354f0193dfeefdf96569fdd0e708e7b9f0278b9402e93fc0fb20345332ddadd81535efbd88367c395e59897d744e0f66d866d81d46d9604af840db1a2ea6b4aff90706ea64f7d4edf56ca78cb53fc2ddb3e900970964de011d79f942bd23a82b95ac3e07b2ad82c6f9acad733a5334115ff58c87851806b0f8ff957684b237aa361e0c252bd55bfd41140b2d2fe2d037ae6e94a238f13315d3535798d1619dc47664d6e41a3a0b1550ac298f45143491063c69f6924cfc62ea3e3fcd6adf43000c9dae8a90dbb660ae4debb341a73aad964863a797bc15830533052640f5f8dd19cf40f41fa12806c884b8695f2bf890f92e7bf921c12c5e27bf2b4ea9921af9006439bacf72fe3a4ab2b92dac67b25ec72ca740331131a9fe7d6379eadbffd8e41350b3ee9725dd492aabdfc2165a2fdfcdae5488d95c3bfca12cbeae9b503ad9544ed1d516907f3f7cdf4286697e1fae5bc4cbf74c42e8815c9ddc72f72c82abf96e2eae650263160681f8447349b6d8bc05174817b8c0ad3a376a16f2e7a140053fb8561467fc95d38b502146e5c4b15e1010e95319b673c9d113136f65ab4c4e6fa2c426332351efef09c73822566dc670ebacb2dfc531d410df8418f4b6ab5dab7965ed2757ae75a0126ac646e5eac1a777c402422a371983e0baa8830f9b2cc1ca1fc12196cfc7eb63dbb13a1cb53eef248772e8faa8ab99770b1a7dd808adbd12ba3a6a090ea64a9a54e0bcfde6ed63c137f07b360db18365eb3a794ab52895dd9341b86cd6fe35d2d5ea56520bbbf3821aae9e1c20fbefd3cfc455916fa2fb4b10af41335407fbc2bf1fd959d9fc74824824c7bd4d49c50549e92eb36ebfffa4bae545a8428f3d84d56ab12cba279d6107de35fd934a69b4d5f24b6efcb8799d5dc441071a36b7bba81659c00828227681b66f504d70fda9f6e5e6eecbc8487518ce411f132b468652e64d19944ce579079227509d5b22ac3d7f53c8029bde23893f89d971ef475b32c82a54ac27d530917c9e204743fc34c492707d03e6e6d35d100f834e4246a3c38ad0216e3fcefabb52e6f4fa2750bcc57975a0719c22f96e92884996c22ade8b4fbb741462944f6fa69d44374e73b57997f0b99b8568049cfe611983f964c51d15e80f9318d03d89b8d4cd9fec2486d8ceb770115ca0133342b566a0d9553effb8654ecfdbac1d0c4d0d78e27f469564da08d9ce13a733f5466f12600677716cfc47f5d005f022b5ec9", 0x1000, 0x4, &(0x7f0000001000)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80000) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000010c0)='tunl0\x00') socket$rds(0x15, 0x5, 0x0) (async) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000000)="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", 0x1000, 0x4, &(0x7f0000001000)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80) (async) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80000) (async) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000010c0)='tunl0\x00') (async) 17:26:41 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x13f, 0x2}}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x4, 0x1, 0x0, 0x9, 0x25, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x8000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', r5, 0x4, 0x0, 0x7, 0x40, 0x7b, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0x10000, 0x6}}) socket$nl_generic(0x10, 0x3, 0x10) 17:26:41 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index=0xa, 0x2, &(0x7f00000002c0)="18a68f1692f058c8fd2a022a6a37ea195dc988f145de6b7d50fc7264257f1163cd812799ed583f5a4cb1451031b2df1af2e7a0e3263161ad5fa7aa0f2ddb09d703dfad2d12e0a5f0c039aedb560fcbe6cff05cbb94b4e5b40cc30f223f96f50f51efcc0acbe136269aef95db3d2b1b76718fe11ff074bd2d750ac5b574ba5d0e97ce36f2ee7a1b3f1b0f2e6b0fb6fd16b2b2fa842a877349c4b83e6571f0fa5572e8bbf5b4b729d956c5420a5945459760d86376be3922f6650c947b0a9560157e42a661d6f8b4c11fe51e91410aa9d17e45b8", 0xd3, 0x2, 0x1, {0x0, r7}}, 0x20) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:41 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3359.135166][T32427] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:26:42 executing program 4: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x80, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000400)={r5, 0x200}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000380)={0x0, 0x3}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000229bd7000fddbdf25130000000c00bd0007009163ff7f00005e0a6a3be98d23cacc52e552962e8fe4cb682d73eddc547a4593429fb22bb587923251bbb7e9a6a9f28d8a9de8e74faa6cb06e2247b9d2c49360e9516a188e15c1c5d662801990a65c0e6fdd0719367440603340edc1ef377c6dd6fe030672d9ca54e8c67add5a000b37f0a9ebf5c0ef51fc7b04d4087672cbbeb8bb87bba1bf72eed614fe152873b79e0ae283ac523d083b0524348fb401611577b313c4cb25f172422f09d647fe38fb4376390cc37c29d83de6486f44cfe2532003da13f4c39f3385d2ac241975df8a4c4d3f88a2766b57dbd46195ff1c2d5612bd0bab54a56617429b872e8fc6abf6c39c283a9607d00e4a99bbb8e366e63005f98d411c6b7296c9a79374c66b752ce89c7ed23ea881e5ba0e70c711c08a9857bf21f82193e3e3619750ce926eaf84ce8d68c963c804658715d8cca5c973facb455448cc56da74cfe31bc86480d4420915403386e988750f1eebd9a099"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000002c0)={0x80, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000400)={r5, 0x200}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000380)={0x0, 0x3}) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) (async) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000229bd7000fddbdf25130000000c00bd0007009163ff7f00005e0a6a3be98d23cacc52e552962e8fe4cb682d73eddc547a4593429fb22bb587923251bbb7e9a6a9f28d8a9de8e74faa6cb06e2247b9d2c49360e9516a188e15c1c5d662801990a65c0e6fdd0719367440603340edc1ef377c6dd6fe030672d9ca54e8c67add5a000b37f0a9ebf5c0ef51fc7b04d4087672cbbeb8bb87bba1bf72eed614fe152873b79e0ae283ac523d083b0524348fb401611577b313c4cb25f172422f09d647fe38fb4376390cc37c29d83de6486f44cfe2532003da13f4c39f3385d2ac241975df8a4c4d3f88a2766b57dbd46195ff1c2d5612bd0bab54a56617429b872e8fc6abf6c39c283a9607d00e4a99bbb8e366e63005f98d411c6b7296c9a79374c66b752ce89c7ed23ea881e5ba0e70c711c08a9857bf21f82193e3e3619750ce926eaf84ce8d68c963c804658715d8cca5c973facb455448cc56da74cfe31bc86480d4420915403386e988750f1eebd9a099"], 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) 17:26:42 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index=0xa, 0x2, &(0x7f00000002c0)="18a68f1692f058c8fd2a022a6a37ea195dc988f145de6b7d50fc7264257f1163cd812799ed583f5a4cb1451031b2df1af2e7a0e3263161ad5fa7aa0f2ddb09d703dfad2d12e0a5f0c039aedb560fcbe6cff05cbb94b4e5b40cc30f223f96f50f51efcc0acbe136269aef95db3d2b1b76718fe11ff074bd2d750ac5b574ba5d0e97ce36f2ee7a1b3f1b0f2e6b0fb6fd16b2b2fa842a877349c4b83e6571f0fa5572e8bbf5b4b729d956c5420a5945459760d86376be3922f6650c947b0a9560157e42a661d6f8b4c11fe51e91410aa9d17e45b8", 0xd3, 0x2, 0x1, {0x0, r7}}, 0x20) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 64) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 17:26:42 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x13f, 0x2}}, 0x20) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x4, 0x1, 0x0, 0x9, 0x25, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x8000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', r5, 0x4, 0x0, 0x7, 0x40, 0x7b, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0x10000, 0x6}}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) [ 3359.575041][T32468] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:26:42 executing program 4: r0 = syz_io_uring_setup(0x36a8, &(0x7f0000000080)={0x0, 0xda3d, 0x2, 0xfffffffe}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1ff, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffffffffffc}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x6c000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:42 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:42 executing program 4: r0 = syz_io_uring_setup(0x36a8, &(0x7f0000000080)={0x0, 0xda3d, 0x2, 0xfffffffe}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1ff, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffffffffffc}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:42 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x13f, 0x2}}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x4, 0x1, 0x0, 0x9, 0x25, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x8000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', r5, 0x4, 0x0, 0x7, 0x40, 0x7b, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0x10000, 0x6}}) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:26:42 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 64) sendto(r0, &(0x7f0000000000)="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", 0x1000, 0x4, &(0x7f0000001000)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80) (async, rerun: 64) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80000) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000010c0)='tunl0\x00') 17:26:42 executing program 4: r0 = syz_io_uring_setup(0x36a8, &(0x7f0000000080)={0x0, 0xda3d, 0x2, 0xfffffffe}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1ff, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffffffffffc}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) [ 3360.069439][T32499] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:26:42 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:43 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000002c0)="8f3bf8d497009ed6102afb804bb4efa829f709e7e0d081d30bd8ac92238a4de00515c135e0037bb46423e2964b04852fcad0710f671902e5941e0f78", 0x3c}], 0x1}}, {{&(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="b276e43584f180ed92fbf048813fd5c2f3383b8c011e923c69c554cc5dc629205cbf2e34ab95e0ed5824", 0x2a}, {&(0x7f0000000480)="db92905baafaab50a9de8030c9943b5ceea35f5c208eebda53ad5f7957e8e5156bf9d0e498b6a7c5ee20a08d11788170", 0x30}, {&(0x7f00000004c0)="c96c46661bdfc4ab50608560f6e84d3f74731c98cecdd710c8b782c7dc7399fcaf6af79286476a55c83090a8", 0x2c}, {&(0x7f0000000500)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="035d1c8d64ed02c6a0050610ca7f4acc8b916654", 0x14}, {&(0x7f0000000680)="17992b8bd3d7be1122058ac22af35e3be17852696a1745617a245d81c295b905ba093e1a93834398caaadf4893aa67557830a078081bb6637b6adb058c7ac8d333fa9cd2527079d056200c284a4a868bcd0a809521f6", 0x56}, {&(0x7f0000000700)="0ed713016179252084a2911041ae822c7fa38a2b93e9c87c142e8043d541f31c79b7f20e2a24b994ad7366fd4844f41892bcdb5ac739ce07aff8a1f58a21788ac354c133bb561ced1ae8e5f85b4eb9ddf1a28fa03b2e5fecfaa1f186530392553b230f2d02afdaef2c3c6d1187b5ae397b35357df24f520f91b1697169f5c59fad1a3025887d558ae5023ec2d5d7c931dca2c374f54ac1a2067d086857470a62134ffe735946f459ce161de5ff9d0218d2f6808a2a9027ffb595e8b5798000ff23eb", 0xc2}], 0x3, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0xf28}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0xd8}}], 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f00000009c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200)) syz_io_uring_submit(r5, r9, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x100, 0x4, 0x1, {0x0, r10}}, 0x2202) socket$nl_generic(0x10, 0x3, 0x10) 17:26:43 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_complete(r1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x20, r5, 0x223, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x127c, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x11dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1d4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\']\'@@+%@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xf3\\,\xad\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe9ba}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6414f064}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa14}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdfb7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x127c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 17:26:43 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) io_uring_enter(r5, 0x6dac, 0x8204, 0x1, &(0x7f0000000200)={[0xfffffffffffffff9]}, 0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:43 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000002c0)="8f3bf8d497009ed6102afb804bb4efa829f709e7e0d081d30bd8ac92238a4de00515c135e0037bb46423e2964b04852fcad0710f671902e5941e0f78", 0x3c}], 0x1}}, {{&(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="b276e43584f180ed92fbf048813fd5c2f3383b8c011e923c69c554cc5dc629205cbf2e34ab95e0ed5824", 0x2a}, {&(0x7f0000000480)="db92905baafaab50a9de8030c9943b5ceea35f5c208eebda53ad5f7957e8e5156bf9d0e498b6a7c5ee20a08d11788170", 0x30}, {&(0x7f00000004c0)="c96c46661bdfc4ab50608560f6e84d3f74731c98cecdd710c8b782c7dc7399fcaf6af79286476a55c83090a8", 0x2c}, {&(0x7f0000000500)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="035d1c8d64ed02c6a0050610ca7f4acc8b916654", 0x14}, {&(0x7f0000000680)="17992b8bd3d7be1122058ac22af35e3be17852696a1745617a245d81c295b905ba093e1a93834398caaadf4893aa67557830a078081bb6637b6adb058c7ac8d333fa9cd2527079d056200c284a4a868bcd0a809521f6", 0x56}, {&(0x7f0000000700)="0ed713016179252084a2911041ae822c7fa38a2b93e9c87c142e8043d541f31c79b7f20e2a24b994ad7366fd4844f41892bcdb5ac739ce07aff8a1f58a21788ac354c133bb561ced1ae8e5f85b4eb9ddf1a28fa03b2e5fecfaa1f186530392553b230f2d02afdaef2c3c6d1187b5ae397b35357df24f520f91b1697169f5c59fad1a3025887d558ae5023ec2d5d7c931dca2c374f54ac1a2067d086857470a62134ffe735946f459ce161de5ff9d0218d2f6808a2a9027ffb595e8b5798000ff23eb", 0xc2}], 0x3, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0xf28}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0xd8}}], 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f00000009c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200)) (async) syz_io_uring_submit(r5, r9, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x100, 0x4, 0x1, {0x0, r10}}, 0x2202) socket$nl_generic(0x10, 0x3, 0x10) 17:26:43 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x700c0000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:43 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x4c0f, &(0x7f0000000040)={0x0, 0x85e3, 0x20, 0x0, 0x10a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x2}, 0x7) socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) 17:26:43 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_io_uring_complete(r1) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x20, r5, 0x223, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x127c, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x11dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1d4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\']\'@@+%@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xf3\\,\xad\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe9ba}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6414f064}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa14}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdfb7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x127c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:26:43 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) io_uring_enter(r5, 0x6dac, 0x8204, 0x1, &(0x7f0000000200)={[0xfffffffffffffff9]}, 0x8) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3361.138510][T32540] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? 17:26:44 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000002c0)="8f3bf8d497009ed6102afb804bb4efa829f709e7e0d081d30bd8ac92238a4de00515c135e0037bb46423e2964b04852fcad0710f671902e5941e0f78", 0x3c}], 0x1}}, {{&(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="b276e43584f180ed92fbf048813fd5c2f3383b8c011e923c69c554cc5dc629205cbf2e34ab95e0ed5824", 0x2a}, {&(0x7f0000000480)="db92905baafaab50a9de8030c9943b5ceea35f5c208eebda53ad5f7957e8e5156bf9d0e498b6a7c5ee20a08d11788170", 0x30}, {&(0x7f00000004c0)="c96c46661bdfc4ab50608560f6e84d3f74731c98cecdd710c8b782c7dc7399fcaf6af79286476a55c83090a8", 0x2c}, {&(0x7f0000000500)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="035d1c8d64ed02c6a0050610ca7f4acc8b916654", 0x14}, {&(0x7f0000000680)="17992b8bd3d7be1122058ac22af35e3be17852696a1745617a245d81c295b905ba093e1a93834398caaadf4893aa67557830a078081bb6637b6adb058c7ac8d333fa9cd2527079d056200c284a4a868bcd0a809521f6", 0x56}, {&(0x7f0000000700)="0ed713016179252084a2911041ae822c7fa38a2b93e9c87c142e8043d541f31c79b7f20e2a24b994ad7366fd4844f41892bcdb5ac739ce07aff8a1f58a21788ac354c133bb561ced1ae8e5f85b4eb9ddf1a28fa03b2e5fecfaa1f186530392553b230f2d02afdaef2c3c6d1187b5ae397b35357df24f520f91b1697169f5c59fad1a3025887d558ae5023ec2d5d7c931dca2c374f54ac1a2067d086857470a62134ffe735946f459ce161de5ff9d0218d2f6808a2a9027ffb595e8b5798000ff23eb", 0xc2}], 0x3, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0xf28}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}], 0xd8}}], 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async, rerun: 32) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f00000009c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200)) (async, rerun: 32) syz_io_uring_submit(r5, r9, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x100, 0x4, 0x1, {0x0, r10}}, 0x2202) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 17:26:44 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) (async) io_uring_enter(r5, 0x6dac, 0x8204, 0x1, &(0x7f0000000200)={[0xfffffffffffffff9]}, 0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:44 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:44 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x43, 0x1, {0xffff}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:44 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="da9ce710ab665fd97a2b3e438818dac18888e2dd2e932047748e94b41a254867b07b3ef51e4923b2329d016cfb57e2b02c894b2a214d17dc3be3096cf0f222a041cef5c14e29d5f90648145559b782813672ad0d078b62222c6040e7a6134480d49df5f06e0cd3c7a8c2813404dac2788f2f679ce217236654855f2b858473afb6fc8257a3766402ac6ec671ea4bdabeee26342e90aa9728af11e61618d8f23266ccc0c51896c8cd", 0xa8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:44 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_io_uring_complete(r1) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x20, r5, 0x223, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x127c, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x11dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1d4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\']\'@@+%@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xf3\\,\xad\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe9ba}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6414f064}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa14}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdfb7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'cbc(blowfish)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x127c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 17:26:44 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x4c0f, &(0x7f0000000040)={0x0, 0x85e3, 0x20, 0x0, 0x10a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x2}, 0x7) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) 17:26:44 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x74000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:44 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="da9ce710ab665fd97a2b3e438818dac18888e2dd2e932047748e94b41a254867b07b3ef51e4923b2329d016cfb57e2b02c894b2a214d17dc3be3096cf0f222a041cef5c14e29d5f90648145559b782813672ad0d078b62222c6040e7a6134480d49df5f06e0cd3c7a8c2813404dac2788f2f679ce217236654855f2b858473afb6fc8257a3766402ac6ec671ea4bdabeee26342e90aa9728af11e61618d8f23266ccc0c51896c8cd", 0xa8) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x11c, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 3362.080368][T32585] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? 17:26:44 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="da9ce710ab665fd97a2b3e438818dac18888e2dd2e932047748e94b41a254867b07b3ef51e4923b2329d016cfb57e2b02c894b2a214d17dc3be3096cf0f222a041cef5c14e29d5f90648145559b782813672ad0d078b62222c6040e7a6134480d49df5f06e0cd3c7a8c2813404dac2788f2f679ce217236654855f2b858473afb6fc8257a3766402ac6ec671ea4bdabeee26342e90aa9728af11e61618d8f23266ccc0c51896c8cd", 0xa8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 32) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 17:26:45 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x43, 0x1, {0xffff}}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:26:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x11c, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x11c, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:26:45 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:26:45 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) syz_io_uring_setup(0x4c0f, &(0x7f0000000040)={0x0, 0x85e3, 0x20, 0x0, 0x10a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x2}, 0x7) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) 17:26:45 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7a000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3363.147536][T32625] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? 17:26:46 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x43, 0x1, {0xffff}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:26:46 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) (async) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:26:46 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x11c, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x11c, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:26:46 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:46 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) (async) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 32) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) (rerun: 32) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:26:46 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x8}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:46 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80), 0x4000000000001b0, 0x0, 0x0) 17:26:46 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x8dc, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x4, 0x0, 0x1d4, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x16000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="1e1807623f61154b4549faf8be82ded17368", 0x12) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x81000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:47 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:47 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x8dc, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x4, 0x0, 0x1d4, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x16000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="1e1807623f61154b4549faf8be82ded17368", 0x12) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:47 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:47 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:47 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80), 0x4000000000001b0, 0x0, 0x0) 17:26:47 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:26:48 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x8}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x8}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:26:48 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x85ffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:48 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) (async, rerun: 32) r1 = syz_io_uring_setup(0x8dc, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x4, 0x0, 0x1d4, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x16000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="1e1807623f61154b4549faf8be82ded17368", 0x12) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 32) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 17:26:48 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:48 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001a80), 0x4000000000001b0, 0x0, 0x0) 17:26:49 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:49 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x40046207, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r3, r3, 0xffffffffffffffff, r4, r3], 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r6, r5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000200)={0x1, 0xe5, 0x1f}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x2d, "36fbbbb633bfb127a234e6b7401581af69c98fe52076de433cdbeba0284c2438d744f8ffd28f6b43fe59517626"}, &(0x7f0000000300)=0x35) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r8, 0xb735, 0x10}, 0xc) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x89000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:49 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000640)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x4, 0x0, 0x4, 0x3, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd, 0x6, &(0x7f0000000480)=[{&(0x7f00000002c0)="f3db6a505fc0c5ce12de9f3ceeca49b4f8a3225158f32d5d25967f634eac59ac21b7eecf2a2d0b5a6be85ed10cf40b1965df1984f82663942c14f562239ac79b0b14891a8602445eb092770a2d6e78b36b011673bb7c87cd1d2a6f8459afe36bcb2b3f4a87ae7973ca31f43f3d93a263af0fe4c1de5317e3c310f44374da144a195636536d83439a147ed329cdbe427f3491fcbfec01d49ca8a98dd8a4509e42760d73da8b81026442bbf84ace43cd6f7d233d05de20f4a5762fb9a0e473cbfefd5a079da29b3bbb62f948c68049c218956ca45a2bf9d418b160ef4dde9a3aeb5d0a41dff8217cbe270ecf4bc840ed08", 0xf0}, {&(0x7f0000000440)="b0905287ee23f51a91c762acf2dfbfa7a5b1502be57532e39fbdf73fc158c8ba4093e8ebe0d746b092c9882599b795", 0x2f}], 0x2, 0xa, 0x1, {0x2}}, 0xda) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) accept4(r3, &(0x7f0000000080)=@ax25={{0x3, @default}, [@default, @null, @rose, @netrom, @default, @null, @rose, @default]}, &(0x7f0000000200)=0x80, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:49 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3366.621143][T32743] binder: BINDER_SET_CONTEXT_MGR already set [ 3366.660463][T32743] binder: 32741:32743 ioctl 40046207 0 returned -16 [ 3366.706825][T32743] binder: 32741:32743 ioctl 4018f50b 20000200 returned -22 17:26:49 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000080)={0x0, 0x8}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:26:49 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) (async) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000640)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x4, 0x0, 0x4, 0x3, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd, 0x6, &(0x7f0000000480)=[{&(0x7f00000002c0)="f3db6a505fc0c5ce12de9f3ceeca49b4f8a3225158f32d5d25967f634eac59ac21b7eecf2a2d0b5a6be85ed10cf40b1965df1984f82663942c14f562239ac79b0b14891a8602445eb092770a2d6e78b36b011673bb7c87cd1d2a6f8459afe36bcb2b3f4a87ae7973ca31f43f3d93a263af0fe4c1de5317e3c310f44374da144a195636536d83439a147ed329cdbe427f3491fcbfec01d49ca8a98dd8a4509e42760d73da8b81026442bbf84ace43cd6f7d233d05de20f4a5762fb9a0e473cbfefd5a079da29b3bbb62f948c68049c218956ca45a2bf9d418b160ef4dde9a3aeb5d0a41dff8217cbe270ecf4bc840ed08", 0xf0}, {&(0x7f0000000440)="b0905287ee23f51a91c762acf2dfbfa7a5b1502be57532e39fbdf73fc158c8ba4093e8ebe0d746b092c9882599b795", 0x2f}], 0x2, 0xa, 0x1, {0x2}}, 0xda) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) accept4(r3, &(0x7f0000000080)=@ax25={{0x3, @default}, [@default, @null, @rose, @netrom, @default, @null, @rose, @default]}, &(0x7f0000000200)=0x80, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:49 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x40046207, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r3, r3, 0xffffffffffffffff, r4, r3], 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r6, r5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000200)={0x1, 0xe5, 0x1f}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x2d, "36fbbbb633bfb127a234e6b7401581af69c98fe52076de433cdbeba0284c2438d744f8ffd28f6b43fe59517626"}, &(0x7f0000000300)=0x35) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r8, 0xb735, 0x10}, 0xc) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:49 executing program 0: socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x1405, 0x20, 0x70bd2a, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x11}, 0x20004081) recvmmsg(r0, &(0x7f0000001a80), 0x2d, 0x40000000, 0x0) 17:26:49 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:50 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3367.297790][T32763] binder: BINDER_SET_CONTEXT_MGR already set [ 3367.309830][T32763] binder: 32752:32763 ioctl 40046207 0 returned -16 17:26:50 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000640)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x4, 0x0, 0x4, 0x3, 0x0, {0x0, r8}}, 0x1) (async) syz_io_uring_submit(r1, r6, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd, 0x6, &(0x7f0000000480)=[{&(0x7f00000002c0)="f3db6a505fc0c5ce12de9f3ceeca49b4f8a3225158f32d5d25967f634eac59ac21b7eecf2a2d0b5a6be85ed10cf40b1965df1984f82663942c14f562239ac79b0b14891a8602445eb092770a2d6e78b36b011673bb7c87cd1d2a6f8459afe36bcb2b3f4a87ae7973ca31f43f3d93a263af0fe4c1de5317e3c310f44374da144a195636536d83439a147ed329cdbe427f3491fcbfec01d49ca8a98dd8a4509e42760d73da8b81026442bbf84ace43cd6f7d233d05de20f4a5762fb9a0e473cbfefd5a079da29b3bbb62f948c68049c218956ca45a2bf9d418b160ef4dde9a3aeb5d0a41dff8217cbe270ecf4bc840ed08", 0xf0}, {&(0x7f0000000440)="b0905287ee23f51a91c762acf2dfbfa7a5b1502be57532e39fbdf73fc158c8ba4093e8ebe0d746b092c9882599b795", 0x2f}], 0x2, 0xa, 0x1, {0x2}}, 0xda) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) accept4(r3, &(0x7f0000000080)=@ax25={{0x3, @default}, [@default, @null, @rose, @netrom, @default, @null, @rose, @default]}, &(0x7f0000000200)=0x80, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 3367.356024][T32763] binder: 32752:32763 ioctl 4018f50b 20000200 returned -22 17:26:50 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000002c0)=""/227, &(0x7f0000000080)=0xe3) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:50 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:50 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x40046207, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r3, r3, 0xffffffffffffffff, r4, r3], 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r6, r5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000200)={0x1, 0xe5, 0x1f}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x2d, "36fbbbb633bfb127a234e6b7401581af69c98fe52076de433cdbeba0284c2438d744f8ffd28f6b43fe59517626"}, &(0x7f0000000300)=0x35) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r8, 0xb735, 0x10}, 0xc) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8cffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:50 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044000000000996930b7d304a201ca671f410472390a832b610c693fab2b765feab6f4bedb1ac43752a78bc6d0a740dc1e0ece06488e8daf1adf432d61aa97e96b90e7ec62f23197673748c8a8a5ff205621e725fb16f80213df5458885da14db6cdb7c0c211baf1eee4601a5d7862deebc3d001047a6d2865b192c5b31e0106c3dd27a38c23bd7bfcf86187e89603edb973ef2567bb149a4e2bd915bfb05ea754c9a89a990eb20052524eec708ce45b64e5c501bc564b6b5fcdb7fb3bd000000000"], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) sendfile(r0, r1, 0x0, 0xbcf) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) dup2(r1, r1) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="7f454c467f00773d010000800000000002000300830c000030010000000000004000000000000000f4020000000000000000000001f83800010001043f00070003000000ff0f00000000000000000000ff0f0000000000000000000000000000010001000000000001000000010000000700000000000000d94ce8caccc71a6007eab0d976d3db722fba4d83157be12f0f99c4730c740046069b5d97a9e2c5bb19bd388397079bc5d3b256180ee797b5ba628ac69ddad892657830dc5b77998ad5b06fec1d4bb33b0d895f0cd5f6d97256248d1155d82ea535ed7255fcd27c4f4ac8dba78290f0c0dde5b61bc5969383cb0282b0f5bd848d9b63588dda34aaecfd17050c8cac6d3ac6d220e7f9a6c1f77d81b2ca433ed0d5ffda322196dffc0172deb6fbc372381a78222c9f12faa036fe8a525936149fbf34cd8524341ba5ab7e3c9dfa0b324114ebbffd6c71cd86acb279bdfd1266a88155db5d9e94e1e20814f2a80fa32e61e20e170f92238703506312ef1f18ae2b685cc8d1e08ffe5b818a4f513dbb889f077826c0d7426e2168ce0467b5e8d74e88a7edb0622e1ace4c33d68f32866e0913d40ae442b3a832339bac4af1d2814e1ea7a9afd65a2deefa3b12e9e673112e7e6d61319aa5225d28b72809cd0bc2a26cb9568b54bf98a95f54fe7cc7f393ba90f5f210b467f57c7ed3e956e26610d785ae01257a4d027a1b5e8532cf68fe05c56e0e35f2885062223b2d270b8353afadd8278b93caceedb7aeb3ea3318b5853e53b46209ba1701816610e1f632988901c97a74b509533bd827ed2e2c2407e67fd5beb600b2cf6282e1781f8a195baf3c2423a115d7f6deb785139ef6a0d2d044712c372bba82a18eac264eebcbd47ed29dab10fe769f770abaab2e8eb2b936b2c6c1f8f0bf2fcecec89905d3f52be7e9dc9ed495b1004dadbaec5152e0267793141b49ae6f4666c9af116094822edade146435a8f00b9f0fa659486f6d0cb408c160221e81722b9981d954869eefb008cb552bfe62bf82651267027fa0e634d22607daa1d0a1c8b8f81971883cf3dac02b528ab9972cb0963c0c6cede902d6aa38051a3461e5b7347de84cd0a941916a3d9feb906a21db38d2aa194456378fbd363733608aa34044dc3bc53f0c475aba2bc50a5edc36664c4a41b86486235966e77f95394c9cd707daa99d23e9a89482e32d4c90345dbb6099e785ab368695750e450a9bbb98ed5b3937dee13571a7cf1fa44ece0bb683146c6322115e03eef7f4c94b22f817d676940c0464a251786a7f4ce52d0b65db4d0a66941105373fd3a9d90a456238adff2678e964b889a7cd6e72bade90514f7abb572004c3e410e9f523f7592ff45c03219679611e987410d19340b21cdcf3b6e8d216100e3ef6292f8b2c6e6c8327516a7a1deb57ef6edcbfd66a08bc9eeefb8f884cf7f74607aecb10953e62c95f4c4286fd3e6f38207d53e8db746150e0f34767cebfe1d8bfffcb6e3990b2c84a9260dc772406f9a34913c18cf3f9330395425803b8d3c7d750ad3c79715359b43a35a1241f745da907680cf9e33cc6b8358c0d790622ee6d03901820d5e0967ff68dc0f308ffe6336d9c9ad9d569a9509b0f236bf696bbaffa8481ae08e60c38e9254d5954aae805b872697f547533effd64c338296c89d04e29354c98fc6ee8bdc62af0ad6cb47464f64befe23b41ef3213c56f8a3689ce19faa69d746032e0fca10a43ecd942b6ad9505226df9a7fe16ae50252b1a544a3bd1ca8400e2ebabbc50eea50c3bf628d2c70320de6eb930e23ebcccfd11cf8283f70985d94f22679d0def1dcf25d2241b1301b8864a02d806a68bf56b4b2441e2dd76065de68de961cc9cee6dae92e08b55f76c9b50352e5dfa625c180b3bccc950ed625c94c1ecfcafb4e13fabad8703a338f5109d03eff146a28f0e214a07e10c82405bc9f3fb361ed9dd2347b459aba27ca98bf7bbce52a1a6044a3f8ea369a4cffb6378a9ee2cd7d463773ef176dbc08edf8a3f4d58832bdeb2df77044fed3708a2cbf14d3acaa701e721d2010bb47b76c680f5b8ce81a44bd62733022a82aa00e6ab7b289d286af2a7a5fcde59edbd4974a82be3474d5fc31ba2f0c83aab77e0271a85cf1e9322b3b5c87c92bfca87b7f78f66bd38b622e400aa447bc9d1acd24883161cb8575a28208587b99df0f5b1e7152b9f9d23f52df4e1b336bb193f0a5be87ba605fa9c1fec1403c03412761e29233ada43d234e3acfcaca5bb0f168265d91f788698d7174eb4087a178ba0bbf61efa83bd7b85fbacd885b25c5313387758dafd50327744e1fe4642c85bcae8f6a2aba9e7429ded98bffb07b3241adc0c5c53414e2e2e18cb0b43e2d7b72b31c3f4977c3f3085da8d363e154124173aff33e3f4878e254ffe273c200cb7f931ecdf91a983c7d72008091040059ccc9c4ca71674af5b429853d50e666fc61d83d64f54cbc4ad4cd5e93d60acd8dd6f6c525bb564cd6c9bb818c68af580ac14f6359d4e74cd82575bdd22514de0e900d44ff3fe4e7affe013916d5fb8e0bf1c9bb583c5064ecc1dc9b2560e55d39897922647470c9b3e2e381acd236ae3501f6178549079bdb44ac24a06694dfb06dcfa1f0b0fe59694c1daf0e8f2d47883133760d492505ac554a41560848bfd0f95269546416220ca6aa3cad2aaa9ce7055ccbfc25ab303f6bd6daf2c228825a6d1d045dd2f940bb3de8b5b4751dc92081c87775d92819f48918b31d6460fac28a58e8d58b58379eee5661a39e4c618e45d0d4a9c37d2e5ce30b45d2072440218393a8cb5d38ce0a1a0b54350be6aeca71876274363e4c6500247e29263b2d0149618e74ef942f89b82af4d272fd788996b4ff692a80ee7f84b4d9790cad9e2b7b4b7c126ea883e74843e7daf235d015c60c65444abccd01f4ab63bc56f8a3b8ac0024630ab632eb9bec46faf34674391e10b3b512b8f59fb0249db0a955d165b31477bfd23ae0ddf67008ac799291882bdd48a86c9489bb878c1853464bca524555bba76f04ba7b5ed75299c1a217cf2c17d3bc0e6de8615f85f847d0866c30d7ab0b43a685fada016aa81b3ec579a9cc5fbf480b773673f968b8807ec0ceca98a816097d5191a7660df3f39505e9b4ce39cad88db73feffe9913fa0ec411a2b1dd465259a87055d1311b3a4633a9fcc0130dd375ebacf7d8f39753f57718f068325d37b85b113f568cd5226743b69fb455a0c7ecb38737d760fe58c3c70fb9fd36b82d986309d0c484974d4b0d690dce9a09653d06d5016958c488def28f9cef9ac6e6bb85a2812b89d8b492bde51580d96529bfc70107b8fa802cf5b0d44b3fd3367f1b5f8fcf4b31a106500150a2a5166e4c972f031643a4422db14791218560cc788d443477ccc0a2ee5ed447cc1bf0bde807c3f17c57fa0cb37f2edb91385e8c483cc821db44e122ca8e8ecb7e26ef30445b42613f86261b1ea01e75e7796e50603654d07281a87747bdb648fffe0eb55f3e72fde6f1a753fc3c44d6e317278e3eeebfc3d69a2b363ea49bab170f8dc96bfd89d7ec2cac33ed62c88e1719d470d0ccc6a6dae09ea80c61bea7aab8efb8265fc24faa58099a4993520630e8ad3b2c201452758e49149ca53555559ad1e08b9ac6cffcec1a66ae618b3efca17755569dfb00ff1ccd8dd06f8dbd0124420efd14f7faa2b599a2feffbfcf2e871f4e54bdef50c922adccf31a7e3a6b002f3c510009df147414baada3fe3cdbee2138dcf52b065b5a3b7f4453915d673dfab517355a463913207cf9d6f29ce3dc4063c8ae3abf8d689ee4f009f367e9b1ec13af012257d1ffe291dc206fe47e929eaf028f4c1057af8ec284a13196a1c4b216bcf4b010680e99fbcd8388189e55a9b61453e8fe4cbe4441159e5404030aeae39c9cd721135c827316b500dc82c20ac16ff1f863e956d4b762a2ec724a66c91c7c58034a9043992f16dd30893052cee92577e179a5b84c0d3f4f8d16d47ab375b8d35004410ea2431350b6d81732d1343a241b1ca12df744acd20b77ff1fbf4adb423ae2e9e2a4118347887e25437189c7483637513f9acc0a42a64f838427d72b184517383a20f690ca2a3837a1b85cd4c409daa3991b5205bb1d0bfb65e78665e3da3c7fa42eb45e36e32e4cf1f4d1609cd7db71c2ebe50fb7bc082dcd416a138faf326877e8bbeaa0ee3e97cce86b3f0e80e1931390e8f1dd7102899500eb46218252640bf1ac83dc42631c12913aa3f13927dd38a1884a91db44349f1391bdd845654636bb07b04479e53c6187332064bea266048f5cf1a5707ef361f25f2ca25327ea1f61e3677128c3ebb8b72942d13885cc38bae0ecdd1630774f081e179875c86b5d0c48397426602e0c08e2647897269e6c44d0e7bf0bcdd794fc4d31c40c07494d51d4b775602291c3809017a1e915c3889aa07331ff332704fba7d99997e08f6ad9d46f6c58e73820bf43f74f6abaa5714ebdabc61f8fc3098233f79b9406b6bdffb9c380ea09ad72cb4e2460f4d9493d31ff23ebf3e4429f00f1e668978a911b65eae4cf76ea8f3d1b9617f2d078650644ebc658db593ec6f9496b48dd9565b7de4e9ce00a5ce0bacddde07137ddacaf8b36001539a99116d7a86ffe47723b0da5ab5f3d3ecf1074f2dc4ff897d2cdd52bab01a3ac63972875263442bc909258a65b7d5189ff01921104de68c2bad768e1f694a907da98addf642df2e1a0846634787464f5b48620f51c720096c276af9e21e69d78397b08ef957f3b99ba8320df6b95e88b8e8fe2665c4f2a27e55e1e04c48793e7aa895ad00ce81aec89596cb7b18da3cb2f85f5fe211fbb033d98db681923ec732d61eba678275743abc957b4621e52ae36b2a44dbc5802a83534be02ac9bdf08e9296cbd96906f53eecbed4eb546bc5a1927c418c83a2c9ff8ca2bd7702d9b1f0a6ea70446be6d1a18a2860cd5a5e08102fae723ce1d7513713e8119d3f9b9ec05c2d84133c1baada781db63e97cf34376ab95e8384537d9b93526f2b5531b455c8c51df166bff3af05ab681064bffe244208f83b424b5345fa433419828ee541384127d572660bb36b6d91575c2e71c23ed29d88355571aced935fe7f1a4fa92a4399c2b2f4b765dd0931a75e766082b49b023c0ffa3dee0fcf127dd10116678ef07231830e924201f4c0016c35a067d363308422de1090b8c2145d948ea3d4326e9e0415c995836e9aa523a18d5a5c91296ace0ae0ce8dd2180e38ac111a1075cbaee17f805419f1828692ba11fbf19aacb9fcd54889752777569dc1f735ef812e236be251c20d2f53940036dc8682572b2dfb0b862917cf89e143a8abb560441c7d2b1b69a17bda3f3e4add54e3b399789e2665a4b693f6e4b3ca87c560d78605ac87dea0ecc27ac49b01d784da05c48997f7e7194c679ff69f92575f2749210b29d8fefd025a9a177281de78334b44ce51e06dc86e4e67d6420f158b0c90bd4ac4d23881acd955cc7ed14dbc490ec99f367602ab8c9a33a224dcb90212c419dd10287052b6ce8058656deb228b05791101770febd15d297ae6b6a6154d8b007142a4a215cfb1251ef68cc1f974586a6363ba861650580a0e38d71a3f0583c7aa19004d467a891102f779ce94ac989068220b3099a849681f874b1a5e09a67ae58cb6d4e02502de942f081b75b26575771c448bad650f95fabbad24234fa3e432d1962252d9d4d1274e4351fb49fc12f85a39732e11e6b09831dad6ac6dccecf63634b6c4f8a55fd4336911341f8a0f5a2e74c1fb40d58c969c1b3f7293d4747b9deeb64433550a1603754847e03a34182ef7e6641083892b21568b8854391e2d0f85b2287615c0334a2b8c08de833c4322fd17606b560e7ccf342468f1959b2b6e5cd1f1d67ce4fa332b28a8e456e4a960c45d25871672c3aa0d96d986ae898b90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f4eca00"/6520], 0x1978) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:50 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3367.627486][ T319] binder: 316:319 ioctl 4018f50b 20000200 returned -22 17:26:50 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x1, 0x1}, 0x7fffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:50 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:26:50 executing program 0: socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x1405, 0x20, 0x70bd2a, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x11}, 0x20004081) (async, rerun: 64) recvmmsg(r0, &(0x7f0000001a80), 0x2d, 0x40000000, 0x0) (rerun: 64) 17:26:50 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x1, 0x1}, 0x7fffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:50 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:26:51 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000002c0)=""/227, &(0x7f0000000080)=0xe3) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:26:51 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x1, 0x1}, 0x7fffffff) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:51 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x40046207, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r3, r3, 0xffffffffffffffff, r4, r3], 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r6, r5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000200)={0x1, 0xe5, 0x1f}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x2d, "36fbbbb633bfb127a234e6b7401581af69c98fe52076de433cdbeba0284c2438d744f8ffd28f6b43fe59517626"}, &(0x7f0000000300)=0x35) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r8, 0xb735, 0x10}, 0xc) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:51 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000002c0)=""/227, &(0x7f0000000080)=0xe3) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:51 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044000000000996930b7d304a201ca671f410472390a832b610c693fab2b765feab6f4bedb1ac43752a78bc6d0a740dc1e0ece06488e8daf1adf432d61aa97e96b90e7ec62f23197673748c8a8a5ff205621e725fb16f80213df5458885da14db6cdb7c0c211baf1eee4601a5d7862deebc3d001047a6d2865b192c5b31e0106c3dd27a38c23bd7bfcf86187e89603edb973ef2567bb149a4e2bd915bfb05ea754c9a89a990eb20052524eec708ce45b64e5c501bc564b6b5fcdb7fb3bd000000000"], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) sendfile(r0, r1, 0x0, 0xbcf) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) (async) dup2(r1, r1) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) write$binfmt_elf64(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"/6520], 0x1978) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:51 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xc, 0x110, r0, 0x10000000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r9 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r6, 0x3dd4, 0x0, 0x70bc, 0x4, 0x1, {0x0, r10}}, 0x9) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x97ffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3368.690565][ T363] binder: BINDER_SET_CONTEXT_MGR already set [ 3368.719840][ T363] binder: 361:363 ioctl 40046207 0 returned -16 17:26:51 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x45) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 3368.756416][ T363] binder: 361:363 ioctl 4018f50b 20000200 returned -22 17:26:51 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xc, 0x110, r0, 0x10000000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r9 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r10}}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r6, 0x3dd4, 0x0, 0x70bc, 0x4, 0x1, {0x0, r10}}, 0x9) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:51 executing program 0: socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x1405, 0x20, 0x70bd2a, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x11}, 0x20004081) recvmmsg(r0, &(0x7f0000001a80), 0x2d, 0x40000000, 0x0) 17:26:51 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x40046207, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r3, r3, 0xffffffffffffffff, r4, r3], 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r6, r5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000200)={0x1, 0xe5, 0x1f}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x2d, "36fbbbb633bfb127a234e6b7401581af69c98fe52076de433cdbeba0284c2438d744f8ffd28f6b43fe59517626"}, &(0x7f0000000300)=0x35) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r8, 0xb735, 0x10}, 0xc) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:52 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = eventfd2(0x6, 0x100001) dup2(r0, r1) r2 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 17:26:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044000000000996930b7d304a201ca671f410472390a832b610c693fab2b765feab6f4bedb1ac43752a78bc6d0a740dc1e0ece06488e8daf1adf432d61aa97e96b90e7ec62f23197673748c8a8a5ff205621e725fb16f80213df5458885da14db6cdb7c0c211baf1eee4601a5d7862deebc3d001047a6d2865b192c5b31e0106c3dd27a38c23bd7bfcf86187e89603edb973ef2567bb149a4e2bd915bfb05ea754c9a89a990eb20052524eec708ce45b64e5c501bc564b6b5fcdb7fb3bd000000000"], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) sendfile(r0, r1, 0x0, 0xbcf) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) dup2(r1, r1) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$binfmt_elf64(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="7f454c467f00773d010000800000000002000300830c000030010000000000004000000000000000f4020000000000000000000001f83800010001043f00070003000000ff0f00000000000000000000ff0f0000000000000000000000000000010001000000000001000000010000000700000000000000d94ce8caccc71a6007eab0d976d3db722fba4d83157be12f0f99c4730c740046069b5d97a9e2c5bb19bd388397079bc5d3b256180ee797b5ba628ac69ddad892657830dc5b77998ad5b06fec1d4bb33b0d895f0cd5f6d97256248d1155d82ea535ed7255fcd27c4f4ac8dba78290f0c0dde5b61bc5969383cb0282b0f5bd848d9b63588dda34aaecfd17050c8cac6d3ac6d220e7f9a6c1f77d81b2ca433ed0d5ffda322196dffc0172deb6fbc372381a78222c9f12faa036fe8a525936149fbf34cd8524341ba5ab7e3c9dfa0b324114ebbffd6c71cd86acb279bdfd1266a88155db5d9e94e1e20814f2a80fa32e61e20e170f92238703506312ef1f18ae2b685cc8d1e08ffe5b818a4f513dbb889f077826c0d7426e2168ce0467b5e8d74e88a7edb0622e1ace4c33d68f32866e0913d40ae442b3a832339bac4af1d2814e1ea7a9afd65a2deefa3b12e9e673112e7e6d61319aa5225d28b72809cd0bc2a26cb9568b54bf98a95f54fe7cc7f393ba90f5f210b467f57c7ed3e956e26610d785ae01257a4d027a1b5e8532cf68fe05c56e0e35f2885062223b2d270b8353afadd8278b93caceedb7aeb3ea3318b5853e53b46209ba1701816610e1f632988901c97a74b509533bd827ed2e2c2407e67fd5beb600b2cf6282e1781f8a195baf3c2423a115d7f6deb785139ef6a0d2d044712c372bba82a18eac264eebcbd47ed29dab10fe769f770abaab2e8eb2b936b2c6c1f8f0bf2fcecec89905d3f52be7e9dc9ed495b1004dadbaec5152e0267793141b49ae6f4666c9af116094822edade146435a8f00b9f0fa659486f6d0cb408c160221e81722b9981d954869eefb008cb552bfe62bf82651267027fa0e634d22607daa1d0a1c8b8f81971883cf3dac02b528ab9972cb0963c0c6cede902d6aa38051a3461e5b7347de84cd0a941916a3d9feb906a21db38d2aa194456378fbd363733608aa34044dc3bc53f0c475aba2bc50a5edc36664c4a41b86486235966e77f95394c9cd707daa99d23e9a89482e32d4c90345dbb6099e785ab368695750e450a9bbb98ed5b3937dee13571a7cf1fa44ece0bb683146c6322115e03eef7f4c94b22f817d676940c0464a251786a7f4ce52d0b65db4d0a66941105373fd3a9d90a456238adff2678e964b889a7cd6e72bade90514f7abb572004c3e410e9f523f7592ff45c03219679611e987410d19340b21cdcf3b6e8d216100e3ef6292f8b2c6e6c8327516a7a1deb57ef6edcbfd66a08bc9eeefb8f884cf7f74607aecb10953e62c95f4c4286fd3e6f38207d53e8db746150e0f34767cebfe1d8bfffcb6e3990b2c84a9260dc772406f9a34913c18cf3f9330395425803b8d3c7d750ad3c79715359b43a35a1241f745da907680cf9e33cc6b8358c0d790622ee6d03901820d5e0967ff68dc0f308ffe6336d9c9ad9d569a9509b0f236bf696bbaffa8481ae08e60c38e9254d5954aae805b872697f547533effd64c338296c89d04e29354c98fc6ee8bdc62af0ad6cb47464f64befe23b41ef3213c56f8a3689ce19faa69d746032e0fca10a43ecd942b6ad9505226df9a7fe16ae50252b1a544a3bd1ca8400e2ebabbc50eea50c3bf628d2c70320de6eb930e23ebcccfd11cf8283f70985d94f22679d0def1dcf25d2241b1301b8864a02d806a68bf56b4b2441e2dd76065de68de961cc9cee6dae92e08b55f76c9b50352e5dfa625c180b3bccc950ed625c94c1ecfcafb4e13fabad8703a338f5109d03eff146a28f0e214a07e10c82405bc9f3fb361ed9dd2347b459aba27ca98bf7bbce52a1a6044a3f8ea369a4cffb6378a9ee2cd7d463773ef176dbc08edf8a3f4d58832bdeb2df77044fed3708a2cbf14d3acaa701e721d2010bb47b76c680f5b8ce81a44bd62733022a82aa00e6ab7b289d286af2a7a5fcde59edbd4974a82be3474d5fc31ba2f0c83aab77e0271a85cf1e9322b3b5c87c92bfca87b7f78f66bd38b622e400aa447bc9d1acd24883161cb8575a28208587b99df0f5b1e7152b9f9d23f52df4e1b336bb193f0a5be87ba605fa9c1fec1403c03412761e29233ada43d234e3acfcaca5bb0f168265d91f788698d7174eb4087a178ba0bbf61efa83bd7b85fbacd885b25c5313387758dafd50327744e1fe4642c85bcae8f6a2aba9e7429ded98bffb07b3241adc0c5c53414e2e2e18cb0b43e2d7b72b31c3f4977c3f3085da8d363e154124173aff33e3f4878e254ffe273c200cb7f931ecdf91a983c7d72008091040059ccc9c4ca71674af5b429853d50e666fc61d83d64f54cbc4ad4cd5e93d60acd8dd6f6c525bb564cd6c9bb818c68af580ac14f6359d4e74cd82575bdd22514de0e900d44ff3fe4e7affe013916d5fb8e0bf1c9bb583c5064ecc1dc9b2560e55d39897922647470c9b3e2e381acd236ae3501f6178549079bdb44ac24a06694dfb06dcfa1f0b0fe59694c1daf0e8f2d47883133760d492505ac554a41560848bfd0f95269546416220ca6aa3cad2aaa9ce7055ccbfc25ab303f6bd6daf2c228825a6d1d045dd2f940bb3de8b5b4751dc92081c87775d92819f48918b31d6460fac28a58e8d58b58379eee5661a39e4c618e45d0d4a9c37d2e5ce30b45d2072440218393a8cb5d38ce0a1a0b54350be6aeca71876274363e4c6500247e29263b2d0149618e74ef942f89b82af4d272fd788996b4ff692a80ee7f84b4d9790cad9e2b7b4b7c126ea883e74843e7daf235d015c60c65444abccd01f4ab63bc56f8a3b8ac0024630ab632eb9bec46faf34674391e10b3b512b8f59fb0249db0a955d165b31477bfd23ae0ddf67008ac799291882bdd48a86c9489bb878c1853464bca524555bba76f04ba7b5ed75299c1a217cf2c17d3bc0e6de8615f85f847d0866c30d7ab0b43a685fada016aa81b3ec579a9cc5fbf480b773673f968b8807ec0ceca98a816097d5191a7660df3f39505e9b4ce39cad88db73feffe9913fa0ec411a2b1dd465259a87055d1311b3a4633a9fcc0130dd375ebacf7d8f39753f57718f068325d37b85b113f568cd5226743b69fb455a0c7ecb38737d760fe58c3c70fb9fd36b82d986309d0c484974d4b0d690dce9a09653d06d5016958c488def28f9cef9ac6e6bb85a2812b89d8b492bde51580d96529bfc70107b8fa802cf5b0d44b3fd3367f1b5f8fcf4b31a106500150a2a5166e4c972f031643a4422db14791218560cc788d443477ccc0a2ee5ed447cc1bf0bde807c3f17c57fa0cb37f2edb91385e8c483cc821db44e122ca8e8ecb7e26ef30445b42613f86261b1ea01e75e7796e50603654d07281a87747bdb648fffe0eb55f3e72fde6f1a753fc3c44d6e317278e3eeebfc3d69a2b363ea49bab170f8dc96bfd89d7ec2cac33ed62c88e1719d470d0ccc6a6dae09ea80c61bea7aab8efb8265fc24faa58099a4993520630e8ad3b2c201452758e49149ca53555559ad1e08b9ac6cffcec1a66ae618b3efca17755569dfb00ff1ccd8dd06f8dbd0124420efd14f7faa2b599a2feffbfcf2e871f4e54bdef50c922adccf31a7e3a6b002f3c510009df147414baada3fe3cdbee2138dcf52b065b5a3b7f4453915d673dfab517355a463913207cf9d6f29ce3dc4063c8ae3abf8d689ee4f009f367e9b1ec13af012257d1ffe291dc206fe47e929eaf028f4c1057af8ec284a13196a1c4b216bcf4b010680e99fbcd8388189e55a9b61453e8fe4cbe4441159e5404030aeae39c9cd721135c827316b500dc82c20ac16ff1f863e956d4b762a2ec724a66c91c7c58034a9043992f16dd30893052cee92577e179a5b84c0d3f4f8d16d47ab375b8d35004410ea2431350b6d81732d1343a241b1ca12df744acd20b77ff1fbf4adb423ae2e9e2a4118347887e25437189c7483637513f9acc0a42a64f838427d72b184517383a20f690ca2a3837a1b85cd4c409daa3991b5205bb1d0bfb65e78665e3da3c7fa42eb45e36e32e4cf1f4d1609cd7db71c2ebe50fb7bc082dcd416a138faf326877e8bbeaa0ee3e97cce86b3f0e80e1931390e8f1dd7102899500eb46218252640bf1ac83dc42631c12913aa3f13927dd38a1884a91db44349f1391bdd845654636bb07b04479e53c6187332064bea266048f5cf1a5707ef361f25f2ca25327ea1f61e3677128c3ebb8b72942d13885cc38bae0ecdd1630774f081e179875c86b5d0c48397426602e0c08e2647897269e6c44d0e7bf0bcdd794fc4d31c40c07494d51d4b775602291c3809017a1e915c3889aa07331ff332704fba7d99997e08f6ad9d46f6c58e73820bf43f74f6abaa5714ebdabc61f8fc3098233f79b9406b6bdffb9c380ea09ad72cb4e2460f4d9493d31ff23ebf3e4429f00f1e668978a911b65eae4cf76ea8f3d1b9617f2d078650644ebc658db593ec6f9496b48dd9565b7de4e9ce00a5ce0bacddde07137ddacaf8b36001539a99116d7a86ffe47723b0da5ab5f3d3ecf1074f2dc4ff897d2cdd52bab01a3ac63972875263442bc909258a65b7d5189ff01921104de68c2bad768e1f694a907da98addf642df2e1a0846634787464f5b48620f51c720096c276af9e21e69d78397b08ef957f3b99ba8320df6b95e88b8e8fe2665c4f2a27e55e1e04c48793e7aa895ad00ce81aec89596cb7b18da3cb2f85f5fe211fbb033d98db681923ec732d61eba678275743abc957b4621e52ae36b2a44dbc5802a83534be02ac9bdf08e9296cbd96906f53eecbed4eb546bc5a1927c418c83a2c9ff8ca2bd7702d9b1f0a6ea70446be6d1a18a2860cd5a5e08102fae723ce1d7513713e8119d3f9b9ec05c2d84133c1baada781db63e97cf34376ab95e8384537d9b93526f2b5531b455c8c51df166bff3af05ab681064bffe244208f83b424b5345fa433419828ee541384127d572660bb36b6d91575c2e71c23ed29d88355571aced935fe7f1a4fa92a4399c2b2f4b765dd0931a75e766082b49b023c0ffa3dee0fcf127dd10116678ef07231830e924201f4c0016c35a067d363308422de1090b8c2145d948ea3d4326e9e0415c995836e9aa523a18d5a5c91296ace0ae0ce8dd2180e38ac111a1075cbaee17f805419f1828692ba11fbf19aacb9fcd54889752777569dc1f735ef812e236be251c20d2f53940036dc8682572b2dfb0b862917cf89e143a8abb560441c7d2b1b69a17bda3f3e4add54e3b399789e2665a4b693f6e4b3ca87c560d78605ac87dea0ecc27ac49b01d784da05c48997f7e7194c679ff69f92575f2749210b29d8fefd025a9a177281de78334b44ce51e06dc86e4e67d6420f158b0c90bd4ac4d23881acd955cc7ed14dbc490ec99f367602ab8c9a33a224dcb90212c419dd10287052b6ce8058656deb228b05791101770febd15d297ae6b6a6154d8b007142a4a215cfb1251ef68cc1f974586a6363ba861650580a0e38d71a3f0583c7aa19004d467a891102f779ce94ac989068220b3099a849681f874b1a5e09a67ae58cb6d4e02502de942f081b75b26575771c448bad650f95fabbad24234fa3e432d1962252d9d4d1274e4351fb49fc12f85a39732e11e6b09831dad6ac6dccecf63634b6c4f8a55fd4336911341f8a0f5a2e74c1fb40d58c969c1b3f7293d4747b9deeb64433550a1603754847e03a34182ef7e6641083892b21568b8854391e2d0f85b2287615c0334a2b8c08de833c4322fd17606b560e7ccf342468f1959b2b6e5cd1f1d67ce4fa332b28a8e456e4a960c45d25871672c3aa0d96d986ae898b90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f4eca00"/6520], 0x1978) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0563044000000000996930b7d304a201ca671f410472390a832b610c693fab2b765feab6f4bedb1ac43752a78bc6d0a740dc1e0ece06488e8daf1adf432d61aa97e96b90e7ec62f23197673748c8a8a5ff205621e725fb16f80213df5458885da14db6cdb7c0c211baf1eee4601a5d7862deebc3d001047a6d2865b192c5b31e0106c3dd27a38c23bd7bfcf86187e89603edb973ef2567bb149a4e2bd915bfb05ea754c9a89a990eb20052524eec708ce45b64e5c501bc564b6b5fcdb7fb3bd000000000"], 0x47, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) sendfile(r0, r1, 0x0, 0xbcf) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) (async) dup2(r1, r1) (async) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) write$binfmt_elf64(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"/6520], 0x1978) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) [ 3369.585036][ T398] binder: 397:398 ioctl 4018f50b 20000200 returned -22 17:26:52 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x40046207, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r3, r3, 0xffffffffffffffff, r4, r3], 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r6, r5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000200)={0x1, 0xe5, 0x1f}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x2d, "36fbbbb633bfb127a234e6b7401581af69c98fe52076de433cdbeba0284c2438d744f8ffd28f6b43fe59517626"}, &(0x7f0000000300)=0x35) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r8, 0xb735, 0x10}, 0xc) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x9c0b0000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:52 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x45) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 3370.146748][ T424] binder: 411:424 ioctl 4018f50b 20000200 returned -22 17:26:53 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xc, 0x110, r0, 0x10000000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r9 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r6, 0x3dd4, 0x0, 0x70bc, 0x4, 0x1, {0x0, r10}}, 0x9) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000004000/0x4000)=nil, 0x4000, 0xc, 0x110, r0, 0x10000000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r6, r5) (async) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r10}}, 0x0) (async) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r6, 0x3dd4, 0x0, 0x70bc, 0x4, 0x1, {0x0, r10}}, 0x9) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:26:53 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x40046207, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r3, r3, 0xffffffffffffffff, r4, r3], 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r6, r5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000200)={0x1, 0xe5, 0x1f}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x2d, "36fbbbb633bfb127a234e6b7401581af69c98fe52076de433cdbeba0284c2438d744f8ffd28f6b43fe59517626"}, &(0x7f0000000300)=0x35) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r8, 0xb735, 0x10}, 0xc) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x45) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x45) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) [ 3370.699510][ T434] binder: BINDER_SET_CONTEXT_MGR already set [ 3370.739813][ T434] binder: 431:434 ioctl 40046207 0 returned -16 [ 3370.849559][ T434] binder: 431:434 ioctl 4018f50b 20000200 returned -22 17:26:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:53 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:26:53 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = eventfd2(0x6, 0x100001) dup2(r0, r1) r2 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) eventfd2(0x6, 0x100001) (async) dup2(r0, r1) (async) socket$rds(0x15, 0x5, 0x0) (async) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) 17:26:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x8000, 0x0, &(0x7f0000000080)=[r1]}, 0x1) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637674610200000000000000000008001b000000000014001680100001800c0009000000008000000000"], 0x50}}, 0x0) accept$alg(r7, 0x0, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:54 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x8000, 0x0, &(0x7f0000000080)=[r1]}, 0x1) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637674610200000000000000000008001b000000000014001680100001800c0009000000008000000000"], 0x50}}, 0x0) accept$alg(r7, 0x0, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x8000, 0x0, &(0x7f0000000080)=[r1]}, 0x1) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637674610200000000000000000008001b000000000014001680100001800c0009000000008000000000"], 0x50}}, 0x0) (async) accept$alg(r7, 0x0, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:26:54 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:26:54 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000300), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="046304fee6611fb69a2f8944ccd445091b8a3f99234696b7261dc725fd3abac2006faa0fd24c510d04ae20d9e518cd552ff74c156d95ea3e95ae4c31f6a61c3a9a90d3ced8f23e7c1561111a02d756f7b9f0c93faaa2a3e5fe73cf4663c4ce151d58b8eb76656b70209c8e28c83378991561f6609d46643af009b673afcbe4ab914fb6ffe41605d18f3f9ac2c4eb8695ac236c18fa9b5f28ec048bc48c48ced9ae3f0aee56f2ca9430e42deb7726c418cfee2b613c5635bcc4689b84bd01bd7fbbb8979f9d20cb33066321fa032b222e47ff65005463f1542736039c9f7ab1fbb4c9658bc765b5efd8ea8b86799fcf185a457183682f7dd4fb7f438f64cdee2b443ed3910bc489f07e08c9dd931ca6fc041c3cec8dc6079cb4049379a4bb6560cfa9acd03fd5bce23864cd5a426f8d51ccffa5a178da8f28382d3845c4cb0634e5b56e6f8b197fc956fc50b9d39faeb005f91ed457b4c2f2169d6084320a86b65d446f9664"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3f, 0x2, 0xcd, 0x40, 0x0, 0x1, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x9, 0x4}, 0x40012, 0x101, 0x0, 0xa, 0x3, 0x5, 0xfffa, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r4, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x50, r5, 0xe848b000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) execveat(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000440)='cbc(blowfish)\x00', &(0x7f0000000480)=']\\-+\x00', &(0x7f0000000900)='/X\\[&}\xf0\xdbw\x00', &(0x7f0000000500)='cbc(blowfish)\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\\{,:\x00', &(0x7f0000000600)='./binderfs2/binder1\x00'], &(0x7f00000006c0)=[&(0x7f0000000680)='\'{\x00'], 0x1000) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x5, 0xff, 0x4, 0x0, 0xffffffff, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x88d}, 0x440, 0x80000001, 0x9, 0x8, 0x600000000, 0x71, 0x40, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x6, r4, 0xb) 17:26:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xca110000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3372.239288][ T482] binder: 480:482 ioctl c0306201 20001480 returned -14 17:26:55 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = eventfd2(0x6, 0x100001) dup2(r0, r1) r2 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) eventfd2(0x6, 0x100001) (async) dup2(r0, r1) (async) socket$rds(0x15, 0x5, 0x0) (async) recvmmsg(r2, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) 17:26:55 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000300), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3f, 0x2, 0xcd, 0x40, 0x0, 0x1, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x9, 0x4}, 0x40012, 0x101, 0x0, 0xa, 0x3, 0x5, 0xfffa, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r4, 0x3) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x50, r5, 0xe848b000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) execveat(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000440)='cbc(blowfish)\x00', &(0x7f0000000480)=']\\-+\x00', &(0x7f0000000900)='/X\\[&}\xf0\xdbw\x00', &(0x7f0000000500)='cbc(blowfish)\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\\{,:\x00', &(0x7f0000000600)='./binderfs2/binder1\x00'], &(0x7f00000006c0)=[&(0x7f0000000680)='\'{\x00'], 0x1000) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x5, 0xff, 0x4, 0x0, 0xffffffff, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x88d}, 0x440, 0x80000001, 0x9, 0x8, 0x600000000, 0x71, 0x40, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x6, r4, 0xb) 17:26:55 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) [ 3372.887110][ T510] binder: 509:510 unknown command -33266940 [ 3372.930981][ T511] binder: 509:511 ioctl c0306201 20001480 returned -14 [ 3372.954397][ T510] binder: 509:510 ioctl c0306201 20000080 returned -22 17:26:56 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) accept4(r4, &(0x7f0000000080)=@rc, &(0x7f0000000200)=0x80, 0x180000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000005500)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000340)=""/42, 0x2a}], 0x3, &(0x7f0000000680)=""/98, 0x62}, 0x4f6b07cb}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f0000000980)=""/192, 0xc0}, {&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/118, 0x76}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x8, &(0x7f0000001c80)=""/94, 0x5e}, 0x4d}, {{&(0x7f0000001d00)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/115, 0x73}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/140, 0x8c}, {&(0x7f0000001ec0)=""/210, 0xd2}, {&(0x7f0000005080)=""/202, 0xca}, {&(0x7f0000001fc0)=""/79, 0x4f}], 0x8, &(0x7f0000005200)=""/255, 0xff}, 0xffff4d26}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005300)=""/230, 0xe6}], 0x1, &(0x7f0000005440)=""/153, 0x99}, 0x6}], 0x4, 0x40000100, &(0x7f0000005600)) 17:26:56 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000300), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x3f, 0x2, 0xcd, 0x40, 0x0, 0x1, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x9, 0x4}, 0x40012, 0x101, 0x0, 0xa, 0x3, 0x5, 0xfffa, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r4, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x50, r5, 0xe848b000) (async, rerun: 64) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) execveat(r3, &(0x7f0000000380)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000440)='cbc(blowfish)\x00', &(0x7f0000000480)=']\\-+\x00', &(0x7f0000000900)='/X\\[&}\xf0\xdbw\x00', &(0x7f0000000500)='cbc(blowfish)\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\\{,:\x00', &(0x7f0000000600)='./binderfs2/binder1\x00'], &(0x7f00000006c0)=[&(0x7f0000000680)='\'{\x00'], 0x1000) (async) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x8, 0x5, 0xff, 0x4, 0x0, 0xffffffff, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x6, 0x88d}, 0x440, 0x80000001, 0x9, 0x8, 0x600000000, 0x71, 0x40, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x6, r4, 0xb) 17:26:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}, 0x200}, {{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f00000020c0)=""/226, 0xe2}, {&(0x7f00000021c0)=""/116, 0x74}, {&(0x7f0000002240)=""/93, 0x5d}, {&(0x7f00000022c0)=""/129, 0x81}, {&(0x7f0000002380)=""/234, 0xea}, {&(0x7f0000002480)=""/90, 0x5a}, {&(0x7f0000000540)=""/16, 0x10}], 0x9, &(0x7f00000025c0)=""/11, 0xb}, 0xfffffff9}], 0x2, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket(0xa, 0x800, 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001e40)="ec944a5c0df8af09a9d6bcf6804553246c0b9bde361b627459a76c826737eac79a3371c6952277b466c0b8017d3f7aa843dc0ed45b479362e961fe3245b379dfa81c197eb262200cf6bf0d6ac29ed6c7fb7c28bb81806cc549f674142450bb84be2b70b17c232174f6d2ee02f9e69006878d328cf966d65b7434b43add6dc740dc5f40dbfc1e45", 0x87}, {&(0x7f0000001f00)="aa56547edd91074f4397b2bd11c829d6a1d0ac7e10f06fe87803d092179fb2b9461eeb9d1e8cc71b393eb28122f3bcb323530f21b8fd028c2b50167a02b703ab5559ad5ee972f4f39d2b1c048322297f", 0x50}, {&(0x7f0000001f80)="2c46d3851a873b5d09fa67fb996957e08856bf95e2a1e94f3d05595675aef9c67e0db4375bab786c14d68d94ebffc4c1181ad5bc3e238635e81ae691694fc2eaf03161ae094e376041d4d6c7e1b57241ac17c2a997cd94e04fc4d7ed0ec0f2db4648ed1ac4855dac9799723829d954ab10aa4f859313f44dbfb40bb56bf84a0a32ac8498d622dfff8078e7bee1fd01619232e0c63d", 0x95}], 0x3, &(0x7f0000002040)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="500000001300010000000000000000000046e6be43e2e39ed85dd07362087b119e65c05b68d8b14c10ceb6aa70bdc3640545b64a0c5a046b01f613fce638fe71373cea261d70dc1d668ff48485061fd56e178d2434d0d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637674617030000000000000000008001b000000000014001680100001800c0009000000008000000000"], 0x50}}, 0x0) mount$bind(&(0x7f0000001a80)='./file0\x00', &(0x7f0000002680)='./file0\x00', &(0x7f00000026c0), 0x1001000, 0x0) recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x3, &(0x7f00000002c0)=""/58, 0x3a}}, {{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/203, 0xcb}, 0x80}, {{&(0x7f0000000680)=@ax25={{0x3, @default}, [@null, @default, @remote, @bcast, @rose, @default, @null, @rose]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/151, 0x97}, {&(0x7f00000007c0)=""/3, 0x3}], 0x2}, 0xab}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)}, {&(0x7f0000000880)=""/249, 0xf9}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/17, 0x11}], 0x5, &(0x7f0000001b80)=""/235, 0xeb}, 0x6}], 0x4, 0x60, 0x0) 17:26:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xd8000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3373.610763][ T527] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 17:26:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r1) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x8000, 0x0, &(0x7f0000000080)=[r1]}, 0x1) (async) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637674610200000000000000000008001b000000000014001680100001800c0009000000008000000000"], 0x50}}, 0x0) (async) accept$alg(r7, 0x0, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3373.701182][ T529] binder: 521:529 unknown command -33266940 17:26:56 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) [ 3373.773547][ T529] binder: 521:529 ioctl c0306201 20000080 returned -22 [ 3373.787148][ T531] binder: 521:531 ioctl c0306201 20001480 returned -14 17:26:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}, 0x200}, {{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f00000020c0)=""/226, 0xe2}, {&(0x7f00000021c0)=""/116, 0x74}, {&(0x7f0000002240)=""/93, 0x5d}, {&(0x7f00000022c0)=""/129, 0x81}, {&(0x7f0000002380)=""/234, 0xea}, {&(0x7f0000002480)=""/90, 0x5a}, {&(0x7f0000000540)=""/16, 0x10}], 0x9, &(0x7f00000025c0)=""/11, 0xb}, 0xfffffff9}], 0x2, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socket(0xa, 0x800, 0x1) (async, rerun: 64) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001e40)="ec944a5c0df8af09a9d6bcf6804553246c0b9bde361b627459a76c826737eac79a3371c6952277b466c0b8017d3f7aa843dc0ed45b479362e961fe3245b379dfa81c197eb262200cf6bf0d6ac29ed6c7fb7c28bb81806cc549f674142450bb84be2b70b17c232174f6d2ee02f9e69006878d328cf966d65b7434b43add6dc740dc5f40dbfc1e45", 0x87}, {&(0x7f0000001f00)="aa56547edd91074f4397b2bd11c829d6a1d0ac7e10f06fe87803d092179fb2b9461eeb9d1e8cc71b393eb28122f3bcb323530f21b8fd028c2b50167a02b703ab5559ad5ee972f4f39d2b1c048322297f", 0x50}, {&(0x7f0000001f80)="2c46d3851a873b5d09fa67fb996957e08856bf95e2a1e94f3d05595675aef9c67e0db4375bab786c14d68d94ebffc4c1181ad5bc3e238635e81ae691694fc2eaf03161ae094e376041d4d6c7e1b57241ac17c2a997cd94e04fc4d7ed0ec0f2db4648ed1ac4855dac9799723829d954ab10aa4f859313f44dbfb40bb56bf84a0a32ac8498d622dfff8078e7bee1fd01619232e0c63d", 0x95}], 0x3, &(0x7f0000002040)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x4) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="500000001300010000000000000000000046e6be43e2e39ed85dd07362087b119e65c05b68d8b14c10ceb6aa70bdc3640545b64a0c5a046b01f613fce638fe71373cea261d70dc1d668ff48485061fd56e178d2434d0d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637674617030000000000000000008001b000000000014001680100001800c0009000000008000000000"], 0x50}}, 0x0) (async) mount$bind(&(0x7f0000001a80)='./file0\x00', &(0x7f0000002680)='./file0\x00', &(0x7f00000026c0), 0x1001000, 0x0) (async) recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x3, &(0x7f00000002c0)=""/58, 0x3a}}, {{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/203, 0xcb}, 0x80}, {{&(0x7f0000000680)=@ax25={{0x3, @default}, [@null, @default, @remote, @bcast, @rose, @default, @null, @rose]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/151, 0x97}, {&(0x7f00000007c0)=""/3, 0x3}], 0x2}, 0xab}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)}, {&(0x7f0000000880)=""/249, 0xf9}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/17, 0x11}], 0x5, &(0x7f0000001b80)=""/235, 0xeb}, 0x6}], 0x4, 0x60, 0x0) 17:26:56 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3374.081576][ T555] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 17:26:57 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, r4, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:26:57 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) 17:26:57 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:57 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) accept4(r4, &(0x7f0000000080)=@rc, &(0x7f0000000200)=0x80, 0x180000) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000005500)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000340)=""/42, 0x2a}], 0x3, &(0x7f0000000680)=""/98, 0x62}, 0x4f6b07cb}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f0000000980)=""/192, 0xc0}, {&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/118, 0x76}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x8, &(0x7f0000001c80)=""/94, 0x5e}, 0x4d}, {{&(0x7f0000001d00)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/115, 0x73}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/140, 0x8c}, {&(0x7f0000001ec0)=""/210, 0xd2}, {&(0x7f0000005080)=""/202, 0xca}, {&(0x7f0000001fc0)=""/79, 0x4f}], 0x8, &(0x7f0000005200)=""/255, 0xff}, 0xffff4d26}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005300)=""/230, 0xe6}], 0x1, &(0x7f0000005440)=""/153, 0x99}, 0x6}], 0x4, 0x40000100, &(0x7f0000005600)) 17:26:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xd9000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:57 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000080)={0x6, 0x3, 0x3, 0xfff, 'syz0\x00', 0x8}) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r4, 0x9, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) r5 = accept$netrom(r3, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @null, @remote, @bcast, @remote, @netrom, @bcast, @default]}, &(0x7f0000000200)=0x48) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}], 0x18}, 0x2000c805) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:57 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) 17:26:57 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}, 0x200}, {{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f00000020c0)=""/226, 0xe2}, {&(0x7f00000021c0)=""/116, 0x74}, {&(0x7f0000002240)=""/93, 0x5d}, {&(0x7f00000022c0)=""/129, 0x81}, {&(0x7f0000002380)=""/234, 0xea}, {&(0x7f0000002480)=""/90, 0x5a}, {&(0x7f0000000540)=""/16, 0x10}], 0x9, &(0x7f00000025c0)=""/11, 0xb}, 0xfffffff9}], 0x2, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socket(0xa, 0x800, 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001e40)="ec944a5c0df8af09a9d6bcf6804553246c0b9bde361b627459a76c826737eac79a3371c6952277b466c0b8017d3f7aa843dc0ed45b479362e961fe3245b379dfa81c197eb262200cf6bf0d6ac29ed6c7fb7c28bb81806cc549f674142450bb84be2b70b17c232174f6d2ee02f9e69006878d328cf966d65b7434b43add6dc740dc5f40dbfc1e45", 0x87}, {&(0x7f0000001f00)="aa56547edd91074f4397b2bd11c829d6a1d0ac7e10f06fe87803d092179fb2b9461eeb9d1e8cc71b393eb28122f3bcb323530f21b8fd028c2b50167a02b703ab5559ad5ee972f4f39d2b1c048322297f", 0x50}, {&(0x7f0000001f80)="2c46d3851a873b5d09fa67fb996957e08856bf95e2a1e94f3d05595675aef9c67e0db4375bab786c14d68d94ebffc4c1181ad5bc3e238635e81ae691694fc2eaf03161ae094e376041d4d6c7e1b57241ac17c2a997cd94e04fc4d7ed0ec0f2db4648ed1ac4855dac9799723829d954ab10aa4f859313f44dbfb40bb56bf84a0a32ac8498d622dfff8078e7bee1fd01619232e0c63d", 0x95}], 0x3, &(0x7f0000002040)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="500000001300010000000000000000000046e6be43e2e39ed85dd07362087b119e65c05b68d8b14c10ceb6aa70bdc3640545b64a0c5a046b01f613fce638fe71373cea261d70dc1d668ff48485061fd56e178d2434d0d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637674617030000000000000000008001b000000000014001680100001800c0009000000008000000000"], 0x50}}, 0x0) mount$bind(&(0x7f0000001a80)='./file0\x00', &(0x7f0000002680)='./file0\x00', &(0x7f00000026c0), 0x1001000, 0x0) recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x3, &(0x7f00000002c0)=""/58, 0x3a}}, {{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/203, 0xcb}, 0x80}, {{&(0x7f0000000680)=@ax25={{0x3, @default}, [@null, @default, @remote, @bcast, @rose, @default, @null, @rose]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/151, 0x97}, {&(0x7f00000007c0)=""/3, 0x3}], 0x2}, 0xab}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)}, {&(0x7f0000000880)=""/249, 0xf9}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/17, 0x11}], 0x5, &(0x7f0000001b80)=""/235, 0xeb}, 0x6}], 0x4, 0x60, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, 0x0}, 0x200}, {{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f00000020c0)=""/226, 0xe2}, {&(0x7f00000021c0)=""/116, 0x74}, {&(0x7f0000002240)=""/93, 0x5d}, {&(0x7f00000022c0)=""/129, 0x81}, {&(0x7f0000002380)=""/234, 0xea}, {&(0x7f0000002480)=""/90, 0x5a}, {&(0x7f0000000540)=""/16, 0x10}], 0x9, &(0x7f00000025c0)=""/11, 0xb}, 0xfffffff9}], 0x2, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket(0xa, 0x800, 0x1) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001e40)="ec944a5c0df8af09a9d6bcf6804553246c0b9bde361b627459a76c826737eac79a3371c6952277b466c0b8017d3f7aa843dc0ed45b479362e961fe3245b379dfa81c197eb262200cf6bf0d6ac29ed6c7fb7c28bb81806cc549f674142450bb84be2b70b17c232174f6d2ee02f9e69006878d328cf966d65b7434b43add6dc740dc5f40dbfc1e45", 0x87}, {&(0x7f0000001f00)="aa56547edd91074f4397b2bd11c829d6a1d0ac7e10f06fe87803d092179fb2b9461eeb9d1e8cc71b393eb28122f3bcb323530f21b8fd028c2b50167a02b703ab5559ad5ee972f4f39d2b1c048322297f", 0x50}, {&(0x7f0000001f80)="2c46d3851a873b5d09fa67fb996957e08856bf95e2a1e94f3d05595675aef9c67e0db4375bab786c14d68d94ebffc4c1181ad5bc3e238635e81ae691694fc2eaf03161ae094e376041d4d6c7e1b57241ac17c2a997cd94e04fc4d7ed0ec0f2db4648ed1ac4855dac9799723829d954ab10aa4f859313f44dbfb40bb56bf84a0a32ac8498d622dfff8078e7bee1fd01619232e0c63d", 0x95}], 0x3, &(0x7f0000002040)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x1, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d80)=ANY=[@ANYBLOB="500000001300010000000000000000000046e6be43e2e39ed85dd07362087b119e65c05b68d8b14c10ceb6aa70bdc3640545b64a0c5a046b01f613fce638fe71373cea261d70dc1d668ff48485061fd56e178d2434d0d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d61637674617030000000000000000008001b000000000014001680100001800c0009000000008000000000"], 0x50}}, 0x0) (async) mount$bind(&(0x7f0000001a80)='./file0\x00', &(0x7f0000002680)='./file0\x00', &(0x7f00000026c0), 0x1001000, 0x0) (async) recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x3, &(0x7f00000002c0)=""/58, 0x3a}}, {{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/203, 0xcb}, 0x80}, {{&(0x7f0000000680)=@ax25={{0x3, @default}, [@null, @default, @remote, @bcast, @rose, @default, @null, @rose]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/151, 0x97}, {&(0x7f00000007c0)=""/3, 0x3}], 0x2}, 0xab}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)}, {&(0x7f0000000880)=""/249, 0xf9}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/17, 0x11}], 0x5, &(0x7f0000001b80)=""/235, 0xeb}, 0x6}], 0x4, 0x60, 0x0) (async) 17:26:57 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000080)={0x6, 0x3, 0x3, 0xfff, 'syz0\x00', 0x8}) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r4, 0x9, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) r5 = accept$netrom(r3, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @null, @remote, @bcast, @remote, @netrom, @bcast, @default]}, &(0x7f0000000200)=0x48) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}], 0x18}, 0x2000c805) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000080)={0x6, 0x3, 0x3, 0xfff, 'syz0\x00', 0x8}) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r4, 0x9, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) (async) openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) accept$netrom(r3, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @null, @remote, @bcast, @remote, @netrom, @bcast, @default]}, &(0x7f0000000200)=0x48) (async) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}], 0x18}, 0x2000c805) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:26:57 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) [ 3375.107137][ T605] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3375.203221][ T616] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 17:26:58 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) 17:26:58 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) accept4(r4, &(0x7f0000000080)=@rc, &(0x7f0000000200)=0x80, 0x180000) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000005500)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000340)=""/42, 0x2a}], 0x3, &(0x7f0000000680)=""/98, 0x62}, 0x4f6b07cb}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f0000000980)=""/192, 0xc0}, {&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/118, 0x76}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x8, &(0x7f0000001c80)=""/94, 0x5e}, 0x4d}, {{&(0x7f0000001d00)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/115, 0x73}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/140, 0x8c}, {&(0x7f0000001ec0)=""/210, 0xd2}, {&(0x7f0000005080)=""/202, 0xca}, {&(0x7f0000001fc0)=""/79, 0x4f}], 0x8, &(0x7f0000005200)=""/255, 0xff}, 0xffff4d26}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005300)=""/230, 0xe6}], 0x1, &(0x7f0000005440)=""/153, 0x99}, 0x6}], 0x4, 0x40000100, &(0x7f0000005600)) 17:26:58 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:26:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xda000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:58 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000080)={0x6, 0x3, 0x3, 0xfff, 'syz0\x00', 0x8}) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r4, 0x9, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) (async) openat$cgroup_ro(r4, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) r5 = accept$netrom(r3, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @null, @remote, @bcast, @remote, @netrom, @bcast, @default]}, &(0x7f0000000200)=0x48) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}], 0x18}, 0x2000c805) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:26:58 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) 17:26:58 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:26:59 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:26:59 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:26:59 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:26:59 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:26:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xdaffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:26:59 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:26:59 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x100, 0x0, 0x1}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.swap.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) openat$userio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b83, &(0x7f0000000080)={0x0, 0x27936, 0x4, 0x6, 0x20d}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000004c0), &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(0xffffffffffffffff, 0x4696, 0xe292, 0x2, &(0x7f0000000480)={[0x3]}, 0x8) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) 17:27:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:00 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x100, 0x0, 0x1}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.swap.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b83, &(0x7f0000000080)={0x0, 0x27936, 0x4, 0x6, 0x20d}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000004c0), &(0x7f00000002c0)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(0xffffffffffffffff, 0x4696, 0xe292, 0x2, &(0x7f0000000480)={[0x3]}, 0x8) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 17:27:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xe0110000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:00 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x100, 0x0, 0x1}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.swap.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) (async, rerun: 64) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x3b83, &(0x7f0000000080)={0x0, 0x27936, 0x4, 0x6, 0x20d}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000004c0), &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(0xffffffffffffffff, 0x4696, 0xe292, 0x2, &(0x7f0000000480)={[0x3]}, 0x8) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x100, 0x0, 0x1}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.swap.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) openat$userio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b83, &(0x7f0000000080)={0x0, 0x27936, 0x4, 0x6, 0x20d}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000004c0), &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(0xffffffffffffffff, 0x4696, 0xe292, 0x2, &(0x7f0000000480)={[0x3]}, 0x8) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async, rerun: 64) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:00 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x100, 0x0, 0x1}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.swap.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) openat$userio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b83, &(0x7f0000000080)={0x0, 0x27936, 0x4, 0x6, 0x20d}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000004c0), &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(0xffffffffffffffff, 0x4696, 0xe292, 0x2, &(0x7f0000000480)={[0x3]}, 0x8) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x9, &(0x7f00000018c0)=[{&(0x7f00000002c0)="be9312153018eab4a5546097d272dff786aaa695917751723c5486a75975ab55f792200c8e196facaa58e858a8052482bb2975d641062d006b75a0931a8425523deef234391ab63da6f00a09bf309c5c9daa26fb4054e83e7aa8c4e838acaa1152e55af1c2953d110ee899577d9fcbbef4df7989efbcd6362545011b5232920eb9a963539ec7a71300d14ac20063dfd9d46edc05a22f575ddcdf5a20a424f7ea5335d63df535c79b977de4a68a3ce81a7b0f5361d016f2c2f7db0b9ddaab64c9d96291b6cf3e0e8fa3df6cd5317ceb3996da85439e6a7ffcb7b95dcc82fb09c8247e9e7aee3e752645bd1000b1e6f3f9ccff73718466", 0xf6, 0x3}, {&(0x7f0000000440)="6c558b189b9a49c03f8b8b58993ad5a66c8ead515654af508efa7189636cf594c934841c4662e06a9346e06e85239935f5ccc5aaf11348fd3178f26cd923be7ea65b2df382909694363dba629267ab3b66cc07a8b82ca77620fc7190048cebb51eb098f3231b4992789dec792317026ae2067ab0985b1e438655e2e850f3ba8cac2132ee789e22094c688e65faede9b5633afbbc6d29d9144a7ec53b6104726cbb9cad54261d410f050a736debc0b2e8a23632981b82f3ffb0051e392a98deffa270b91ca5b828cc46649322f2d51fff01c63d0f8d9a251eefec", 0xda, 0x5}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="0bc8e2ec93018200dc56ad6ad5f876731768edad556b474d6bc81946f3ff8d723a53caf21cf72bdda1f94aefafd9f412d80a6d0d66f05d15c55d9a34417675181f0e47df7afa98800df76d74f4b74ef94efbbbc75c737ca117", 0x59, 0x8}, {&(0x7f0000001700)="1646ca2aba8ba0484ce382d938dfb975c4b944b62e4b482ad92827647ab16bad26146f3a13d8e87aad7dd5829660d0d84cffd14f220f87baff14a3f290d4f4e5070dade1aad8cd9a905774e755c8191b8dec9c1998223df94a7db508944a65320d2f3268a5830f0094579ff99845740c92", 0x71, 0x3}, {&(0x7f0000001780)="2b8d2e614c8ce8062e315967b504f82506624b64a4eb83908be525511ab16aacf292460d591566ad2b46002492fbd009083b414f57b568df39c7143959dc3fe61f795dd3497562b5c8ff02a7a50bbb0b525133e5ba647cdccb8c9a59b79242892ade0fdbf0", 0x65, 0x7}, {&(0x7f0000000200), 0x0, 0x9}, {&(0x7f0000001800)="2d816d4bed7fe146cd5c93a6dee0b677cba726508a4d31c192cbcd0815dd762fd7c6f9c58b34a5d89ba07c7155134847073f4dd47681104079fec3d77565d89df9ff4d743537867ede3eacaec8c24754fe72c4eea7fef4496175cbdbae7a4b95b2628d5af400acc2eb99bc6efb6cf426858e9bf37f05b5326dc17c5282560dda09b003cf294b0663", 0x88, 0x10000}, {&(0x7f0000000580)="1b2e28abbd8a34c3b6b2da9c2f5e1a61b915dbdd02f135701e74d9eafbc8d5a0d2d1c07d658fa1d19492b078c32ea4cded0d66428cb5c5a6cfddcf610b", 0x3d}], 0x8000, &(0x7f00000019c0)={[{@block_validity}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@nodelalloc}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'skcipher\x00'}}, {@hash}, {@subj_role={'subj_role', 0x3d, 'memory.events\x00'}}]}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:01 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x100, 0x0, 0x1}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='memory.swap.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) openat$userio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x18, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b83, &(0x7f0000000080)={0x0, 0x27936, 0x4, 0x6, 0x20d}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f00000004c0), &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(0xffffffffffffffff, 0x4696, 0xe292, 0x2, &(0x7f0000000480)={[0x3]}, 0x8) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3378.513964][ T736] loop2: detected capacity change from 0 to 256 17:27:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xe1110000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3378.729342][ T736] EXT4-fs: Ignoring removed mblk_io_submit option 17:27:01 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3378.771539][ T736] ext3: Unknown parameter 'fscontext' 17:27:01 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:01 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x9, &(0x7f00000018c0)=[{&(0x7f00000002c0)="be9312153018eab4a5546097d272dff786aaa695917751723c5486a75975ab55f792200c8e196facaa58e858a8052482bb2975d641062d006b75a0931a8425523deef234391ab63da6f00a09bf309c5c9daa26fb4054e83e7aa8c4e838acaa1152e55af1c2953d110ee899577d9fcbbef4df7989efbcd6362545011b5232920eb9a963539ec7a71300d14ac20063dfd9d46edc05a22f575ddcdf5a20a424f7ea5335d63df535c79b977de4a68a3ce81a7b0f5361d016f2c2f7db0b9ddaab64c9d96291b6cf3e0e8fa3df6cd5317ceb3996da85439e6a7ffcb7b95dcc82fb09c8247e9e7aee3e752645bd1000b1e6f3f9ccff73718466", 0xf6, 0x3}, {&(0x7f0000000440)="6c558b189b9a49c03f8b8b58993ad5a66c8ead515654af508efa7189636cf594c934841c4662e06a9346e06e85239935f5ccc5aaf11348fd3178f26cd923be7ea65b2df382909694363dba629267ab3b66cc07a8b82ca77620fc7190048cebb51eb098f3231b4992789dec792317026ae2067ab0985b1e438655e2e850f3ba8cac2132ee789e22094c688e65faede9b5633afbbc6d29d9144a7ec53b6104726cbb9cad54261d410f050a736debc0b2e8a23632981b82f3ffb0051e392a98deffa270b91ca5b828cc46649322f2d51fff01c63d0f8d9a251eefec", 0xda, 0x5}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="0bc8e2ec93018200dc56ad6ad5f876731768edad556b474d6bc81946f3ff8d723a53caf21cf72bdda1f94aefafd9f412d80a6d0d66f05d15c55d9a34417675181f0e47df7afa98800df76d74f4b74ef94efbbbc75c737ca117", 0x59, 0x8}, {&(0x7f0000001700)="1646ca2aba8ba0484ce382d938dfb975c4b944b62e4b482ad92827647ab16bad26146f3a13d8e87aad7dd5829660d0d84cffd14f220f87baff14a3f290d4f4e5070dade1aad8cd9a905774e755c8191b8dec9c1998223df94a7db508944a65320d2f3268a5830f0094579ff99845740c92", 0x71, 0x3}, {&(0x7f0000001780)="2b8d2e614c8ce8062e315967b504f82506624b64a4eb83908be525511ab16aacf292460d591566ad2b46002492fbd009083b414f57b568df39c7143959dc3fe61f795dd3497562b5c8ff02a7a50bbb0b525133e5ba647cdccb8c9a59b79242892ade0fdbf0", 0x65, 0x7}, {&(0x7f0000000200), 0x0, 0x9}, {&(0x7f0000001800)="2d816d4bed7fe146cd5c93a6dee0b677cba726508a4d31c192cbcd0815dd762fd7c6f9c58b34a5d89ba07c7155134847073f4dd47681104079fec3d77565d89df9ff4d743537867ede3eacaec8c24754fe72c4eea7fef4496175cbdbae7a4b95b2628d5af400acc2eb99bc6efb6cf426858e9bf37f05b5326dc17c5282560dda09b003cf294b0663", 0x88, 0x10000}, {&(0x7f0000000580)="1b2e28abbd8a34c3b6b2da9c2f5e1a61b915dbdd02f135701e74d9eafbc8d5a0d2d1c07d658fa1d19492b078c32ea4cded0d66428cb5c5a6cfddcf610b", 0x3d}], 0x8000, &(0x7f00000019c0)={[{@block_validity}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@nodelalloc}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'skcipher\x00'}}, {@hash}, {@subj_role={'subj_role', 0x3d, 'memory.events\x00'}}]}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:02 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) recvmmsg(r5, &(0x7f00000058c0)=[{{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=""/74, 0x4a}, 0x80}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f0000001a00)=""/218, 0xda}, {&(0x7f0000001b00)=""/155, 0x9b}, {&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/243, 0xf3}, {&(0x7f0000001e00)=""/48, 0x30}], 0xa, &(0x7f0000001f00)=""/240, 0xf0}, 0x4}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002000)=""/97, 0x61}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/18, 0x12}, {&(0x7f0000002200)=""/239, 0xef}], 0x5}, 0x7fffffff}, {{&(0x7f0000002380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/68, 0x44}, {&(0x7f0000003480)=""/44, 0x2c}, {&(0x7f00000034c0)=""/75, 0x4b}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/175, 0xaf}, {&(0x7f0000004600)=""/149, 0x95}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/123, 0x7b}], 0x9, &(0x7f0000005800)=""/178, 0xb2}, 0xfffff000}], 0x4, 0x0, &(0x7f00000059c0)={0x77359400}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:02 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3379.446231][ T755] loop2: detected capacity change from 0 to 256 17:27:02 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000680)="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", 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 3379.611805][ T755] EXT4-fs: Ignoring removed mblk_io_submit option [ 3379.718382][ T755] ext3: Unknown parameter 'fscontext' 17:27:02 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:02 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xe3110000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:02 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:02 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000680)="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", 0x1000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:03 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:03 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:03 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x9, &(0x7f00000018c0)=[{&(0x7f00000002c0)="be9312153018eab4a5546097d272dff786aaa695917751723c5486a75975ab55f792200c8e196facaa58e858a8052482bb2975d641062d006b75a0931a8425523deef234391ab63da6f00a09bf309c5c9daa26fb4054e83e7aa8c4e838acaa1152e55af1c2953d110ee899577d9fcbbef4df7989efbcd6362545011b5232920eb9a963539ec7a71300d14ac20063dfd9d46edc05a22f575ddcdf5a20a424f7ea5335d63df535c79b977de4a68a3ce81a7b0f5361d016f2c2f7db0b9ddaab64c9d96291b6cf3e0e8fa3df6cd5317ceb3996da85439e6a7ffcb7b95dcc82fb09c8247e9e7aee3e752645bd1000b1e6f3f9ccff73718466", 0xf6, 0x3}, {&(0x7f0000000440)="6c558b189b9a49c03f8b8b58993ad5a66c8ead515654af508efa7189636cf594c934841c4662e06a9346e06e85239935f5ccc5aaf11348fd3178f26cd923be7ea65b2df382909694363dba629267ab3b66cc07a8b82ca77620fc7190048cebb51eb098f3231b4992789dec792317026ae2067ab0985b1e438655e2e850f3ba8cac2132ee789e22094c688e65faede9b5633afbbc6d29d9144a7ec53b6104726cbb9cad54261d410f050a736debc0b2e8a23632981b82f3ffb0051e392a98deffa270b91ca5b828cc46649322f2d51fff01c63d0f8d9a251eefec", 0xda, 0x5}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="0bc8e2ec93018200dc56ad6ad5f876731768edad556b474d6bc81946f3ff8d723a53caf21cf72bdda1f94aefafd9f412d80a6d0d66f05d15c55d9a34417675181f0e47df7afa98800df76d74f4b74ef94efbbbc75c737ca117", 0x59, 0x8}, {&(0x7f0000001700)="1646ca2aba8ba0484ce382d938dfb975c4b944b62e4b482ad92827647ab16bad26146f3a13d8e87aad7dd5829660d0d84cffd14f220f87baff14a3f290d4f4e5070dade1aad8cd9a905774e755c8191b8dec9c1998223df94a7db508944a65320d2f3268a5830f0094579ff99845740c92", 0x71, 0x3}, {&(0x7f0000001780)="2b8d2e614c8ce8062e315967b504f82506624b64a4eb83908be525511ab16aacf292460d591566ad2b46002492fbd009083b414f57b568df39c7143959dc3fe61f795dd3497562b5c8ff02a7a50bbb0b525133e5ba647cdccb8c9a59b79242892ade0fdbf0", 0x65, 0x7}, {&(0x7f0000000200), 0x0, 0x9}, {&(0x7f0000001800)="2d816d4bed7fe146cd5c93a6dee0b677cba726508a4d31c192cbcd0815dd762fd7c6f9c58b34a5d89ba07c7155134847073f4dd47681104079fec3d77565d89df9ff4d743537867ede3eacaec8c24754fe72c4eea7fef4496175cbdbae7a4b95b2628d5af400acc2eb99bc6efb6cf426858e9bf37f05b5326dc17c5282560dda09b003cf294b0663", 0x88, 0x10000}, {&(0x7f0000000580)="1b2e28abbd8a34c3b6b2da9c2f5e1a61b915dbdd02f135701e74d9eafbc8d5a0d2d1c07d658fa1d19492b078c32ea4cded0d66428cb5c5a6cfddcf610b", 0x3d}], 0x8000, &(0x7f00000019c0)={[{@block_validity}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@nodelalloc}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'skcipher\x00'}}, {@hash}, {@subj_role={'subj_role', 0x3d, 'memory.events\x00'}}]}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:03 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000680)="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", 0x1000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) [ 3380.611563][ T798] loop2: detected capacity change from 0 to 256 17:27:03 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f0000005b00)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x7, 0x1, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="374cb7257f027dcc7e98f583b4ecc7cca8e893d9c4b7ab924c134adfa1e357b97b33f87533b444afb8c426b6722d76b5148faf28a59f7c344ec9891ce809cd15906936e1d6b0544897886f2528e213c61bb7180ff41a2ad99644c9cf8b87ddebd6be598486e40a354834efbc7e9317c504c6871391e0780398ed", 0x7a}, {&(0x7f0000005a80)="7d63e126c9b7eab07312ea8675780fb8555792ee597777", 0x17}], 0x2, 0x4, 0x0, {0x3}}, 0xfffffc40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:03 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3380.683422][ T798] EXT4-fs: Ignoring removed mblk_io_submit option [ 3380.702218][ T798] ext3: Unknown parameter 'fscontext' 17:27:03 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @local, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:03 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x431e, &(0x7f0000000080)={0x0, 0xebbd, 0x20, 0x2, 0x132}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000300), &(0x7f00000002c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/61, 0x3d}], 0x4) 17:27:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xebffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:03 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/203, 0xcb) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:03 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:03 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @local, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:03 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x431e, &(0x7f0000000080)={0x0, 0xebbd, 0x20, 0x2, 0x132}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000300), &(0x7f00000002c0)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) (async) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/61, 0x3d}], 0x4) 17:27:04 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:04 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x431e, &(0x7f0000000080)={0x0, 0xebbd, 0x20, 0x2, 0x132}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000300), &(0x7f00000002c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/61, 0x3d}], 0x4) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0x431e, &(0x7f0000000080)={0x0, 0xebbd, 0x20, 0x2, 0x132}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000300), &(0x7f00000002c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000500)) (async) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) (async) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/61, 0x3d}], 0x4) (async) 17:27:04 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @local, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:04 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000380)=""/203, 0xcb) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)='./file0\x00', 0x12, 0x82442, 0x365cf}, 0x8) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:04 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4a9e, &(0x7f0000000080)={0x0, 0x5889, 0x8, 0x2, 0x3ab, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f0000000680)="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", 0x1000, 0x100, 0x1}, 0x80000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x3, 0x20100) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:04 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xf6ffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:04 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4a9e, &(0x7f0000000080)={0x0, 0x5889, 0x8, 0x2, 0x3ab, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f0000000680)="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", 0x1000, 0x100, 0x1}, 0x80000001) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x3, 0x20100) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:04 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:04 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) syz_io_uring_setup(0x7af9, &(0x7f0000000080)={0x0, 0xe253, 0x2, 0x0, 0x150, 0x0, r2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)=0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)=0x1) io_uring_enter(r5, 0x2ff, 0x2000c38b, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:04 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:05 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) syz_io_uring_setup(0x7af9, &(0x7f0000000080)={0x0, 0xe253, 0x2, 0x0, 0x150, 0x0, r2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)=0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)=0x1) io_uring_enter(r5, 0x2ff, 0x2000c38b, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) (async) syz_io_uring_setup(0x7af9, &(0x7f0000000080)={0x0, 0xe253, 0x2, 0x0, 0x150, 0x0, r2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)=0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)=0x1) (async) io_uring_enter(r5, 0x2ff, 0x2000c38b, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:27:05 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000014, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:05 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4a9e, &(0x7f0000000080)={0x0, 0x5889, 0x8, 0x2, 0x3ab, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f0000000680)="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", 0x1000, 0x100, 0x1}, 0x80000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000340), 0x3, 0x20100) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 64) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 17:27:05 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xf9fdffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:05 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:05 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:05 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000740)='syzkaller\x00', 0x7b, 0x72, &(0x7f0000000780)=""/114, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x8, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r3, r3]}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0xc080661a, &(0x7f00000003c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=@setlink={0x80, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x80}}, 0x0) sendmmsg$sock(r4, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x2, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="b69dd9399b5dc35e19357fc87f072f8695fec3ca3f6f35ac339f5364d606dfb9bc88f229953ca368ecf59db238fa72887c46f533", 0x34}, {&(0x7f00000002c0)="de7220c97ce498ed32040c565681dfe715e46c98b87f05030933075f28cbc494cd2f6d7a7a39935f0f227a929583f996fc5a2e66b614183606727a552898933b200c25549ae75329e7c84b69315ecfa69f46b881422640ed579cdcf980c66b6d210d9c52f74195b33922bbde", 0x6c}, {&(0x7f0000000440)="b863351131eec0654d748d9ba01f9b7b6947a3ab2c794710b79ceeea3735df8e5f04ef9a5aa47fbd858aef87f6cbb565d0780b9aa9dab8b43141509100cde12156ce0f638a17cbe87c64a86af67758e8897688bd60eb302e0b0b0aba238fc543b383e52f62192bb5bf1e8f414d2edc57b24ac5fa3c6b89cad72ea4023d7bb156ab79906fdb312c747f2fdf483602befcf4e73031614a67ca5045d5e4510b5925cc04fe610c12b7fa5f543ad8bc8ac6e46325f3bd36a8a24d46cd855cbf0a30ef66be11a61d86", 0xc6}], 0x3, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3f}}], 0x90}}], 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:06 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) (async) syz_io_uring_setup(0x7af9, &(0x7f0000000080)={0x0, 0xe253, 0x2, 0x0, 0x150, 0x0, r2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)=0x3) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)=0x1) io_uring_enter(r5, 0x2ff, 0x2000c38b, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:27:06 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:06 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000740)='syzkaller\x00', 0x7b, 0x72, &(0x7f0000000780)=""/114, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x8, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r3, r3]}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0xc080661a, &(0x7f00000003c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=@setlink={0x80, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x80}}, 0x0) sendmmsg$sock(r4, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x2, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="b69dd9399b5dc35e19357fc87f072f8695fec3ca3f6f35ac339f5364d606dfb9bc88f229953ca368ecf59db238fa72887c46f533", 0x34}, {&(0x7f00000002c0)="de7220c97ce498ed32040c565681dfe715e46c98b87f05030933075f28cbc494cd2f6d7a7a39935f0f227a929583f996fc5a2e66b614183606727a552898933b200c25549ae75329e7c84b69315ecfa69f46b881422640ed579cdcf980c66b6d210d9c52f74195b33922bbde", 0x6c}, {&(0x7f0000000440)="b863351131eec0654d748d9ba01f9b7b6947a3ab2c794710b79ceeea3735df8e5f04ef9a5aa47fbd858aef87f6cbb565d0780b9aa9dab8b43141509100cde12156ce0f638a17cbe87c64a86af67758e8897688bd60eb302e0b0b0aba238fc543b383e52f62192bb5bf1e8f414d2edc57b24ac5fa3c6b89cad72ea4023d7bb156ab79906fdb312c747f2fdf483602befcf4e73031614a67ca5045d5e4510b5925cc04fe610c12b7fa5f543ad8bc8ac6e46325f3bd36a8a24d46cd855cbf0a30ef66be11a61d86", 0xc6}], 0x3, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3f}}], 0x90}}], 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000740)='syzkaller\x00', 0x7b, 0x72, &(0x7f0000000780)=""/114, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x8, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r3, r3]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r7, 0xc080661a, &(0x7f00000003c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) (async) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=@setlink={0x80, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x80}}, 0x0) (async) sendmmsg$sock(r4, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x2, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="b69dd9399b5dc35e19357fc87f072f8695fec3ca3f6f35ac339f5364d606dfb9bc88f229953ca368ecf59db238fa72887c46f533", 0x34}, {&(0x7f00000002c0)="de7220c97ce498ed32040c565681dfe715e46c98b87f05030933075f28cbc494cd2f6d7a7a39935f0f227a929583f996fc5a2e66b614183606727a552898933b200c25549ae75329e7c84b69315ecfa69f46b881422640ed579cdcf980c66b6d210d9c52f74195b33922bbde", 0x6c}, {&(0x7f0000000440)="b863351131eec0654d748d9ba01f9b7b6947a3ab2c794710b79ceeea3735df8e5f04ef9a5aa47fbd858aef87f6cbb565d0780b9aa9dab8b43141509100cde12156ce0f638a17cbe87c64a86af67758e8897688bd60eb302e0b0b0aba238fc543b383e52f62192bb5bf1e8f414d2edc57b24ac5fa3c6b89cad72ea4023d7bb156ab79906fdb312c747f2fdf483602befcf4e73031614a67ca5045d5e4510b5925cc04fe610c12b7fa5f543ad8bc8ac6e46325f3bd36a8a24d46cd855cbf0a30ef66be11a61d86", 0xc6}], 0x3, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3f}}], 0x90}}], 0x1, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:27:06 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000740)='syzkaller\x00', 0x7b, 0x72, &(0x7f0000000780)=""/114, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x8, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r3, r3]}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0xc080661a, &(0x7f00000003c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=@setlink={0x80, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x80}}, 0x0) sendmmsg$sock(r4, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x2, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="b69dd9399b5dc35e19357fc87f072f8695fec3ca3f6f35ac339f5364d606dfb9bc88f229953ca368ecf59db238fa72887c46f533", 0x34}, {&(0x7f00000002c0)="de7220c97ce498ed32040c565681dfe715e46c98b87f05030933075f28cbc494cd2f6d7a7a39935f0f227a929583f996fc5a2e66b614183606727a552898933b200c25549ae75329e7c84b69315ecfa69f46b881422640ed579cdcf980c66b6d210d9c52f74195b33922bbde", 0x6c}, {&(0x7f0000000440)="b863351131eec0654d748d9ba01f9b7b6947a3ab2c794710b79ceeea3735df8e5f04ef9a5aa47fbd858aef87f6cbb565d0780b9aa9dab8b43141509100cde12156ce0f638a17cbe87c64a86af67758e8897688bd60eb302e0b0b0aba238fc543b383e52f62192bb5bf1e8f414d2edc57b24ac5fa3c6b89cad72ea4023d7bb156ab79906fdb312c747f2fdf483602befcf4e73031614a67ca5045d5e4510b5925cc04fe610c12b7fa5f543ad8bc8ac6e46325f3bd36a8a24d46cd855cbf0a30ef66be11a61d86", 0xc6}], 0x3, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3f}}], 0x90}}], 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:06 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3383.609420][ T949] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:27:06 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0x10000000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x38, &(0x7f00000000c0)={r7, r8+60000000}, 0x1, 0x1}, 0x5) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x8081) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 3383.688333][ T950] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:27:06 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfbffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:06 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0x10000000) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x38, &(0x7f00000000c0)={r7, r8+60000000}, 0x1, 0x1}, 0x5) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x8081) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 17:27:06 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:07 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:07 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000740)='syzkaller\x00', 0x7b, 0x72, &(0x7f0000000780)=""/114, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x8, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r3, r3]}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0xc080661a, &(0x7f00000003c0)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0xc080661a, &(0x7f00000003c0)) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=@setlink={0x80, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x80}}, 0x0) (async) sendmmsg$sock(r4, &(0x7f0000000380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x2, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="b69dd9399b5dc35e19357fc87f072f8695fec3ca3f6f35ac339f5364d606dfb9bc88f229953ca368ecf59db238fa72887c46f533", 0x34}, {&(0x7f00000002c0)="de7220c97ce498ed32040c565681dfe715e46c98b87f05030933075f28cbc494cd2f6d7a7a39935f0f227a929583f996fc5a2e66b614183606727a552898933b200c25549ae75329e7c84b69315ecfa69f46b881422640ed579cdcf980c66b6d210d9c52f74195b33922bbde", 0x6c}, {&(0x7f0000000440)="b863351131eec0654d748d9ba01f9b7b6947a3ab2c794710b79ceeea3735df8e5f04ef9a5aa47fbd858aef87f6cbb565d0780b9aa9dab8b43141509100cde12156ce0f638a17cbe87c64a86af67758e8897688bd60eb302e0b0b0aba238fc543b383e52f62192bb5bf1e8f414d2edc57b24ac5fa3c6b89cad72ea4023d7bb156ab79906fdb312c747f2fdf483602befcf4e73031614a67ca5045d5e4510b5925cc04fe610c12b7fa5f543ad8bc8ac6e46325f3bd36a8a24d46cd855cbf0a30ef66be11a61d86", 0xc6}], 0x3, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3f}}], 0x90}}], 0x1, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:07 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) syz_io_uring_setup(0x7af9, &(0x7f0000000080)={0x0, 0xe253, 0x2, 0x0, 0x150, 0x0, r2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)=0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)=0x1) io_uring_enter(r5, 0x2ff, 0x2000c38b, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:07 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0x10000000) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x38, &(0x7f00000000c0)={r7, r8+60000000}, 0x1, 0x1}, 0x5) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x8081) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) [ 3384.800795][ T1004] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:27:07 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfdfdffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:07 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:07 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000236}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ftruncate(r4, 0x8) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000080)={0x2, 0x0, 0xfffffff8, 0x405}) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4000, @fd_index=0xa, 0x2, 0x1, 0xf821, 0x1, 0x1, {0x1}}, 0x69bc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000200)={0x0, 0xe, 0x11}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0x3) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:08 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:08 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000236}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ftruncate(r4, 0x8) (async) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000080)={0x2, 0x0, 0xfffffff8, 0x405}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4000, @fd_index=0xa, 0x2, 0x1, 0xf821, 0x1, 0x1, {0x1}}, 0x69bc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4, 0x110, r0, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000200)={0x0, 0xe, 0x11}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0x3) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:08 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:08 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000236}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ftruncate(r4, 0x8) (async) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000080)={0x2, 0x0, 0xfffffff8, 0x405}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4000, @fd_index=0xa, 0x2, 0x1, 0xf821, 0x1, 0x1, {0x1}}, 0x69bc) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 32) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4, 0x110, r0, 0x0) (async, rerun: 64) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 64) syz_io_uring_submit(r5, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r3, &(0x7f0000000200)={0x0, 0xe, 0x11}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0x3) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:08 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:08 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:08 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:08 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfdffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:08 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x10000800}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x67, 0x2, {0xc0, 0x2, 0x5}}, 0x14) syz_io_uring_setup(0x2687, &(0x7f0000000080)={0x0, 0xd53f, 0x0, 0x3, 0x16b, 0x0, r3}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r3, r3, 0x16}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440), 0x4, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '\x00'}}, {@cachetag}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x1}}]}}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/13, 0xd}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:08 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:09 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x10000800}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x67, 0x2, {0xc0, 0x2, 0x5}}, 0x14) (async, rerun: 64) syz_io_uring_setup(0x2687, &(0x7f0000000080)={0x0, 0xd53f, 0x0, 0x3, 0x16b, 0x0, r3}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) (rerun: 64) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) (async) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r3, r3, 0x16}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440), 0x4, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '\x00'}}, {@cachetag}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x1}}]}}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/13, 0xd}, 0x0) (async, rerun: 64) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 32) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:09 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:09 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc080661a, &(0x7f00000003c0)) syz_io_uring_setup(0x7af9, &(0x7f0000000080)={0x0, 0xe253, 0x2, 0x0, 0x150, 0x0, r2}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)=0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)=0x1) io_uring_enter(r5, 0x2ff, 0x2000c38b, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:09 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:27:09 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:09 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfeffffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:09 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x10000800}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x67, 0x2, {0xc0, 0x2, 0x5}}, 0x14) (async) syz_io_uring_setup(0x2687, &(0x7f0000000080)={0x0, 0xd53f, 0x0, 0x3, 0x16b, 0x0, r3}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r3, r3, 0x16}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440), 0x4, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '\x00'}}, {@cachetag}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x1}}]}}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/13, 0xd}, 0x0) (rerun: 64) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:10 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:10 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:10 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000200)=0xd76, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) acct(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xff000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:10 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:11 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 17:27:11 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:11 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000200)=0xd76, 0x0, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) acct(&(0x7f0000000080)='./file0\x00') (async, rerun: 32) openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) (rerun: 32) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:11 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:11 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) 17:27:11 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:11 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000200)=0xd76, 0x0, 0x4) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (rerun: 32) acct(&(0x7f0000000080)='./file0\x00') (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 3389.054410][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.060926][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 17:27:11 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) 17:27:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xff0f0000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:12 executing program 2: r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x90100, 0x190, 0x12}, 0x18) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='}]^#$\x00', &(0x7f0000000200)='memory.events\x00', 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000080)=0x1, 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:12 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:12 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000002c0)={r6, 0x2}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:12 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) 17:27:12 executing program 2: r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x90100, 0x190, 0x12}, 0x18) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='}]^#$\x00', &(0x7f0000000200)='memory.events\x00', 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000080)=0x1, 0x0, 0x4) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:12 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:12 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:12 executing program 2: r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x90100, 0x190, 0x12}, 0x18) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='}]^#$\x00', &(0x7f0000000200)='memory.events\x00', 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x10c, &(0x7f0000000080)=0x1, 0x0, 0x4) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffdffff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:13 executing program 2: r0 = syz_io_uring_setup(0x3edc, &(0x7f0000000240)={0x0, 0x4000000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="280a485b24ff8d51108890ba11f44bbde7371be97d8e8966e590751f4d2bc799ec36d313d97ff4f2493a7ab9bd040f5cb64fecd0691e9cd3793f20b99277aae02ad178259e0062d8357ed9bd28ff1d85ede4eecfab3c3152c94a621e0707eed53e4eee546c3b0a5a1cfd8a14", 0x6c}], 0x1, 0x1ff, 0x7, 0x9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:13 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:13 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000002c0)={r6, 0x2}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000002c0)={r6, 0x2}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:27:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:13 executing program 2: r0 = syz_io_uring_setup(0x3edc, &(0x7f0000000240)={0x0, 0x4000000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 32) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="280a485b24ff8d51108890ba11f44bbde7371be97d8e8966e590751f4d2bc799ec36d313d97ff4f2493a7ab9bd040f5cb64fecd0691e9cd3793f20b99277aae02ad178259e0062d8357ed9bd28ff1d85ede4eecfab3c3152c94a621e0707eed53e4eee546c3b0a5a1cfd8a14", 0x6c}], 0x1, 0x1ff, 0x7, 0x9) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 32) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 17:27:13 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:13 executing program 2: r0 = syz_io_uring_setup(0x3edc, &(0x7f0000000240)={0x0, 0x4000000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="280a485b24ff8d51108890ba11f44bbde7371be97d8e8966e590751f4d2bc799ec36d313d97ff4f2493a7ab9bd040f5cb64fecd0691e9cd3793f20b99277aae02ad178259e0062d8357ed9bd28ff1d85ede4eecfab3c3152c94a621e0707eed53e4eee546c3b0a5a1cfd8a14", 0x6c}], 0x1, 0x1ff, 0x7, 0x9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3edc, &(0x7f0000000240)={0x0, 0x4000000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="280a485b24ff8d51108890ba11f44bbde7371be97d8e8966e590751f4d2bc799ec36d313d97ff4f2493a7ab9bd040f5cb64fecd0691e9cd3793f20b99277aae02ad178259e0062d8357ed9bd28ff1d85ede4eecfab3c3152c94a621e0707eed53e4eee546c3b0a5a1cfd8a14", 0x6c}], 0x1, 0x1ff, 0x7, 0x9) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:27:13 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc080661a, &(0x7f00000003c0)) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:13 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdf9, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:14 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x6, 0x2007, @fd=r0, 0x8, &(0x7f00000002c0)="c983be9c1784a1f64f9274dccced8a92a0c9e5451cdc3bce9110260dbb7ed96b8e75c186cc2e042fb3541ad33e25dfef2a537a40edaeefd52ec1b26dae21764b6b4e2145f14050c5720534ed7e338d2d2f10399aa04bbd4ba1731c49687b3b59de8c6b621a13549020504280c5577bf08e8fc219a330daff6673e75410e5488ed0dde33ce353fa600958e130322b44873f3b47ad58617e095f89f991074aa7a916d111e00a2f4f6e375c226e69a4376095addb8f31f96bb61dbc9943", 0xbc, 0xe}, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:14 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:14 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x6, 0x2007, @fd=r0, 0x8, &(0x7f00000002c0)="c983be9c1784a1f64f9274dccced8a92a0c9e5451cdc3bce9110260dbb7ed96b8e75c186cc2e042fb3541ad33e25dfef2a537a40edaeefd52ec1b26dae21764b6b4e2145f14050c5720534ed7e338d2d2f10399aa04bbd4ba1731c49687b3b59de8c6b621a13549020504280c5577bf08e8fc219a330daff6673e75410e5488ed0dde33ce353fa600958e130322b44873f3b47ad58617e095f89f991074aa7a916d111e00a2f4f6e375c226e69a4376095addb8f31f96bb61dbc9943", 0xbc, 0xe}, 0x9) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:14 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000002c0)={r6, 0x2}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:14 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:14 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000dc0)={&(0x7f0000000380)=@hci, 0x80, 0x0}}, 0x0) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x6, 0x2007, @fd=r0, 0x8, &(0x7f00000002c0)="c983be9c1784a1f64f9274dccced8a92a0c9e5451cdc3bce9110260dbb7ed96b8e75c186cc2e042fb3541ad33e25dfef2a537a40edaeefd52ec1b26dae21764b6b4e2145f14050c5720534ed7e338d2d2f10399aa04bbd4ba1731c49687b3b59de8c6b621a13549020504280c5577bf08e8fc219a330daff6673e75410e5488ed0dde33ce353fa600958e130322b44873f3b47ad58617e095f89f991074aa7a916d111e00a2f4f6e375c226e69a4376095addb8f31f96bb61dbc9943", 0xbc, 0xe}, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0xc080661a, &(0x7f00000003c0)) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async, rerun: 64) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:14 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:14 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:15 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdfd, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:15 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f00000047c0)={0x3, 0xd74}) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) recvmmsg(r5, &(0x7f0000006e80)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/125, 0x7d}, {&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/246, 0xf6}, {&(0x7f0000001d80)=""/85, 0x55}, {&(0x7f0000001e00)=""/254, 0xfe}, {&(0x7f0000001f00)=""/111, 0x6f}, {&(0x7f0000000380)=""/26, 0x1a}], 0xa, &(0x7f0000002080)=""/20, 0x14}, 0x345}, {{&(0x7f00000020c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000002140)=""/110, 0x6e}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/242, 0xf2}, {&(0x7f00000042c0)=""/193, 0xc1}, {&(0x7f00000043c0)=""/181, 0xb5}], 0x6, &(0x7f0000004500)=""/249, 0xf9}, 0x40}, {{&(0x7f0000004600)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004680)=""/168, 0xa8}, {&(0x7f0000004740)=""/122, 0x7a}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/32, 0x20}], 0x4, &(0x7f0000004880)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000005880)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000006900)=[{&(0x7f0000005900)=""/4096, 0x1000}], 0x1, &(0x7f0000006940)=""/76, 0x4c}, 0x800}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f00000069c0)=""/147, 0x93}, {&(0x7f0000006a80)=""/233, 0xe9}, {&(0x7f0000006b80)=""/105, 0x69}, {&(0x7f0000006c00)=""/229, 0xe5}, {&(0x7f0000006d00)=""/207, 0xcf}], 0x5}, 0x80000000}], 0x5, 0x40010000, &(0x7f0000006fc0)={0x0, 0x3938700}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=@bridge_setlink={0x50c, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x41000, 0x1683a}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x10000}, @IFLA_NET_NS_FD={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe0}, @IFLA_VFINFO_LIST={0x4c8, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x10000}}]}, {0x110, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x200, 0xeb}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x366, 0xff, 0x88a8}}, {0x14, 0x1, {0x1f, 0xb15, 0x101, 0x88a8}}, {0x14, 0x1, {0x30c88019, 0x393, 0xfffffff7, 0x88a8}}, {0x14, 0x1, {0x1, 0x2f0, 0x10001, 0x88a8}}, {0x14, 0x1, {0x7, 0x381, 0x1000, 0x8100}}, {0x14, 0x1, {0x3, 0x507, 0x9, 0x88a8}}, {0x14, 0x1, {0xb7b, 0x156, 0x3, 0x8100}}, {0x14, 0x1, {0x7, 0x8ac, 0x9, 0xc554}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff, @multicast}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x36a, 0x3fffffff8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x9c81}}]}, {0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}}, @IFLA_VF_MAC={0x28, 0x1, {0x40000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x982e, @multicast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x79cf, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0xfffffff7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb9db307, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x8}}]}, {0x194, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x7fc}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x5af, 0xfffffbff, 0x88a8}}, {0x14, 0x1, {0x4c66, 0x849, 0x1d, 0x8100}}, {0x14, 0x1, {0x3, 0xd97, 0xfffffffd, 0x88a8}}, {0x14, 0x1, {0x59, 0x826, 0x200, 0x8100}}, {0x14, 0x1, {0x3ff, 0xcba, 0x2bfa, 0x88a8}}, {0x14, 0x1, {0x6, 0x827, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x7, 0x31f, 0x9dc7, 0x88a8}}, {0x14, 0x1, {0x7, 0x225, 0x6eaa51d4, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf3d2, 0x744, 0x7, 0x8100}}, {0x14, 0x1, {0x8001, 0x179, 0x5, 0x88a8}}, {0x14, 0x1, {0x400, 0xd64, 0x5, 0x8100}}, {0x14, 0x1, {0x7, 0xe63, 0x40f00962, 0x8100}}, {0x14, 0x1, {0xffffaa13, 0x9f0, 0x10000, 0x88a8}}, {0x14, 0x1, {0x4, 0x4b1, 0x1488, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb400000, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x22}}, @IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_MAC={0x28, 0x1, {0x9f32, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x7e}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0xffffffffffff4ad7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x8001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x401, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xedd, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffb, 0xd5e}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x40, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x70}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7ff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x80000000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x40, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4e3, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @multicast}}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x547}]}, 0x50c}, 0x1, 0x0, 0x0, 0xc884}, 0x40) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:15 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:15 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3392.673054][ T1329] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:27:15 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:15 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:15 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:15 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:16 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f00000047c0)={0x3, 0xd74}) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) recvmmsg(r5, &(0x7f0000006e80)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/125, 0x7d}, {&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/246, 0xf6}, {&(0x7f0000001d80)=""/85, 0x55}, {&(0x7f0000001e00)=""/254, 0xfe}, {&(0x7f0000001f00)=""/111, 0x6f}, {&(0x7f0000000380)=""/26, 0x1a}], 0xa, &(0x7f0000002080)=""/20, 0x14}, 0x345}, {{&(0x7f00000020c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000002140)=""/110, 0x6e}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/242, 0xf2}, {&(0x7f00000042c0)=""/193, 0xc1}, {&(0x7f00000043c0)=""/181, 0xb5}], 0x6, &(0x7f0000004500)=""/249, 0xf9}, 0x40}, {{&(0x7f0000004600)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004680)=""/168, 0xa8}, {&(0x7f0000004740)=""/122, 0x7a}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/32, 0x20}], 0x4, &(0x7f0000004880)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000005880)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000006900)=[{&(0x7f0000005900)=""/4096, 0x1000}], 0x1, &(0x7f0000006940)=""/76, 0x4c}, 0x800}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f00000069c0)=""/147, 0x93}, {&(0x7f0000006a80)=""/233, 0xe9}, {&(0x7f0000006b80)=""/105, 0x69}, {&(0x7f0000006c00)=""/229, 0xe5}, {&(0x7f0000006d00)=""/207, 0xcf}], 0x5}, 0x80000000}], 0x5, 0x40010000, &(0x7f0000006fc0)={0x0, 0x3938700}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=@bridge_setlink={0x50c, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x41000, 0x1683a}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x10000}, @IFLA_NET_NS_FD={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe0}, @IFLA_VFINFO_LIST={0x4c8, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x10000}}]}, {0x110, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x200, 0xeb}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x366, 0xff, 0x88a8}}, {0x14, 0x1, {0x1f, 0xb15, 0x101, 0x88a8}}, {0x14, 0x1, {0x30c88019, 0x393, 0xfffffff7, 0x88a8}}, {0x14, 0x1, {0x1, 0x2f0, 0x10001, 0x88a8}}, {0x14, 0x1, {0x7, 0x381, 0x1000, 0x8100}}, {0x14, 0x1, {0x3, 0x507, 0x9, 0x88a8}}, {0x14, 0x1, {0xb7b, 0x156, 0x3, 0x8100}}, {0x14, 0x1, {0x7, 0x8ac, 0x9, 0xc554}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff, @multicast}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x36a, 0x3fffffff8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x9c81}}]}, {0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}}, @IFLA_VF_MAC={0x28, 0x1, {0x40000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x982e, @multicast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x79cf, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0xfffffff7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb9db307, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x8}}]}, {0x194, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x7fc}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x5af, 0xfffffbff, 0x88a8}}, {0x14, 0x1, {0x4c66, 0x849, 0x1d, 0x8100}}, {0x14, 0x1, {0x3, 0xd97, 0xfffffffd, 0x88a8}}, {0x14, 0x1, {0x59, 0x826, 0x200, 0x8100}}, {0x14, 0x1, {0x3ff, 0xcba, 0x2bfa, 0x88a8}}, {0x14, 0x1, {0x6, 0x827, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x7, 0x31f, 0x9dc7, 0x88a8}}, {0x14, 0x1, {0x7, 0x225, 0x6eaa51d4, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf3d2, 0x744, 0x7, 0x8100}}, {0x14, 0x1, {0x8001, 0x179, 0x5, 0x88a8}}, {0x14, 0x1, {0x400, 0xd64, 0x5, 0x8100}}, {0x14, 0x1, {0x7, 0xe63, 0x40f00962, 0x8100}}, {0x14, 0x1, {0xffffaa13, 0x9f0, 0x10000, 0x88a8}}, {0x14, 0x1, {0x4, 0x4b1, 0x1488, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb400000, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x22}}, @IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_MAC={0x28, 0x1, {0x9f32, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x7e}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0xffffffffffff4ad7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x8001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x401, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xedd, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffb, 0xd5e}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x40, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x70}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7ff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x80000000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x40, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4e3, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @multicast}}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x547}]}, 0x50c}, 0x1, 0x0, 0x0, 0xc884}, 0x40) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f00000047c0)={0x3, 0xd74}) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) (async) recvmmsg(r5, &(0x7f0000006e80)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/125, 0x7d}, {&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/246, 0xf6}, {&(0x7f0000001d80)=""/85, 0x55}, {&(0x7f0000001e00)=""/254, 0xfe}, {&(0x7f0000001f00)=""/111, 0x6f}, {&(0x7f0000000380)=""/26, 0x1a}], 0xa, &(0x7f0000002080)=""/20, 0x14}, 0x345}, {{&(0x7f00000020c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000002140)=""/110, 0x6e}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/242, 0xf2}, {&(0x7f00000042c0)=""/193, 0xc1}, {&(0x7f00000043c0)=""/181, 0xb5}], 0x6, &(0x7f0000004500)=""/249, 0xf9}, 0x40}, {{&(0x7f0000004600)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004680)=""/168, 0xa8}, {&(0x7f0000004740)=""/122, 0x7a}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/32, 0x20}], 0x4, &(0x7f0000004880)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000005880)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000006900)=[{&(0x7f0000005900)=""/4096, 0x1000}], 0x1, &(0x7f0000006940)=""/76, 0x4c}, 0x800}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f00000069c0)=""/147, 0x93}, {&(0x7f0000006a80)=""/233, 0xe9}, {&(0x7f0000006b80)=""/105, 0x69}, {&(0x7f0000006c00)=""/229, 0xe5}, {&(0x7f0000006d00)=""/207, 0xcf}], 0x5}, 0x80000000}], 0x5, 0x40010000, &(0x7f0000006fc0)={0x0, 0x3938700}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=@bridge_setlink={0x50c, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x41000, 0x1683a}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x10000}, @IFLA_NET_NS_FD={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe0}, @IFLA_VFINFO_LIST={0x4c8, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x10000}}]}, {0x110, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x200, 0xeb}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x366, 0xff, 0x88a8}}, {0x14, 0x1, {0x1f, 0xb15, 0x101, 0x88a8}}, {0x14, 0x1, {0x30c88019, 0x393, 0xfffffff7, 0x88a8}}, {0x14, 0x1, {0x1, 0x2f0, 0x10001, 0x88a8}}, {0x14, 0x1, {0x7, 0x381, 0x1000, 0x8100}}, {0x14, 0x1, {0x3, 0x507, 0x9, 0x88a8}}, {0x14, 0x1, {0xb7b, 0x156, 0x3, 0x8100}}, {0x14, 0x1, {0x7, 0x8ac, 0x9, 0xc554}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff, @multicast}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x36a, 0x3fffffff8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x9c81}}]}, {0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}}, @IFLA_VF_MAC={0x28, 0x1, {0x40000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x982e, @multicast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x79cf, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0xfffffff7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb9db307, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x8}}]}, {0x194, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x7fc}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x5af, 0xfffffbff, 0x88a8}}, {0x14, 0x1, {0x4c66, 0x849, 0x1d, 0x8100}}, {0x14, 0x1, {0x3, 0xd97, 0xfffffffd, 0x88a8}}, {0x14, 0x1, {0x59, 0x826, 0x200, 0x8100}}, {0x14, 0x1, {0x3ff, 0xcba, 0x2bfa, 0x88a8}}, {0x14, 0x1, {0x6, 0x827, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x7, 0x31f, 0x9dc7, 0x88a8}}, {0x14, 0x1, {0x7, 0x225, 0x6eaa51d4, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf3d2, 0x744, 0x7, 0x8100}}, {0x14, 0x1, {0x8001, 0x179, 0x5, 0x88a8}}, {0x14, 0x1, {0x400, 0xd64, 0x5, 0x8100}}, {0x14, 0x1, {0x7, 0xe63, 0x40f00962, 0x8100}}, {0x14, 0x1, {0xffffaa13, 0x9f0, 0x10000, 0x88a8}}, {0x14, 0x1, {0x4, 0x4b1, 0x1488, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb400000, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x22}}, @IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_MAC={0x28, 0x1, {0x9f32, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x7e}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0xffffffffffff4ad7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x8001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x401, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xedd, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffb, 0xd5e}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x40, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x70}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7ff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x80000000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x40, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4e3, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @multicast}}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x547}]}, 0x50c}, 0x1, 0x0, 0x0, 0xc884}, 0x40) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:27:16 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3393.345885][ T1348] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:27:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffdff, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3393.591629][ T1347] warn_alloc: 3 callbacks suppressed [ 3393.591654][ T1347] syz-executor.4: vmalloc error: size 16384, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 17:27:16 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3393.773928][ T1347] CPU: 0 PID: 1347 Comm: syz-executor.4 Not tainted 5.16.0-syzkaller #0 [ 3393.782311][ T1347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3393.792391][ T1347] Call Trace: [ 3393.795691][ T1347] [ 3393.798646][ T1347] dump_stack_lvl+0x201/0x2d8 [ 3393.803350][ T1347] ? show_regs_print_info+0x12/0x12 [ 3393.808561][ T1347] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3393.814317][ T1347] warn_alloc+0x252/0x400 [ 3393.818669][ T1347] ? zone_watermark_ok_safe+0x280/0x280 [ 3393.824246][ T1347] __vmalloc_node_range+0x92c/0xd90 [ 3393.829482][ T1347] dup_task_struct+0x65d/0x9a0 [ 3393.834262][ T1347] ? copy_process+0x64a/0x5aa0 [ 3393.839052][ T1347] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3393.844274][ T1347] ? lockdep_hardirqs_on+0x95/0x140 [ 3393.849490][ T1347] copy_process+0x64a/0x5aa0 [ 3393.854108][ T1347] ? do_raw_spin_unlock+0x134/0x8a0 [ 3393.859328][ T1347] ? folio_add_lru+0x44b/0x5d0 [ 3393.864134][ T1347] ? __lock_acquire+0x1382/0x2b00 [ 3393.869181][ T1347] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 3393.874328][ T1347] kernel_clone+0x22a/0x7e0 [ 3393.878906][ T1347] ? create_io_thread+0x1d0/0x1d0 [ 3393.883963][ T1347] __x64_sys_clone+0x245/0x2b0 [ 3393.888745][ T1347] ? __do_sys_vfork+0x130/0x130 [ 3393.893614][ T1347] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 3393.899622][ T1347] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3393.905622][ T1347] ? lockdep_hardirqs_on+0x95/0x140 [ 3393.910841][ T1347] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3393.916841][ T1347] do_syscall_64+0x44/0xd0 [ 3393.921278][ T1347] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3393.927184][ T1347] RIP: 0033:0x7f93a41c7411 [ 3393.931613][ T1347] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3393.951232][ T1347] RSP: 002b:00007ffe08d3c098 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3393.959661][ T1347] RAX: ffffffffffffffda RBX: 00007f93a29f1700 RCX: 00007f93a41c7411 [ 3393.967648][ T1347] RDX: 00007f93a29f19d0 RSI: 00007f93a29f12f0 RDI: 00000000003d0f00 [ 3393.975633][ T1347] RBP: 00007ffe08d3c2e0 R08: 00007f93a29f1700 R09: 00007f93a29f1700 [ 3393.983621][ T1347] R10: 00007f93a29f19d0 R11: 0000000000000206 R12: 00007ffe08d3c14e [ 3393.991607][ T1347] R13: 00007ffe08d3c14f R14: 00007f93a29f1300 R15: 0000000000022000 [ 3393.999613][ T1347] 17:27:16 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3394.056919][ T1347] Mem-Info: [ 3394.063767][ T1347] active_anon:1001 inactive_anon:166497 isolated_anon:0 [ 3394.063767][ T1347] active_file:9349 inactive_file:68995 isolated_file:0 [ 3394.063767][ T1347] unevictable:768 dirty:33 writeback:0 [ 3394.063767][ T1347] slab_reclaimable:24080 slab_unreclaimable:423092 [ 3394.063767][ T1347] mapped:28445 shmem:2466 pagetables:1059 bounce:0 [ 3394.063767][ T1347] kernel_misc_reclaimable:0 [ 3394.063767][ T1347] free:845062 free_pcp:25437 free_cma:0 17:27:16 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3394.137856][ T1347] Node 0 active_anon:2808kB inactive_anon:605276kB active_file:35148kB inactive_file:203244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112768kB dirty:128kB writeback:0kB shmem:6364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 192512kB writeback_tmp:0kB kernel_stack:104652kB pagetables:3712kB all_unreclaimable? no 17:27:17 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:17 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3394.299729][ T1347] Node 1 active_anon:1196kB inactive_anon:60812kB active_file:2248kB inactive_file:72736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1012kB dirty:4kB writeback:0kB shmem:3500kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:23064kB pagetables:624kB all_unreclaimable? no 17:27:17 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3394.429698][ T1347] Node 0 DMA free:10788kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:104kB free_cma:0kB 17:27:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff7f, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3394.609645][ T1347] lowmem_reserve[]: 0 2635 2636 2636 2636 [ 3394.622927][ T1347] Node 0 DMA32 free:44412kB boost:0kB min:35588kB low:44484kB high:53380kB reserved_highatomic:0KB active_anon:2808kB inactive_anon:605072kB active_file:35128kB inactive_file:203224kB unevictable:1536kB writepending:128kB present:3129332kB managed:2705460kB mlocked:0kB bounce:0kB free_pcp:37796kB local_pcp:18772kB free_cma:0kB 17:27:17 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3394.724046][ T1347] lowmem_reserve[]: 0 0 1 1 1 [ 3394.728829][ T1347] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.849639][ T1347] lowmem_reserve[]: 0 0 0 0 0 [ 3394.856453][ T1347] Node 1 Normal free:3319608kB boost:0kB min:54300kB low:67872kB high:81444kB reserved_highatomic:0KB active_anon:1200kB inactive_anon:60972kB active_file:2248kB inactive_file:72736kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:64516kB local_pcp:33452kB free_cma:0kB [ 3394.928463][ T1347] lowmem_reserve[]: 0 0 0 0 0 [ 3394.933675][ T1347] Node 0 DMA: 5*4kB (UM) 8*8kB (UME) 9*16kB (UME) 6*32kB (UME) 4*64kB (UME) 5*128kB (U) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10788kB [ 3394.994221][ T1347] Node 0 DMA32: 447*4kB (UME) 692*8kB (UME) 290*16kB (UM) 148*32kB (UE) 53*64kB (UE) 10*128kB (UME) 34*256kB (UME) 18*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 44412kB [ 3395.027178][ T1347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3395.043109][ T1347] Node 1 Normal: 101*4kB (UME) 32*8kB (UME) 97*16kB (UME) 348*32kB (UME) 28*64kB (UME) 114*128kB (UM) 28*256kB (U) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 800*4096kB (UME) = 3321892kB [ 3395.072028][ T1347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3395.091364][ T1347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3395.107602][ T1347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3395.124262][ T1347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3395.148216][ T1347] 11846 total pagecache pages [ 3395.157569][ T1347] 0 pages in swap cache [ 3395.166388][ T1347] Swap cache stats: add 0, delete 0, find 0/0 [ 3395.177253][ T1347] Free swap = 0kB [ 3395.188938][ T1347] Total swap = 0kB 17:27:18 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f00000047c0)={0x3, 0xd74}) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) (async, rerun: 64) recvmmsg(r5, &(0x7f0000006e80)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/125, 0x7d}, {&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/246, 0xf6}, {&(0x7f0000001d80)=""/85, 0x55}, {&(0x7f0000001e00)=""/254, 0xfe}, {&(0x7f0000001f00)=""/111, 0x6f}, {&(0x7f0000000380)=""/26, 0x1a}], 0xa, &(0x7f0000002080)=""/20, 0x14}, 0x345}, {{&(0x7f00000020c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000002140)=""/110, 0x6e}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/242, 0xf2}, {&(0x7f00000042c0)=""/193, 0xc1}, {&(0x7f00000043c0)=""/181, 0xb5}], 0x6, &(0x7f0000004500)=""/249, 0xf9}, 0x40}, {{&(0x7f0000004600)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004680)=""/168, 0xa8}, {&(0x7f0000004740)=""/122, 0x7a}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/32, 0x20}], 0x4, &(0x7f0000004880)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000005880)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000006900)=[{&(0x7f0000005900)=""/4096, 0x1000}], 0x1, &(0x7f0000006940)=""/76, 0x4c}, 0x800}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f00000069c0)=""/147, 0x93}, {&(0x7f0000006a80)=""/233, 0xe9}, {&(0x7f0000006b80)=""/105, 0x69}, {&(0x7f0000006c00)=""/229, 0xe5}, {&(0x7f0000006d00)=""/207, 0xcf}], 0x5}, 0x80000000}], 0x5, 0x40010000, &(0x7f0000006fc0)={0x0, 0x3938700}) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=@bridge_setlink={0x50c, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x41000, 0x1683a}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x10000}, @IFLA_NET_NS_FD={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xe0}, @IFLA_VFINFO_LIST={0x4c8, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x10000}}]}, {0x110, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x200, 0xeb}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x366, 0xff, 0x88a8}}, {0x14, 0x1, {0x1f, 0xb15, 0x101, 0x88a8}}, {0x14, 0x1, {0x30c88019, 0x393, 0xfffffff7, 0x88a8}}, {0x14, 0x1, {0x1, 0x2f0, 0x10001, 0x88a8}}, {0x14, 0x1, {0x7, 0x381, 0x1000, 0x8100}}, {0x14, 0x1, {0x3, 0x507, 0x9, 0x88a8}}, {0x14, 0x1, {0xb7b, 0x156, 0x3, 0x8100}}, {0x14, 0x1, {0x7, 0x8ac, 0x9, 0xc554}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff, @multicast}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x36a, 0x3fffffff8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x9c81}}]}, {0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}}, @IFLA_VF_MAC={0x28, 0x1, {0x40000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x982e, @multicast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x79cf, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0xfffffff7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb9db307, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x8}}]}, {0x194, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x7fc}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x5af, 0xfffffbff, 0x88a8}}, {0x14, 0x1, {0x4c66, 0x849, 0x1d, 0x8100}}, {0x14, 0x1, {0x3, 0xd97, 0xfffffffd, 0x88a8}}, {0x14, 0x1, {0x59, 0x826, 0x200, 0x8100}}, {0x14, 0x1, {0x3ff, 0xcba, 0x2bfa, 0x88a8}}, {0x14, 0x1, {0x6, 0x827, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0x7, 0x31f, 0x9dc7, 0x88a8}}, {0x14, 0x1, {0x7, 0x225, 0x6eaa51d4, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf3d2, 0x744, 0x7, 0x8100}}, {0x14, 0x1, {0x8001, 0x179, 0x5, 0x88a8}}, {0x14, 0x1, {0x400, 0xd64, 0x5, 0x8100}}, {0x14, 0x1, {0x7, 0xe63, 0x40f00962, 0x8100}}, {0x14, 0x1, {0xffffaa13, 0x9f0, 0x10000, 0x88a8}}, {0x14, 0x1, {0x4, 0x4b1, 0x1488, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xcb400000, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x22}}, @IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_MAC={0x28, 0x1, {0x9f32, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x7e}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0xffffffffffff4ad7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x8001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x401, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xedd, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffb, 0xd5e}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x40, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x70}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7ff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x80000000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x40, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4e3, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @multicast}}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x547}]}, 0x50c}, 0x1, 0x0, 0x0, 0xc884}, 0x40) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) [ 3395.199671][ T1347] 2097051 pages RAM [ 3395.205227][ T1347] 0 pages HighMem/MovableOnly [ 3395.215536][ T1347] 387085 pages reserved [ 3395.223564][ T1347] 0 pages cma reserved 17:27:18 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff85, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:18 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:18 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:19 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4, 0x3ff, 0x8}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="9229d167be99d91e92c54bf066f867c10c3ab9a42f5d21fa6040d37acdf9fbc1ac7393b7d8d48ad1d52b0df333345b4702b2d212831e2f51a3e5fee3b5439bd41b4b99be5617ce630ee6eedd6795", 0x4e}, {&(0x7f0000000440)="c70b5c3e52b09e5cd1953cea69264d9a1cb73b9a5cf1e3024e920e0375ad14b0b05ccfcef4e8b058b00462820370427735f8970698d5360a167b2e6d479124f899858bc444dbfac20baa5aa71556326e401aed79c8af88249898598f9a92aabde4e55022b66f4c411cd72c360b29877dfa9392c6f4b71ba3e67770e7571a506e7777c5988f5349c089dc9ad775c3241d1f905699767cf7eb", 0x98}, {&(0x7f0000000680)="8ecb2a9c8bef7c404130f06c9efbdbe395546570fe0c1fbd2432c707dd5c05255e551fa00f53f8b028d6a38a66025ab918c93cccb4a5603d24706f6437bff6667a1649d434995ffe4465dd2038cefebbce2f14dbca8702433afbd0852816ad0b45dee763139261dc7ecace1716b46528d7d7756cbc699550d3b24654c4c64fa5e9ce870d772ee0d3dda14539df924013981d88358a94ad6fa2b77574f0373e2571d90c1d271bd9debf52bcc60f39c2e1d244562cc27580c3ddf3cb19f90a7df02cea4d94db2c185ce071a45f195176e02c284c7cb642f76bbc61a907aaf0c7c22931b1fd927a9cc8b434db3ee5464b430d25719df969e48ba6", 0xf9}], 0x3}}], 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:19 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4, 0x3ff, 0x8}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="9229d167be99d91e92c54bf066f867c10c3ab9a42f5d21fa6040d37acdf9fbc1ac7393b7d8d48ad1d52b0df333345b4702b2d212831e2f51a3e5fee3b5439bd41b4b99be5617ce630ee6eedd6795", 0x4e}, {&(0x7f0000000440)="c70b5c3e52b09e5cd1953cea69264d9a1cb73b9a5cf1e3024e920e0375ad14b0b05ccfcef4e8b058b00462820370427735f8970698d5360a167b2e6d479124f899858bc444dbfac20baa5aa71556326e401aed79c8af88249898598f9a92aabde4e55022b66f4c411cd72c360b29877dfa9392c6f4b71ba3e67770e7571a506e7777c5988f5349c089dc9ad775c3241d1f905699767cf7eb", 0x98}, {&(0x7f0000000680)="8ecb2a9c8bef7c404130f06c9efbdbe395546570fe0c1fbd2432c707dd5c05255e551fa00f53f8b028d6a38a66025ab918c93cccb4a5603d24706f6437bff6667a1649d434995ffe4465dd2038cefebbce2f14dbca8702433afbd0852816ad0b45dee763139261dc7ecace1716b46528d7d7756cbc699550d3b24654c4c64fa5e9ce870d772ee0d3dda14539df924013981d88358a94ad6fa2b77574f0373e2571d90c1d271bd9debf52bcc60f39c2e1d244562cc27580c3ddf3cb19f90a7df02cea4d94db2c185ce071a45f195176e02c284c7cb642f76bbc61a907aaf0c7c22931b1fd927a9cc8b434db3ee5464b430d25719df969e48ba6", 0xf9}], 0x3}}], 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4, 0x3ff, 0x8}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) (async) sendmmsg$sock(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="9229d167be99d91e92c54bf066f867c10c3ab9a42f5d21fa6040d37acdf9fbc1ac7393b7d8d48ad1d52b0df333345b4702b2d212831e2f51a3e5fee3b5439bd41b4b99be5617ce630ee6eedd6795", 0x4e}, {&(0x7f0000000440)="c70b5c3e52b09e5cd1953cea69264d9a1cb73b9a5cf1e3024e920e0375ad14b0b05ccfcef4e8b058b00462820370427735f8970698d5360a167b2e6d479124f899858bc444dbfac20baa5aa71556326e401aed79c8af88249898598f9a92aabde4e55022b66f4c411cd72c360b29877dfa9392c6f4b71ba3e67770e7571a506e7777c5988f5349c089dc9ad775c3241d1f905699767cf7eb", 0x98}, {&(0x7f0000000680)="8ecb2a9c8bef7c404130f06c9efbdbe395546570fe0c1fbd2432c707dd5c05255e551fa00f53f8b028d6a38a66025ab918c93cccb4a5603d24706f6437bff6667a1649d434995ffe4465dd2038cefebbce2f14dbca8702433afbd0852816ad0b45dee763139261dc7ecace1716b46528d7d7756cbc699550d3b24654c4c64fa5e9ce870d772ee0d3dda14539df924013981d88358a94ad6fa2b77574f0373e2571d90c1d271bd9debf52bcc60f39c2e1d244562cc27580c3ddf3cb19f90a7df02cea4d94db2c185ce071a45f195176e02c284c7cb642f76bbc61a907aaf0c7c22931b1fd927a9cc8b434db3ee5464b430d25719df969e48ba6", 0xf9}], 0x3}}], 0x2, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:27:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff8c, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:19 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:19 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4, 0x3ff, 0x8}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="9229d167be99d91e92c54bf066f867c10c3ab9a42f5d21fa6040d37acdf9fbc1ac7393b7d8d48ad1d52b0df333345b4702b2d212831e2f51a3e5fee3b5439bd41b4b99be5617ce630ee6eedd6795", 0x4e}, {&(0x7f0000000440)="c70b5c3e52b09e5cd1953cea69264d9a1cb73b9a5cf1e3024e920e0375ad14b0b05ccfcef4e8b058b00462820370427735f8970698d5360a167b2e6d479124f899858bc444dbfac20baa5aa71556326e401aed79c8af88249898598f9a92aabde4e55022b66f4c411cd72c360b29877dfa9392c6f4b71ba3e67770e7571a506e7777c5988f5349c089dc9ad775c3241d1f905699767cf7eb", 0x98}, {&(0x7f0000000680)="8ecb2a9c8bef7c404130f06c9efbdbe395546570fe0c1fbd2432c707dd5c05255e551fa00f53f8b028d6a38a66025ab918c93cccb4a5603d24706f6437bff6667a1649d434995ffe4465dd2038cefebbce2f14dbca8702433afbd0852816ad0b45dee763139261dc7ecace1716b46528d7d7756cbc699550d3b24654c4c64fa5e9ce870d772ee0d3dda14539df924013981d88358a94ad6fa2b77574f0373e2571d90c1d271bd9debf52bcc60f39c2e1d244562cc27580c3ddf3cb19f90a7df02cea4d94db2c185ce071a45f195176e02c284c7cb642f76bbc61a907aaf0c7c22931b1fd927a9cc8b434db3ee5464b430d25719df969e48ba6", 0xf9}], 0x3}}], 0x2, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x4}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:27:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:19 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:19 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffff6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000000c0)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:19 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff97, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:20 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffff6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000000c0)) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async, rerun: 64) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 17:27:20 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffff6}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000000c0)) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:27:20 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:20 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffda, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:21 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000d, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x8001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:21 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000d, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x8001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000d, 0x12, r0, 0x8000000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x10000000) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x8001) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:27:21 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:21 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffeb, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:22 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:22 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:22 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:22 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:23 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:23 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:23 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffff6, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000d, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x8001) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000d, 0x12, r0, 0x8000000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x10000000) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x8001) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 17:27:23 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:23 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:23 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:23 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:23 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:24 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:24 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:24 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffb, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:24 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:24 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:25 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9f4, 0xf08}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x244900, 0x23) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000200)={0xb9, &(0x7f00000002c0)="8a9f4a69367ef4a8cf81a85b35cd5e6cd18c677594b3a823b24ef90b18a3033db1e2ec51cc93e5d7eae90383287edfdda882e1caae9f73c9b71deab4e773a81194a2cd21bda548bac2eb0a2b94c5a863620f3820fe148d0923cf832554d7cb60cbe42f86f761d6294c9ff4bef628be3d5cef934ad9e1dbc0343c9ba8b1740dc66621143bce859523f518e24f63361bbd945d0b4d2707b231351c59e4668bfdbb33e8b9c4cde10a2a1f8588abe864a854a35ccf2f12eaa1e12c"}) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000440)=""/115) socket$nl_generic(0x10, 0x3, 0x10) 17:27:25 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:25 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9f4, 0xf08}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x244900, 0x23) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000200)={0xb9, &(0x7f00000002c0)="8a9f4a69367ef4a8cf81a85b35cd5e6cd18c677594b3a823b24ef90b18a3033db1e2ec51cc93e5d7eae90383287edfdda882e1caae9f73c9b71deab4e773a81194a2cd21bda548bac2eb0a2b94c5a863620f3820fe148d0923cf832554d7cb60cbe42f86f761d6294c9ff4bef628be3d5cef934ad9e1dbc0343c9ba8b1740dc66621143bce859523f518e24f63361bbd945d0b4d2707b231351c59e4668bfdbb33e8b9c4cde10a2a1f8588abe864a854a35ccf2f12eaa1e12c"}) (async) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000440)=""/115) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:27:25 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:25 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:25 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:25 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9f4, 0xf08}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x244900, 0x23) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000200)={0xb9, &(0x7f00000002c0)="8a9f4a69367ef4a8cf81a85b35cd5e6cd18c677594b3a823b24ef90b18a3033db1e2ec51cc93e5d7eae90383287edfdda882e1caae9f73c9b71deab4e773a81194a2cd21bda548bac2eb0a2b94c5a863620f3820fe148d0923cf832554d7cb60cbe42f86f761d6294c9ff4bef628be3d5cef934ad9e1dbc0343c9ba8b1740dc66621143bce859523f518e24f63361bbd945d0b4d2707b231351c59e4668bfdbb33e8b9c4cde10a2a1f8588abe864a854a35ccf2f12eaa1e12c"}) (async) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000440)=""/115) (async) socket$nl_generic(0x10, 0x3, 0x10) 17:27:25 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:25 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffd, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:25 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:25 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"1954aac47cba3b13be813010659a7850", 0x0, 0x0, {0x8000, 0x3}, {0x65ce, 0xfffffffd}, 0x5f, [0x7f, 0x77, 0x7ff, 0x10001, 0x3, 0x2, 0x3a4c, 0x6, 0x6, 0x6, 0x1, 0xfff, 0x62, 0x3, 0x1, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000680)={{r7}, r8, 0x18, @inherit={0x68, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000004000000000000000800000000000000810000000000000000000000000000000600000000000000030000000000000007000000000000000700000000000000ff0100000000000005000000000000000906000000efffffffffffffffffffff"]}, @subvolid=0x100000000}) 17:27:25 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:25 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3403.018979][ T1666] binder: 1662:1666 ioctl c0306201 20001480 returned -14 17:27:25 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3403.135273][ T1666] binder: 1662:1666 ioctl 5000943f 20000680 returned -22 17:27:26 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:26 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:26 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:26 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"1954aac47cba3b13be813010659a7850", 0x0, 0x0, {0x8000, 0x3}, {0x65ce, 0xfffffffd}, 0x5f, [0x7f, 0x77, 0x7ff, 0x10001, 0x3, 0x2, 0x3a4c, 0x6, 0x6, 0x6, 0x1, 0xfff, 0x62, 0x3, 0x1, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000680)={{r7}, r8, 0x18, @inherit={0x68, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000004000000000000000800000000000000810000000000000000000000000000000600000000000000030000000000000007000000000000000700000000000000ff0100000000000005000000000000000906000000efffffffffffffffffffff"]}, @subvolid=0x100000000}) 17:27:26 executing program 1: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:26 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000700)={0x0, 0x9, 0x0, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {0x80000000}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000bc0)={r5, 0x0, &(0x7f0000000b40)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={r6, &(0x7f0000000000)=[{}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{}, {0x80000000, r7}}) r8 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r9 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000c80)={{}, {r10}, 0x3}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000080)={{0x80000000, r7, 0x1, [0xfff, 0xeb]}, {r10, 0x0, 0x3, [0x73d, 0x20]}, 0x4, [0x4, 0x40]}) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffe, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) [ 3403.643289][ T1687] binder: 1683:1687 ioctl c0306201 20001480 returned -14 [ 3403.666229][ T1688] binder: 1683:1688 ioctl 5000943f 20000680 returned -22 17:27:26 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:26 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async, rerun: 64) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (rerun: 64) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r6, r5) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40046305, {0x1, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"1954aac47cba3b13be813010659a7850", 0x0, 0x0, {0x8000, 0x3}, {0x65ce, 0xfffffffd}, 0x5f, [0x7f, 0x77, 0x7ff, 0x10001, 0x3, 0x2, 0x3a4c, 0x6, 0x6, 0x6, 0x1, 0xfff, 0x62, 0x3, 0x1, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000680)={{r7}, r8, 0x18, @inherit={0x68, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000004000000000000000800000000000000810000000000000000000000000000000600000000000000030000000000000007000000000000000700000000000000ff0100000000000005000000000000000906000000efffffffffffffffffffff"]}, @subvolid=0x100000000}) 17:27:26 executing program 1: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:26 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000700)={0x0, 0x9, 0x0, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {0x80000000}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000bc0)={r5, 0x0, &(0x7f0000000b40)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={r6, &(0x7f0000000000)=[{}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{}, {0x80000000, r7}}) (async) r8 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) (async) r9 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000c80)={{}, {r10}, 0x3}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000080)={{0x80000000, r7, 0x1, [0xfff, 0xeb]}, {r10, 0x0, 0x3, [0x73d, 0x20]}, 0x4, [0x4, 0x40]}) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:26 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3404.069011][ T1704] binder: 1700:1704 ioctl c0306201 20001480 returned -14 17:27:26 executing program 1: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3404.137595][ T1704] binder: 1700:1704 ioctl c0306201 20001480 returned -14 [ 3404.196047][ T1704] binder: 1700:1704 ioctl c0306201 20001480 returned -14 [ 3404.199327][ T1702] binder: 1700:1702 ioctl c0306201 20000080 returned -14 [ 3404.303701][ T1721] binder: 1700:1721 ioctl 5000943f 20000680 returned -22 17:27:27 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) r4 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000700)={0x0, 0x9, 0x0, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {0x80000000}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000bc0)={r5, 0x0, &(0x7f0000000b40)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000100)={r6, &(0x7f0000000000)=[{}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{}, {0x80000000, r7}}) (async) r8 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r9 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000c80)={{}, {r10}, 0x3}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000080)={{0x80000000, r7, 0x1, [0xfff, 0xeb]}, {r10, 0x0, 0x3, [0x73d, 0x20]}, 0x4, [0x4, 0x40]}) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:27 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3404.364458][ T1702] binder: 1700:1702 ioctl c0306201 20000080 returned -14 17:27:27 executing program 1: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3404.418860][ T1704] binder: 1700:1704 ioctl c0306201 20001480 returned -14 [ 3404.461065][ T1704] binder: 1700:1704 ioctl c0306201 20001480 returned -14 [ 3404.527958][ T1702] binder: 1700:1702 ioctl c0306201 20000080 returned -14 17:27:27 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x18d2, 0x6016, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) 17:27:27 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3404.569762][ T1704] binder: 1700:1704 ioctl c0306201 20001480 returned -14 [ 3404.581212][ T1702] binder: 1700:1702 ioctl c0306201 20000080 returned -14 [ 3404.586649][ T1704] binder: 1700:1704 ioctl c0306201 20001480 returned -14 [ 3404.651490][ T1702] binder: 1700:1702 ioctl c0306201 20000080 returned -14 17:27:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:27 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:27 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x18d2, 0x6016, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x18d2, 0x6016, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) (async) 17:27:27 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001800)=0x14) r0 = syz_io_uring_setup(0x293f, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004d40)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004f40)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0xa0}, 0x8000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3, &(0x7f0000000340)=""/117, 0x75}, 0x401}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f00000016c0)=""/73, 0x49}, 0x10001}], 0x2, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000001840)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/222, 0xde}, {&(0x7f00000019c0)=""/212, 0xd4}, {&(0x7f0000001ac0)=""/199, 0xc7}], 0x3, &(0x7f0000001c00)=""/223, 0xdf}, 0x1ff}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/194, 0xc2}], 0x1, &(0x7f0000001ec0)=""/96, 0x60}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000001fc0)}, {&(0x7f0000003080)=""/187, 0xbb}], 0x3, &(0x7f0000003140)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000004140)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f00000041c0)=""/33, 0x21}, {&(0x7f0000004200)=""/182, 0xb6}, {&(0x7f00000042c0)=""/217, 0xd9}, {&(0x7f00000043c0)=""/132, 0x84}], 0x4, &(0x7f00000044c0)=""/41, 0x29}, 0xff}, {{&(0x7f0000004500)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004580)=""/157, 0x9d}, {&(0x7f0000004640)=""/52, 0x34}, {&(0x7f0000004680)=""/247, 0xf7}, {&(0x7f0000004780)=""/52, 0x34}], 0x4, &(0x7f0000004800)=""/189, 0xbd}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/101, 0x65}, {&(0x7f0000004940)=""/17, 0x11}], 0x2, &(0x7f00000049c0)=""/166, 0xa6}, 0x5}], 0x6, 0x0, &(0x7f0000004c00)={0x0, 0x3938700}) 17:27:27 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:27 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3405.014159][ T1754] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:27:28 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001800)=0x14) r0 = syz_io_uring_setup(0x293f, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004d40)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004f40)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0xa0}, 0x8000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3, &(0x7f0000000340)=""/117, 0x75}, 0x401}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f00000016c0)=""/73, 0x49}, 0x10001}], 0x2, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000001840)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/222, 0xde}, {&(0x7f00000019c0)=""/212, 0xd4}, {&(0x7f0000001ac0)=""/199, 0xc7}], 0x3, &(0x7f0000001c00)=""/223, 0xdf}, 0x1ff}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/194, 0xc2}], 0x1, &(0x7f0000001ec0)=""/96, 0x60}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000001fc0)}, {&(0x7f0000003080)=""/187, 0xbb}], 0x3, &(0x7f0000003140)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000004140)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f00000041c0)=""/33, 0x21}, {&(0x7f0000004200)=""/182, 0xb6}, {&(0x7f00000042c0)=""/217, 0xd9}, {&(0x7f00000043c0)=""/132, 0x84}], 0x4, &(0x7f00000044c0)=""/41, 0x29}, 0xff}, {{&(0x7f0000004500)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004580)=""/157, 0x9d}, {&(0x7f0000004640)=""/52, 0x34}, {&(0x7f0000004680)=""/247, 0xf7}, {&(0x7f0000004780)=""/52, 0x34}], 0x4, &(0x7f0000004800)=""/189, 0xbd}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/101, 0x65}, {&(0x7f0000004940)=""/17, 0x11}], 0x2, &(0x7f00000049c0)=""/166, 0xa6}, 0x5}], 0x6, 0x0, &(0x7f0000004c00)={0x0, 0x3938700}) getsockname$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001800)=0x14) (async) syz_io_uring_setup(0x293f, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000004d40)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004f40)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0xa0}, 0x8000) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3, &(0x7f0000000340)=""/117, 0x75}, 0x401}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f00000016c0)=""/73, 0x49}, 0x10001}], 0x2, 0x1000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000001840)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/222, 0xde}, {&(0x7f00000019c0)=""/212, 0xd4}, {&(0x7f0000001ac0)=""/199, 0xc7}], 0x3, &(0x7f0000001c00)=""/223, 0xdf}, 0x1ff}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/194, 0xc2}], 0x1, &(0x7f0000001ec0)=""/96, 0x60}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000001fc0)}, {&(0x7f0000003080)=""/187, 0xbb}], 0x3, &(0x7f0000003140)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000004140)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f00000041c0)=""/33, 0x21}, {&(0x7f0000004200)=""/182, 0xb6}, {&(0x7f00000042c0)=""/217, 0xd9}, {&(0x7f00000043c0)=""/132, 0x84}], 0x4, &(0x7f00000044c0)=""/41, 0x29}, 0xff}, {{&(0x7f0000004500)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004580)=""/157, 0x9d}, {&(0x7f0000004640)=""/52, 0x34}, {&(0x7f0000004680)=""/247, 0xf7}, {&(0x7f0000004780)=""/52, 0x34}], 0x4, &(0x7f0000004800)=""/189, 0xbd}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/101, 0x65}, {&(0x7f0000004940)=""/17, 0x11}], 0x2, &(0x7f00000049c0)=""/166, 0xa6}, 0x5}], 0x6, 0x0, &(0x7f0000004c00)={0x0, 0x3938700}) (async) 17:27:28 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:28 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001800)=0x14) r0 = syz_io_uring_setup(0x293f, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004d40)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004f40)=ANY=[@ANYBLOB="b40000001800010028bd7000fbdbdfae2710007ffd02fd0b0010000084001300000001000000000000000400000000000000000000000000000003000000000000000000000008000000000000000000000000000000000000000f000000000000000000000000000000000000000000000000000000040000000000000000000000000000000b0000000000000001000000020000000000000000000000000014001200050073b9ae55ab091f009c489b1143a4aa6f23d18b58000e2972567149dbd81dcd9b7f5e1d4278fd7aea3a0fc595950caa65b136dc6c6192a5090eb25c38f6841265481da6f5fd214dd3a2c4aa80453549caf53bf90fe60d7607dcdfaefa0767ddf5414766dbedcaffba2bf22b15afb53080ba3c88e907a90dd17000b89e883f5c5c082a9a7a9ee8147eca0d9b070606be476e74e3d2a4527169e7346e1eaa1b5d"], 0xb4}, 0x1, 0x0, 0x0, 0xa0}, 0x8000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3, &(0x7f0000000340)=""/117, 0x75}, 0x401}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f00000016c0)=""/73, 0x49}, 0x10001}], 0x2, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000001840)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/222, 0xde}, {&(0x7f00000019c0)=""/212, 0xd4}, {&(0x7f0000001ac0)=""/199, 0xc7}], 0x3, &(0x7f0000001c00)=""/223, 0xdf}, 0x1ff}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/194, 0xc2}], 0x1, &(0x7f0000001ec0)=""/96, 0x60}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000001fc0)}, {&(0x7f0000003080)=""/187, 0xbb}], 0x3, &(0x7f0000003140)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000004140)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f00000041c0)=""/33, 0x21}, {&(0x7f0000004200)=""/182, 0xb6}, {&(0x7f00000042c0)=""/217, 0xd9}, {&(0x7f00000043c0)=""/132, 0x84}], 0x4, &(0x7f00000044c0)=""/41, 0x29}, 0xff}, {{&(0x7f0000004500)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004580)=""/157, 0x9d}, {&(0x7f0000004640)=""/52, 0x34}, {&(0x7f0000004680)=""/247, 0xf7}, {&(0x7f0000004780)=""/52, 0x34}], 0x4, &(0x7f0000004800)=""/189, 0xbd}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/101, 0x65}, {&(0x7f0000004940)=""/17, 0x11}], 0x2, &(0x7f00000049c0)=""/166, 0xa6}, 0x5}], 0x6, 0x0, &(0x7f0000004c00)={0x0, 0x3938700}) [ 3405.685413][ T1780] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 3405.773689][ T1781] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. 17:27:28 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x18d2, 0x6016, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) 17:27:28 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, 0x0, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:28 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x8000000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:28 executing program 1: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:28 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001800)=0x14) r0 = syz_io_uring_setup(0x293f, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004d40)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004f40)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0xa0}, 0x8000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3, &(0x7f0000000340)=""/117, 0x75}, 0x401}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f00000016c0)=""/73, 0x49}, 0x10001}], 0x2, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000001840)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/222, 0xde}, {&(0x7f00000019c0)=""/212, 0xd4}, {&(0x7f0000001ac0)=""/199, 0xc7}], 0x3, &(0x7f0000001c00)=""/223, 0xdf}, 0x1ff}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/194, 0xc2}], 0x1, &(0x7f0000001ec0)=""/96, 0x60}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000001fc0)}, {&(0x7f0000003080)=""/187, 0xbb}], 0x3, &(0x7f0000003140)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000004140)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f00000041c0)=""/33, 0x21}, {&(0x7f0000004200)=""/182, 0xb6}, {&(0x7f00000042c0)=""/217, 0xd9}, {&(0x7f00000043c0)=""/132, 0x84}], 0x4, &(0x7f00000044c0)=""/41, 0x29}, 0xff}, {{&(0x7f0000004500)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004580)=""/157, 0x9d}, {&(0x7f0000004640)=""/52, 0x34}, {&(0x7f0000004680)=""/247, 0xf7}, {&(0x7f0000004780)=""/52, 0x34}], 0x4, &(0x7f0000004800)=""/189, 0xbd}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/101, 0x65}, {&(0x7f0000004940)=""/17, 0x11}], 0x2, &(0x7f00000049c0)=""/166, 0xa6}, 0x5}], 0x6, 0x0, &(0x7f0000004c00)={0x0, 0x3938700}) getsockname$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001800)=0x14) (async) syz_io_uring_setup(0x293f, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x80000000}}]}]}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000004d40)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004f40)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0xa0}, 0x8000) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x3, &(0x7f0000000340)=""/117, 0x75}, 0x401}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)=""/146, 0x92}], 0x1, &(0x7f00000016c0)=""/73, 0x49}, 0x10001}], 0x2, 0x1000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000001840)=@qipcrtr, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000018c0)=""/222, 0xde}, {&(0x7f00000019c0)=""/212, 0xd4}, {&(0x7f0000001ac0)=""/199, 0xc7}], 0x3, &(0x7f0000001c00)=""/223, 0xdf}, 0x1ff}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/194, 0xc2}], 0x1, &(0x7f0000001ec0)=""/96, 0x60}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000001fc0)}, {&(0x7f0000003080)=""/187, 0xbb}], 0x3, &(0x7f0000003140)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000004140)=@phonet, 0x80, &(0x7f0000004480)=[{&(0x7f00000041c0)=""/33, 0x21}, {&(0x7f0000004200)=""/182, 0xb6}, {&(0x7f00000042c0)=""/217, 0xd9}, {&(0x7f00000043c0)=""/132, 0x84}], 0x4, &(0x7f00000044c0)=""/41, 0x29}, 0xff}, {{&(0x7f0000004500)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004580)=""/157, 0x9d}, {&(0x7f0000004640)=""/52, 0x34}, {&(0x7f0000004680)=""/247, 0xf7}, {&(0x7f0000004780)=""/52, 0x34}], 0x4, &(0x7f0000004800)=""/189, 0xbd}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/101, 0x65}, {&(0x7f0000004940)=""/17, 0x11}], 0x2, &(0x7f00000049c0)=""/166, 0xa6}, 0x5}], 0x6, 0x0, &(0x7f0000004c00)={0x0, 0x3938700}) (async) 17:27:28 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0, 0x40000000009, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r5 = signalfd(r4, &(0x7f0000000080)={[0x4]}, 0x8) fstat(r5, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) accept4$alg(r3, 0x0, 0x0, 0x80000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 17:27:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:29 executing program 1: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080), &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:29 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:29 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0, 0x40000000009, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r5 = signalfd(r4, &(0x7f0000000080)={[0x4]}, 0x8) fstat(r5, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) accept4$alg(r3, 0x0, 0x0, 0x80000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0, 0x40000000009, 0xffffffffffffffff, 0x0) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) signalfd(r4, &(0x7f0000000080)={[0x4]}, 0x8) (async) fstat(r5, &(0x7f00000002c0)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) accept4$alg(r3, 0x0, 0x0, 0x80000) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:27:29 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0, 0x40000000009, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r5 = signalfd(r4, &(0x7f0000000080)={[0x4]}, 0x8) fstat(r5, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) accept4$alg(r3, 0x0, 0x0, 0x80000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0xc080661a, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)}], 0x1}}], 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0, 0x40000000009, 0xffffffffffffffff, 0x0) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) signalfd(r4, &(0x7f0000000080)={[0x4]}, 0x8) (async) fstat(r5, &(0x7f00000002c0)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0xb3, 0x80, 0x5, 0x32, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7820, 0x81, 0x9}}) (async) accept4$alg(r3, 0x0, 0x0, 0x80000) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 17:27:29 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1ed}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000008980)=[{&(0x7f0000002040)="8f", 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$befs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="5c910b6daccb195b8396096828166aaa3b8474d03f3367ef2c0225334af58067d4fe70ee2af107c7ef54edb20bdd828c109f38be5725efedeec20c76171a1a35a8c0a4b76359912974e4ae61877642ed7fce59d9d673a7e2cb37a136a23fb92da1bedbb1f3ea31e2756b41785718094bd7b2e432bfd024b27f12d25122a3c392e5f13b3c6f9a1271d7cd0ae91eb66b67853b1f53c0369c428fb38656d52d262901050fdea0df3614675c3811b6590edfae7337e4a949b7a2c28f12f3c4ca7ca07af025c031805fcf3b2e292c9e829aa695b4d7ab3e34c1b3cec7866cb4d0", 0xde, 0x4}], 0x21010, &(0x7f0000000440)={[{'cbc(blowfish)\x00'}, {'\x00'}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', 0x0}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17:27:29 executing program 1: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x80000000000, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@fat=@codepage={'codepage', 0x3d, '860'}}]}) 17:27:29 executing program 0: syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 17:27:29 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4dc3, &(0x7f0000000080)={0x0, 0x1ac5, 0x1, 0x3, 0x15c}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 3407.359824][ T3632] ------------[ cut here ]------------ [ 3407.365882][ T3632] WARNING: CPU: 0 PID: 3632 at kernel/sched/wait.c:245 __wake_up_pollfree+0x1c7/0x1d0 [ 3407.375443][ T3632] Modules linked in: [ 3407.379343][ T3632] CPU: 0 PID: 3632 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 3407.387668][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3407.397721][ T3632] RIP: 0010:__wake_up_pollfree+0x1c7/0x1d0 [ 3407.403529][ T3632] Code: 0d 00 00 c6 44 08 0f 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 a0 00 00 00 75 13 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b eb a7 e8 f0 69 b1 08 55 41 57 41 56 41 55 41 54 53 48 83 ec [ 3407.423128][ T3632] RSP: 0018:ffffc9000287f760 EFLAGS: 00010012 [ 3407.429194][ T3632] RAX: ffff88814e4bf7b0 RBX: 0000000000000046 RCX: dffffc0000000000 [ 3407.437160][ T3632] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 3407.445124][ T3632] RBP: ffffc9000287f848 R08: dffffc0000000000 R09: ffffed101442b6fa [ 3407.453088][ T3632] R10: ffffed101442b6fa R11: 0000000000000000 R12: 0000000000000000 [ 3407.461049][ T3632] R13: ffffc9000287f7a0 R14: 1ffff9200050fef4 R15: ffff8880a215b808 [ 3407.469014][ T3632] FS: 000055555663c400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 3407.477937][ T3632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3407.484510][ T3632] CR2: 00007ff0e01db000 CR3: 000000002bbb3000 CR4: 00000000003506f0 [ 3407.492474][ T3632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3407.500437][ T3632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3407.508400][ T3632] Call Trace: [ 3407.511676][ T3632] [ 3407.514608][ T3632] ? __wake_up_sync+0x1c0/0x1c0 [ 3407.519455][ T3632] ? wait_consider_task+0x1995/0x3020 [ 3407.524833][ T3632] ? do_raw_spin_unlock+0x134/0x8a0 [ 3407.530027][ T3632] ? free_pid+0x25c/0x280 [ 3407.534353][ T3632] __cleanup_sighand+0x48/0xa0 [ 3407.539114][ T3632] release_task+0x115f/0x15d0 [ 3407.543794][ T3632] ? wait_consider_task+0x1995/0x3020 [ 3407.549164][ T3632] ? delayed_put_task_struct+0xb0/0xb0 [ 3407.554626][ T3632] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3407.559820][ T3632] ? lockdep_hardirqs_on+0x95/0x140 [ 3407.565018][ T3632] wait_consider_task+0x1995/0x3020 [ 3407.570231][ T3632] ? do_wait+0x291/0x9d0 [ 3407.574469][ T3632] ? child_wait_callback+0x210/0x210 [ 3407.579744][ T3632] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 3407.585630][ T3632] ? _raw_spin_unlock+0x40/0x40 [ 3407.590481][ T3632] do_wait+0x291/0x9d0 [ 3407.594551][ T3632] kernel_wait4+0x2a3/0x3c0 [ 3407.599049][ T3632] ? __ia32_sys_waitid+0xc0/0xc0 [ 3407.603985][ T3632] ? trace_sched_process_wait+0x260/0x260 [ 3407.609717][ T3632] __x64_sys_wait4+0x130/0x1e0 [ 3407.614481][ T3632] ? kernel_wait+0x230/0x230 [ 3407.619074][ T3632] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3407.625045][ T3632] ? lockdep_hardirqs_on+0x95/0x140 [ 3407.630239][ T3632] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3407.636216][ T3632] do_syscall_64+0x44/0xd0 [ 3407.640631][ T3632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3407.646520][ T3632] RIP: 0033:0x7efe39893487 [ 3407.650931][ T3632] Code: 89 7c 24 10 48 89 4c 24 18 e8 35 50 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 65 50 02 00 8b 44 [ 3407.670536][ T3632] RSP: 002b:00007fff7fb6da50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 3407.678945][ T3632] RAX: ffffffffffffffda RBX: 00000000000032d8 RCX: 00007efe39893487 [ 3407.686912][ T3632] RDX: 0000000040000001 RSI: 00007fff7fb6dadc RDI: 00000000ffffffff [ 3407.694875][ T3632] RBP: 00007fff7fb6dadc R08: 0000000000000000 R09: 0000000000000010 [ 3407.702842][ T3632] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 3407.710806][ T3632] R13: 000000000033fd64 R14: 0000000000000014 R15: 00007fff7fb6db40 [ 3407.718784][ T3632] [ 3407.721800][ T3632] Kernel panic - not syncing: panic_on_warn set ... [ 3407.728376][ T3632] CPU: 0 PID: 3632 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller #0 [ 3407.736691][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3407.746739][ T3632] Call Trace: [ 3407.750016][ T3632] [ 3407.752946][ T3632] dump_stack_lvl+0x1dc/0x2d8 [ 3407.757624][ T3632] ? show_regs_print_info+0x12/0x12 [ 3407.762813][ T3632] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 3407.768534][ T3632] panic+0x2d6/0x810 [ 3407.772423][ T3632] ? __warn+0x13e/0x270 [ 3407.776569][ T3632] ? nmi_panic+0x90/0x90 [ 3407.780816][ T3632] __warn+0x26a/0x270 [ 3407.784796][ T3632] ? __wake_up_pollfree+0x1c7/0x1d0 [ 3407.789990][ T3632] ? __wake_up_pollfree+0x1c7/0x1d0 [ 3407.795183][ T3632] report_bug+0x1b1/0x2e0 [ 3407.799513][ T3632] handle_bug+0x3d/0x70 [ 3407.803667][ T3632] exc_invalid_op+0x16/0x40 [ 3407.808170][ T3632] asm_exc_invalid_op+0x12/0x20 [ 3407.813018][ T3632] RIP: 0010:__wake_up_pollfree+0x1c7/0x1d0 [ 3407.818830][ T3632] Code: 0d 00 00 c6 44 08 0f 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 a0 00 00 00 75 13 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b eb a7 e8 f0 69 b1 08 55 41 57 41 56 41 55 41 54 53 48 83 ec [ 3407.838432][ T3632] RSP: 0018:ffffc9000287f760 EFLAGS: 00010012 [ 3407.844494][ T3632] RAX: ffff88814e4bf7b0 RBX: 0000000000000046 RCX: dffffc0000000000 [ 3407.852458][ T3632] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 3407.860419][ T3632] RBP: ffffc9000287f848 R08: dffffc0000000000 R09: ffffed101442b6fa [ 3407.868406][ T3632] R10: ffffed101442b6fa R11: 0000000000000000 R12: 0000000000000000 [ 3407.876371][ T3632] R13: ffffc9000287f7a0 R14: 1ffff9200050fef4 R15: ffff8880a215b808 [ 3407.884355][ T3632] ? __wake_up_sync+0x1c0/0x1c0 [ 3407.889201][ T3632] ? wait_consider_task+0x1995/0x3020 [ 3407.894572][ T3632] ? do_raw_spin_unlock+0x134/0x8a0 [ 3407.899765][ T3632] ? free_pid+0x25c/0x280 [ 3407.904095][ T3632] __cleanup_sighand+0x48/0xa0 [ 3407.908857][ T3632] release_task+0x115f/0x15d0 [ 3407.913539][ T3632] ? wait_consider_task+0x1995/0x3020 [ 3407.918906][ T3632] ? delayed_put_task_struct+0xb0/0xb0 [ 3407.924363][ T3632] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3407.929555][ T3632] ? lockdep_hardirqs_on+0x95/0x140 [ 3407.934752][ T3632] wait_consider_task+0x1995/0x3020 [ 3407.939959][ T3632] ? do_wait+0x291/0x9d0 [ 3407.944197][ T3632] ? child_wait_callback+0x210/0x210 [ 3407.949475][ T3632] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 3407.955369][ T3632] ? _raw_spin_unlock+0x40/0x40 [ 3407.960218][ T3632] do_wait+0x291/0x9d0 [ 3407.964289][ T3632] kernel_wait4+0x2a3/0x3c0 [ 3407.968790][ T3632] ? __ia32_sys_waitid+0xc0/0xc0 [ 3407.973725][ T3632] ? trace_sched_process_wait+0x260/0x260 [ 3407.979445][ T3632] __x64_sys_wait4+0x130/0x1e0 [ 3407.984211][ T3632] ? kernel_wait+0x230/0x230 [ 3407.988806][ T3632] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3407.994781][ T3632] ? lockdep_hardirqs_on+0x95/0x140 [ 3407.999977][ T3632] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 3408.005953][ T3632] do_syscall_64+0x44/0xd0 [ 3408.010367][ T3632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3408.016253][ T3632] RIP: 0033:0x7efe39893487 [ 3408.020668][ T3632] Code: 89 7c 24 10 48 89 4c 24 18 e8 35 50 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 65 50 02 00 8b 44 [ 3408.040267][ T3632] RSP: 002b:00007fff7fb6da50 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 3408.048683][ T3632] RAX: ffffffffffffffda RBX: 00000000000032d8 RCX: 00007efe39893487 [ 3408.056668][ T3632] RDX: 0000000040000001 RSI: 00007fff7fb6dadc RDI: 00000000ffffffff [ 3408.064655][ T3632] RBP: 00007fff7fb6dadc R08: 0000000000000000 R09: 0000000000000010 [ 3408.072633][ T3632] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 3408.080598][ T3632] R13: 000000000033fd64 R14: 0000000000000014 R15: 00007fff7fb6db40 [ 3408.088582][ T3632] [ 3408.092080][ T3632] Kernel Offset: disabled [ 3408.096751][ T3632] Rebooting in 86400 seconds..